VULNERABILITIES IN THE C:\scripts-vulnerable REPORT FROM 2/18/2023 4:12:33 PM

C:\scripts-vulnerable\vulnerable-php-code-examples-master\src\basic-collection.php:

VARIABLE $name DEPENDS ON INPUT:

$name = $_GET['name'];

C:\scripts-vulnerable\vulnerable-php-code-examples-master\src\basic-collection.php:

VARIABLE $id DEPENDS ON INPUT:

$id = $_POST['id'];

C:\scripts-vulnerable\vulnerable-php-code-examples-master\src\basic-collection.php:

VARIABLE $cmd DEPENDS ON INPUT:

$cmd = $_COOKIE['cmd'];

C:\scripts-vulnerable\vulnerable-php-code-examples-master\src\sql-injection.php:

VARIABLE $sql DEPENDS ON INPUT:

$sql = 'SELECT * FROM employees WHERE employeeId = '. $_GET['id'];

C:\scripts-vulnerable\vulnerable-php-code-examples-master\src\tool-examples\progpilot.php:

VARIABLE $var7 DEPENDS ON INPUT:

$var7 = $_GET["p"];

C:\scripts-vulnerable\vulnerable-php-code-examples-master\src\tool-examples\progpilot.php:

VARIABLE $var4 DEPENDS ON INPUT:

$var4 = $var7;

C:\scripts-vulnerable\VulnerablePhpScript-master\app\controllers\home.php:

VARIABLE $req DEPENDS ON INPUT:

            $req = $db->dbPrepare("INSERT INTO questions VALUES('', '".$_POST['question']."', '".$_POST['category']."', NOW(), '". $_SESSION["user"]->getId()."')");

C:\scripts-vulnerable\VulnerablePhpScript-master\app\controllers\home.php:

VARIABLE $quesResponse DEPENDS ON INPUT:

        $quesResponse = $db->dbQuery("SELECT q.id, u.name, q.contenu, c.category FROM questions q JOIN users u ON u.id = q.user_id JOIN category c ON q.categorie_id = c.id WHERE q.id = '".$id."'");

C:\scripts-vulnerable\VulnerablePhpScript-master\app\controllers\home.php:

VARIABLE $question DEPENDS ON INPUT:

        $question = Helpers::cursorToArray($quesResponse);

C:\scripts-vulnerable\VulnerablePhpScript-master\app\controllers\home.php:

VARIABLE $categories, "question" DEPENDS ON INPUT:

        parent::view("single", ["categories"=>$categories, "question"=>$question[0]]);

C:\scripts-vulnerable\VulnerablePhpScript-master\app\controllers\home.php:

VARIABLE $response DEPENDS ON INPUT:

            $response =  $db->dbQuery("SELECT * FROM users WHERE email = '". $_POST['email']."' and password = '". $_POST['key']."'");

C:\scripts-vulnerable\VulnerablePhpScript-master\app\core\Controller.php:

VARIABLE $model DEPENDS ON INPUT:

        $model = require_once("../app/models/".$name.".php");

C:\scripts-vulnerable\VulnerablePhpScript-master\app\models\User.php:

VARIABLE $this->id DEPENDS ON INPUT:

        $this->id = $id;

C:\scripts-vulnerable\VulnerablePhpScript-master\app\models\User.php:

VARIABLE $this->fullname DEPENDS ON INPUT:

       $this->fullname = $name;

C:\scripts-vulnerable\webapp-php-lab-master\csrf_naked_post.php:

VARIABLE $input DEPENDS ON INPUT:

    $input = urldecode($_POST['input']);

C:\scripts-vulnerable\webapp-php-lab-master\csrf_post.php:

VARIABLE $post_token DEPENDS ON INPUT:

        $post_token = $_POST['csrf_token'];

C:\scripts-vulnerable\webapp-php-lab-master\lfi_get.php:

VARIABLE $include DEPENDS ON INPUT:

    $include = urldecode($_GET['include']);

C:\scripts-vulnerable\webapp-php-lab-master\rfi_get.php:

VARIABLE $file DEPENDS ON INPUT:

    $file = fopen($include, "r");

C:\scripts-vulnerable\webapp-php-lab-master\xss_get.php:

VARIABLE $origin DEPENDS ON INPUT:

    $origin = $_SERVER['HTTP_ORIGIN'];

C:\scripts-vulnerable\webapp-php-lab-master\xss_get.php:

VARIABLE $event DEPENDS ON INPUT:

    $event = urldecode($_GET['event']);

C:\scripts-vulnerable\VulnerablePhpScript-master\app\controllers\home.php:

VARIABLE $categories, "questions" DEPENDS ON INPUT:

        parent::view("index", ["categories"=>$categories, "questions"=>$quesResponse]);

VARIABLES THAT DEPENDS ON INPUT:

$GLOBALS
$_SERVER
$_GET
$_POST
$_FILES
$_REQUEST
$_SESSION
$_ENV
$_COOKIE
$argc
$argv
$name
$id
$cmd
$sql
$var7
$var4
$req
$quesResponse
$question
$categories, "question"
$response
$model
$this->id
$this->fullname
$input
$post_token
$include
$file
$origin
$event
$categories, "questions"

POSSIBLY VULNERABLE SOURCE FILE: C:\scripts-vulnerable\vulnerable-php-code-examples-master\src\basic-collection.php

C:\scripts-vulnerable\vulnerable-php-code-examples-master\src\basic-collection.php: ():

mysql_query("SELECT user FROM users WHERE id = ". $id, )

C:\scripts-vulnerable\vulnerable-php-code-examples-master\src\basic-collection.php: ():

exec("cat /var/log/apache2/access.log | grep ". $cmd, )

POSSIBLY VULNERABLE SOURCE FILE: C:\scripts-vulnerable\vulnerable-php-code-examples-master\src\tool-examples\php-security-scanner.php

C:\scripts-vulnerable\vulnerable-php-code-examples-master\src\tool-examples\php-security-scanner.php: foo():

mysql_query("SELECT * FROM foo WHERE name = '$name'", )

POSSIBLY VULNERABLE SOURCE FILE: C:\scripts-vulnerable\vulnerable-php-code-examples-master\src\tool-examples\phpcs-security-audit.php

C:\scripts-vulnerable\vulnerable-php-code-examples-master\src\tool-examples\phpcs-security-audit.php: ():

exec($_GET, )

C:\scripts-vulnerable\vulnerable-php-code-examples-master\src\tool-examples\phpcs-security-audit.php: ():

mysql_query($_GET, )

POSSIBLY VULNERABLE SOURCE FILE: C:\scripts-vulnerable\VulnerablePhpScript-master\app\core\Helpers.php

C:\scripts-vulnerable\VulnerablePhpScript-master\app\core\Helpers.php: redirectTo():

header("location: http://".$_SERVER['SERVER_NAME']."/".Helpers::relativeCwd()."". $url, )

POSSIBLY VULNERABLE SOURCE FILE: C:\scripts-vulnerable\webapp-php-lab-master\cmd_inj_get.php

C:\scripts-vulnerable\webapp-php-lab-master\cmd_inj_get.php: ():

exec($cmd, $output, )

POSSIBLY VULNERABLE SOURCE FILE: C:\scripts-vulnerable\webapp-php-lab-master\csrf_naked_post.php

C:\scripts-vulnerable\webapp-php-lab-master\csrf_naked_post.php: ():

file_put_contents($profile, $input, )

POSSIBLY VULNERABLE SOURCE FILE: C:\scripts-vulnerable\webapp-php-lab-master\csrf_post.php

C:\scripts-vulnerable\webapp-php-lab-master\csrf_post.php: ():

file_put_contents($profile, $input, )

POSSIBLY VULNERABLE SOURCE FILE: C:\scripts-vulnerable\webapp-php-lab-master\lfi_get.php

C:\scripts-vulnerable\webapp-php-lab-master\lfi_get.php: ():

file_exists($include, )

C:\scripts-vulnerable\webapp-php-lab-master\lfi_get.php: ():

file_exists($include, )

POSSIBLY VULNERABLE SOURCE FILE: C:\scripts-vulnerable\webapp-php-lab-master\rfi_get.php

C:\scripts-vulnerable\webapp-php-lab-master\rfi_get.php: ():

fopen($include, "r", )

C:\scripts-vulnerable\webapp-php-lab-master\rfi_get.php: ():

fgets($file, )

C:\scripts-vulnerable\webapp-php-lab-master\rfi_get.php: ():

fgets($file, )

POSSIBLY VULNERABLE SOURCE FILE: C:\scripts-vulnerable\webapp-php-lab-master\xss_get.php

C:\scripts-vulnerable\webapp-php-lab-master\xss_get.php: ():

header("Access-Control-Allow-Origin: $origin", )

-----

C:\scripts-vulnerable\vulnerable-php-code-examples-master\src\tool-examples\php-security-scanner.php: bar() CALLS VULNERABLE foo()

-----

C:\scripts-vulnerable\VulnerablePhpScript-master\app\controllers\home.php: index() CALLS VULNERABLE redirectTo()

C:\scripts-vulnerable\VulnerablePhpScript-master\app\controllers\home.php: index() CALLS VULNERABLE redirectTo()

C:\scripts-vulnerable\VulnerablePhpScript-master\app\controllers\home.php: single() CALLS VULNERABLE redirectTo()

C:\scripts-vulnerable\VulnerablePhpScript-master\app\controllers\home.php: login() CALLS VULNERABLE redirectTo()

C:\scripts-vulnerable\VulnerablePhpScript-master\app\controllers\home.php: login() CALLS VULNERABLE redirectTo()

C:\scripts-vulnerable\VulnerablePhpScript-master\app\controllers\home.php: signup() CALLS VULNERABLE redirectTo()

C:\scripts-vulnerable\VulnerablePhpScript-master\app\controllers\home.php: signup() CALLS VULNERABLE redirectTo()

C:\scripts-vulnerable\VulnerablePhpScript-master\app\controllers\home.php: logout() CALLS VULNERABLE redirectTo()