Package illustrating a test case

Test case 1948

Type: source code
State: bad
Status: candidate
Language: PHP
Submission Date: 13 Mar 2007

Description

The test case shows a PHP File Inclusion vulnerability. The script ca represents a basic template engine.

Flaws

CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

Test Suites

Web Applications in PHP

Have any comments on this test case? Please, send us an email.