cxdcox / DVWA

git clone https://github.com/ethicalhack3r/DVWA.git
GNU General Public License v3.0
1 stars 0 forks source link

CX File_Disclosure @ vulnerabilities/view_source_all.php [master] #132

Open cxdcox opened 4 years ago

cxdcox commented 4 years ago

File_Disclosure issue exists @ vulnerabilities/view_source_all.php in branch master

The input obtained via <?php in the file vulnerabilities\view_source_all.php at line 1 is used to determine the file to be read by <?php in the file vulnerabilities\view_source_all.php at line 1, potentially disclosing the contents of that file.

Severity: High

CWE:538

Checkmarx

Lines: 11


Code (Line #11):

$id = $_GET[ 'id' ];