CX Header_Injection @ index.php [master]

[cxronen]

Header_Injection issue exists @ index.php in branch master

Method <?php at line 8 of index.php receives a user input from the _GET element. This element’s value then copied into the request header without being properly sanitized or validated in <?php at line 11 of index.php. If a 3rd party can influence this value it may enable an HTTP Header Injection attack.

Severity: Medium

CWE:113

Checkmarx

Training
Recommended Fix

Lines: 8

---

Code (Line #8):

		$op = isset($_GET["op"])?"?op=".$_GET["op"]:"";

---