CWE-473—PHP External Variable Modification

名称

PHP External Variable Modification

描述

A PHP application does not properly protect against the modification of variables from external sources, such as query parameters or cookies. This can expose the application to numerous weaknesses that would not exist otherwise.

常见后果

范围：

Integrity

影响：

Modify Application Data

相关 CWE

• CWE-98Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')High
• CWE-471Modification of Assumed-Immutable Data (MAID)