2026-09-30 13:44:32 +02:00
|
|
|
{
|
|
|
|
|
"root": "/case",
|
|
|
|
|
"families": [
|
|
|
|
|
"injection"
|
|
|
|
|
],
|
|
|
|
|
"seconds": 58.6,
|
|
|
|
|
"questions": 1,
|
|
|
|
|
"completed": 1,
|
|
|
|
|
"completed_regions": [
|
|
|
|
|
"app/index.php:"
|
|
|
|
|
],
|
|
|
|
|
"degradations": [],
|
|
|
|
|
"findings": [
|
|
|
|
|
{
|
2026-10-13 12:00:37 +02:00
|
|
|
"site": "app/index.php:3:<module>",
|
2026-09-30 13:44:32 +02:00
|
|
|
"family": "injection",
|
|
|
|
|
"rung": "model_entailed",
|
|
|
|
|
"witness": "$_GET[\"id\"] -> mysqli_query($conn, \"SELECT * FROM users WHERE id = \" . $id) in app/index.php (line 3, 4 steps)",
|
|
|
|
|
"reached_from": 1
|
|
|
|
|
},
|
|
|
|
|
{
|
2026-10-13 12:00:37 +02:00
|
|
|
"site": "app/index.php:5:<module>",
|
2026-09-30 13:44:32 +02:00
|
|
|
"family": "injection",
|
|
|
|
|
"rung": "model_entailed",
|
|
|
|
|
"witness": "$_GET[\"host\"] -> system(\"ping \" . $_GET[\"host\"]) in app/index.php (line 5, 2 steps)",
|
|
|
|
|
"reached_from": 1
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|