CWE-473—PHP External Variable Modification

Weakness Name

PHP External Variable Modification

Description

A PHP application does not properly protect against the modification of variables from external sources, such as query parameters or cookies. This can expose the application to numerous weaknesses that would not exist otherwise.

Common Consequences

Scope:

Integrity

Impact:

Modify Application Data

Related Weaknesses

• CWE-98Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')High
• CWE-471Modification of Assumed-Immutable Data (MAID)