search

wurzeljena / problembase

Database for mathematical problems, for Wurzel e.V.
1 stars 0 forks source link

Security vulnerability #13

Closed aaronpuchert closed 11 years ago

aaronpuchert commented 11 years ago

Using the elegant snippet of code for reading in parameters opens the door to exploits. Users can overwrite variables like $_SESSION or other globals.

aaronpuchert commented 11 years ago

Solved in 94739b9b0d7839e684383d4aae79082be0c145d3 by using a less elegant idea.