[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Ban v0.1 (bannieres.php) File Include


mahmood ali ha scritto:
In Line 13 :_

include "$chemin/includes/connexion.php" ;
Please, read source code better!
At line 11 the variable $chemin is setted as "."

Line 11:
$chemin = "." ;

Hower a security issue could be found at line 26 and line 32 where a sql injection is possible due to uncheked $id variable

Regards


Mail converted by mhonarc 2.6.15
This archive provided courtesy of JSW4.NET, Internet Hosting Services for Small Business.