logo
Home/CWEs/CWE-473/

CWE-473 - PHP External Variable Modification

  • Abstraction:Variant
  • Structure:Simple
  • Status:Draft
  • Release Date:2006-07-19
  • Latest Modification Date:2023-06-29

Weakness Name

PHP External Variable Modification

Description

A PHP application does not properly protect against the modification of variables from external sources, such as query parameters or cookies. This can expose the application to numerous weaknesses that would not exist otherwise.

Common Consequences

Scope: Integrity

Impact: Modify Application Data

Related Weaknesses

CWE-98Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')High

CWE-471Modification of Assumed-Immutable Data (MAID)