{"action":"closed","issue":{"url":"https://api.github.com/repos/ifnull/sendgrid-magento/issues/1","labels_url":"https://api.github.com/repos/ifnull/sendgrid-magento/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/ifnull/sendgrid-magento/issues/1/comments","events_url":"https://api.github.com/repos/ifnull/sendgrid-magento/issues/1/events","html_url":"https://github.com/ifnull/sendgrid-magento/issues/1","id":56857341,"number":1,"title":"Arbitrary file inclusion via the email field","user":{"login":"ifnull","id":1395765,"avatar_url":"https://avatars.githubusercontent.com/u/1395765?v=3","gravatar_id":"","url":"https://api.github.com/users/ifnull","html_url":"https://github.com/ifnull","followers_url":"https://api.github.com/users/ifnull/followers","following_url":"https://api.github.com/users/ifnull/following{/other_user}","gists_url":"https://api.github.com/users/ifnull/gists{/gist_id}","starred_url":"https://api.github.com/users/ifnull/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ifnull/subscriptions","organizations_url":"https://api.github.com/users/ifnull/orgs","repos_url":"https://api.github.com/users/ifnull/repos","events_url":"https://api.github.com/users/ifnull/events{/privacy}","received_events_url":"https://api.github.com/users/ifnull/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":{"login":"ifnull","id":1395765,"avatar_url":"https://avatars.githubusercontent.com/u/1395765?v=3","gravatar_id":"","url":"https://api.github.com/users/ifnull","html_url":"https://github.com/ifnull","followers_url":"https://api.github.com/users/ifnull/followers","following_url":"https://api.github.com/users/ifnull/following{/other_user}","gists_url":"https://api.github.com/users/ifnull/gists{/gist_id}","starred_url":"https://api.github.com/users/ifnull/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ifnull/subscriptions","organizations_url":"https://api.github.com/users/ifnull/orgs","repos_url":"https://api.github.com/users/ifnull/repos","events_url":"https://api.github.com/users/ifnull/events{/privacy}","received_events_url":"https://api.github.com/users/ifnull/received_events","type":"User","site_admin":false},"milestone":null,"comments":0,"created_at":"2015-02-06T19:36:45Z","updated_at":"2015-02-06T19:38:14Z","closed_at":"2015-02-06T19:38:14Z","body":"Use of is_subclass_of causes Autoloader to try and load the email address as a include.\r\n\r\n### Example\r\n\r\n```\r\n2015-02-03T20:12:11+00:00 ERR (3): Warning: include(Hello@example.com.php): failed to open stream: No such file or directory  in  /chroot/data/******/******/html/lib/Varien/Autoload.php on line 94\r\n2015-02-03T20:12:11+00:00 ERR (3): Warning: include(): Failed opening 'Hello@example.com.php' for inclusion (include_path='/chroot/data/******/******/html/app/code/local:/chroot/data/******/******/html/app/code/community:/chroot/data/******/******/html/app/code/core:/chroot/data/******/******/html/lib:.:/usr/share/pear:/usr/share/php')  in /chroot/data/******/******/html/lib/Varien/Autoload.php on line 94\r\n2015-02-03T20:12:11+00:00 ERR (3): Warning: include(Hello.php): failed to open stream: No such file or directory  in /chroot/data/******/******/html/lib/Varien/Autoload.php on line 94\r\n2015-02-03T20:12:11+00:00 ERR (3): Warning: include(): Failed opening 'Hello.php' for inclusion (include_path='/chroot/data/*******/******/html/app/code/local:/chroot/data/*******/******/html/app/code/community:/chroot/data/*******/******/html/app/code/core:/chroot/data/*******/******/html/lib:.:/usr/share/pear:/usr/share/php')  in /chroot/data/*******/******/html/lib/Varien/Autoload.php on line 94\r\n```\r\n\r\n### References\r\nhttp://magento.stackexchange.com/questions/54374/possible-arbitrary-file-inclusion/54378#54378"}}