CX Path_Traversal @ vulnerabilities/upload/source/high.php [master]

[cxdcox]

Path_Traversal issue exists @ vulnerabilities/upload/source/high.php in branch master

Method <?php at line 1 of vulnerabilities\upload\source\high.php gets dynamic data from the _FILES element. This element’s value then flows through the code and is eventually used in a file path for local disk access in <?php at line 1 of vulnerabilities\upload\source\high.php. This may cause a Path Traversal vulnerability.

Severity: Medium

CWE:36

Checkmarx

Lines: 6 12

---

Code (Line #6):

    $target_path .= basename( $_FILES[ 'uploaded' ][ 'name' ] );

---

Code (Line #12):

    $uploaded_tmp  = $_FILES[ 'uploaded' ][ 'tmp_name' ];

---