CX File_Disclosure @ vulnerabilities/view_source.php [master]

[ghost]

File_Disclosure issue exists @ vulnerabilities/view_source.php in branch master

The input obtained via <?php in the file vulnerabilities\view_source.php at line 1 is used to determine the file to be read by <?php in the file vulnerabilities\view_source.php at line 1, potentially disclosing the contents of that file.

Severity: High

CWE:538

Vulnerability details and guidance

Internal Guidance

Checkmarx

Training Recommended Fix

Lines: 11 12

---

Code (Line #11):

$id       = $_GET[ 'id' ];

---

Code (Line #12):

$security = $_GET[ 'security' ];

---

[ghost]

Issue still exists.

[ghost]

Issue still exists.

[ghost]

Issue still exists.

[ghost]

Issue still exists.