search

webarx-security / wpbullet

A static code analysis for WordPress (and PHP)
GNU General Public License v2.0
229 stars 48 forks source link

FileInclusion.py Module issues #6

Closed blue-bird1 closed 4 years ago

blue-bird1 commented 4 years ago

I am confused about the existing modules. It contains "require_once" functions for executing code. And "show_source" functions that only read files. They don't seem to be the same vulnerability

blue-bird1 commented 4 years ago

according to https://en.wikipedia.org/wiki/File_inclusion_vulnerability. Must be code execution .

only

        "include",
        "require",
        "include_once",
        "require_once",

Belongs to FileInclusion