This code using _GET exploitable
| From: | filtered | Date: | Wed, 11 Mar 2009 12:22:16 +0000 |
| Subject: | This code using _GET exploitable | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-289835@lists.php.net to get a copy of this message | ||
Hi,
we have script containing
<? echo $_GET['studio'] ?>
and
<?
$cam = $_GET['cam'];
if ($cam == '1') {
echo '<img src="http://example.com"" />';
}
?>
Is this code prone to XSS attacks or for attacking the local webserver
and if so, how?
$cam isn't used anywhere else.
-a