DerScanner
Home / Vulnerability Database / PHP : Global variable overwrite
PHP

PHP : Global variable overwrite

Classification

CWE
CWE-473

Overview

The application calls a function that can overwrite the values of global variables.

Functions that overwrite the default values of global variables allow an attacker to influence the execution of the code that depends on these variables.

References

  1. CWE-473: PHP External Variable Modification
MEDIUM

DerScanner Severity Score

Do you want to fix PHP : Global variable overwrite in your application?

See also

PHP

PHP : Null salt

PHP

PHP : Empty password

PHP

PHP : Empty salt