Home / Vulnerability Database / PHP : Trust boundary violation
PHP

PHP : Trust boundary violation

Classification

Overview

Data from trusted and untrusted sources are stored in the same data structure. The developer may mistakenly consider that the data in the entire data structure come from a trusted source.

Trusted and untrusted must be separated in the program. In the secure program untrusted data can cross the trust boundary becoming trusted only by passing validation. Using the same data structures to store both trusted and untrusted data blurs the trust boundary and leads to vulnerabilities.

MEDIUM

DerScanner Severity Score

Do you want to fix PHP : Trust boundary violation in your application?

See also

PHP

PHP : Null salt

PHP

PHP : Empty password

PHP

PHP : Empty salt