CX SQL_Injection @ vulnerabilities/brute/source/low.php [master]

[cxdcox]

SQL_Injection issue exists @ vulnerabilities/brute/source/low.php in branch master

Method <?php at line 1 of vulnerabilities\brute\source\low.php gets user input from the _GET element. This element’s value then flows through the code without being properly sanitized or validated, and is eventually used in a database query in method <?php at line 1 of vulnerabilities\brute\source\low.php. This may enable an SQL Injection attack.

Severity: High

CWE:89

Checkmarx

Lines: 5

---

Code (Line #5):

    $user = $_GET[ 'username' ];

---

[cxdcox]

Issue still exists.