CX Code_Injection @ vulnerabilities/view_help.php [master]

[ghost]

Code_Injection issue exists @ vulnerabilities/view_help.php in branch master

The application's <?php method receives and dynamically executes user-controlled code using eval, at line 1 of vulnerabilities\view_help.php. This could enable an attacker to inject and run arbitrary code.  The attacker can inject the executed code via user input, _GET, which is retrieved by the application in the <?php method, at line 1 of vulnerabilities\view_help.php.

Severity: High

CWE:94

Vulnerability details and guidance

Internal Guidance

Checkmarx

Training Recommended Fix

Lines: 11

---

Code (Line #11):

$id       = $_GET[ 'id' ];

---

[ghost]

Issue still exists.

[ghost]

Issue still exists.

[ghost]

Issue still exists.

[ghost]

Issue still exists.