search

vish07 / WackoPicko

WackoPicko is a vulnerable web application used to test web application vulnerability scanners.
MIT License
0 stars 0 forks source link

CX SQL_Injection @ website/comments/preview_comment.php [master] #6

Open vish07 opened 4 years ago

vish07 commented 4 years ago

SQL_Injection issue exists @ website/comments/preview_comment.php in branch master

Method <?php at line 1 of website\comments\preview_comment.php gets user input from the _POST element. This element’s value then flows through the code without being properly sanitized or validated, and is eventually used in a database query in method get_picture at line 110 of website\include\pictures.php. This may enable an SQL Injection attack.

Severity: High

CWE:89

Vulnerability details and guidance

Checkmarx

Lines: 18 24

Code (Line #18):

   if (!($previewid = Comments::add_preview($_POST['text'], $cur['id'], $_POST['picid'])))

Code (Line #24):

      if (!($pic = Pictures::get_picture($_POST['picid'])))
vish07 commented 4 years ago

Issue still exists.

vish07 commented 4 years ago

Issue still exists.