Skip to content

Authorisation Bypass module added#531

Merged
digininja merged 5 commits into
masterfrom
authbypass
Jan 29, 2023
Merged

Authorisation Bypass module added#531
digininja merged 5 commits into
masterfrom
authbypass

Conversation

@digininja

Copy link
Copy Markdown
Owner

Can you get passed the authorisation checks of the new user management system?

}

$query = "UPDATE users SET first_name = '" . $data->first_name . "', last_name = '" . $data->surname . "' where user_id = " . $data->id . "";
$result = mysqli_query($GLOBALS["___mysqli_ston"], $query ) or die( '<pre>' . ((is_object($GLOBALS["___mysqli_ston"])) ? mysqli_error($GLOBALS["___mysqli_ston"]) : (($___mysqli_res = mysqli_connect_error()) ? $___mysqli_res : false)) . '</pre>' );

Check warning

Code scanning / PHP Security Audit

Argument 2 of implode expects array<array-key, null|object{__tostring()}|scalar>, but parent type callable-array{0: class-string|object, 1: string} provided.

Argument 1 of mysqli_error expects mysqli, but parent type object provided.
@digininja digininja merged commit 3663d72 into master Jan 29, 2023
noe-orga-NTT pushed a commit to noe-orga-NTT/DVWA that referenced this pull request May 30, 2025
noe-orga-NTT pushed a commit to noe-orga-NTT/DVWA that referenced this pull request May 30, 2025
noe-orga-NTT pushed a commit to noe-orga-NTT/DVWA that referenced this pull request May 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants