CX SQL_Injection @ vulnerabilities/brute/source/low.php [master]

[ghost]

SQL_Injection issue exists @ vulnerabilities/brute/source/low.php in branch master

Method <?php at line 1 of vulnerabilities\brute\source\low.php gets user input from the _GET element. This element’s value then flows through the code without being properly sanitized or validated, and is eventually used in a database query in method <?php at line 1 of vulnerabilities\brute\source\low.php. This may enable an SQL Injection attack.

Severity: High

CWE:89

Vulnerability details and guidance

Internal Guidance

Checkmarx

Training Recommended Fix

Lines: 5

---

Code (Line #5):

    $user = $_GET[ 'username' ];

---

[ghost]

Issue still exists.

[ghost]

Issue still exists.

[ghost]

Issue still exists.

[ghost]

Issue still exists.