CWE-473: PHP External Variable Modification
A PHP application does not properly protect against the modification of variables from external sources, such as query parameters or cookies. This can expose the application to numerous weaknesses that would not exist otherwise.
A kind of CWE-471 Modification of Assumed-Immutable Data (MAID).
From the CWE List. © The MITRE Corporation.
Newest
- labredescefetrj wegia WeGIA has SQL Injection via Session Variable Override in DespachoControle.php 8.8 High
- labredescefetrj wegia WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)` 9.8 Critical
- weimengcms wmcms An issue in the DelFile() function of WMCMS v4.4 allows attackers to delete arbitrary files via a... 7.5 High
- juniper junos, junos os +1 more Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable 9.8 Critical
- juniper junos, junos os +1 more Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables 5.3 Medium