National Institute of Standards and Technology
Package illustrating a test case

Test case 197243

Type
source code
State
bad
Author
Bertrand Stivalet and Aurelien Delaitre
Status
candidate
Language
PHP
Submission Date

Description

Unsafe sample
input : get the field userData from the variable $_GET via an object
sanitize : use of ternary condition
File : use of untrusted data in a double quoted event handler in a script

Flaws

Test Suites

Trace
Files

Have any comments on this test case? Please, send us an email.