DerScanner
Home / Vulnerability Database / PHP : XPath injection
PHP

PHP : XPath injection

Classification

OWASP Top 10 2013
A1-Injection
OWASP Top 10 2017
A1-Injection
OWASP Top 10 2021
A3-Injection
OWASP ASVS
Validation, Sanitization and EncodingValidation, Sanitization and Encoding
PCI DSS 4.0
6.2.4
HIPAA
§164.312 (a)(1)§164.312 (d)
CWE
CWE-643CWE-1027

Overview

The application executes XPath query built on the basis of data from an untrusted source. An attacker can change the meaning of the executed expression or execute arbitrary query.

A possible attack scenario:

  1. The application receives input data from an untrusted source.
  2. This data is used to dynamically create XPath query.
  3. An attacker get an opportunity to influence the semantics of the query or execute his/her own queries.

References

  1. OWASP Top 10 2017-A1-Injection
  2. OWASP Top 10 2013-A1-Injection
  3. CWE-643: Improper Neutralization of Data within XPath Expressions (‘XPath Injection’)
  4. CWE CATEGORY: OWASP Top Ten 2017 Category A1 - Injection
MEDIUM

DerScanner Severity Score

Do you want to fix PHP : XPath injection in your application?

See also

PHP

PHP : Null salt

PHP

PHP : Empty password

PHP

PHP : Empty salt