Draft in the CWE catalog · 4 CVEs mapped
A PHP application does not properly protect against the modification of variables from external sources, such as query parameters or cookies. This can expose the application to numerous weaknesses that would not exist otherwise.
WeGIA is a web manager for charitable institutions. Versions prior to 3.6.10 contain a SQL injection vulnerability in dao/memorando/UsuarioDAO.php. The cpf_usuario POST parameter overwrites the session-stored user identity via extract($_REQUEST) in DespachoControle::verificarDespacho(), and the attacker-controlled value is then interpolated directly into a raw SQL query, allowing any authenticated user to query the database under an arbitrary identity. Version 3.6.10 fixes the issue.
WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, an unsafe use of the `extract()` function on the `$_REQUEST` superglobal allows an unauthenticated attacker to overwrite local variables in multiple PHP scripts. This vulnerability can be leveraged to completely bypass authentication checks, allowing unauthorized access to administrative and protected areas of the WeGIA application. Version 3.6.5 fixes the issue.
🚨 An unauthenticated network-based attacker can remotely execute code just by sending a crafted request! This PHP External Variable Modification flaw in Juniper Networks' J-Web is a real game changer. 🔥 Think of it like a sneaky delivery person who can change the destination of your package before it even arrives at your door—only now, they’re changing the entire execution environment of your PHP setup! If exploited, an attacker could gain complete control over your system, executing malicious code at will. This could lead to unauthorized access to sensitive data, disruption of services, or even a complete takeover of your network. The stakes are incredibly high!