Skip to content

Commit

Permalink
fixup! fixup! fixup! ⚰️ refactor: Remove commented-out code, unneeded…
Browse files Browse the repository at this point in the history
… files
  • Loading branch information
eliasgierlinger committed Nov 20, 2023
1 parent 8d10088 commit b5fa5e1
Showing 1 changed file with 0 additions and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,6 @@

Utilizing [SQL injection](https://owasp.org/www-community/attacks/SQL_Injection) can lead to sensitive data being read
and/or databases to be modified (Insert/Update/Delete).
In addition, administrative operations such as shutting down the DBMS can also be completed.

Unguard has a PHP microservice for handling likes that uses an unsafe version of Laravel, allowing you to remove another user's like on a post. When liking/unliking, normally, the PHP service would receive a post ID and a user ID, but with the right parameters, you can send two post IDs, leading to the latter one being misinterpreted as the user ID by Laravel ([see more details](https://security.snyk.io/vuln/SNYK-PHP-LARAVELFRAMEWORK-1060045)).

Expand Down

0 comments on commit b5fa5e1

Please sign in to comment.