[
{
"source_name": [
"$tempPath"
],
"source_line": [
17
],
"source_column": [
336
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/firmware.php"
],
"sink_name": "move_uploaded_file",
"sink_line": 47,
"sink_column": 1609,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/firmware.php",
"vuln_name": "path_traversal",
"vuln_cwe": "CWE_22",
"vuln_id": "20d3c3df9bf1246d05a626c83ecb51a2b69a54e8e775fb79acf83e1e2c4fcbcd",
"vuln_type": "taint-style"
},
{
"source_name": [
"$dstPath"
],
"source_line": [
45
],
"source_column": [
1510
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/firmware.php"
],
"sink_name": "move_uploaded_file",
"sink_line": 47,
"sink_column": 1609,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/firmware.php",
"vuln_name": "path_traversal",
"vuln_cwe": "CWE_22",
"vuln_id": "826be1fb75dc40aa2298014ca3b8490b11d81bf2b99a5b3345e900fb9b3ce3d2",
"vuln_type": "taint-style"
},
{
"source_name": [
"$name"
],
"source_line": [
18
],
"source_column": [
371
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/firmware.php"
],
"sink_name": "echo",
"sink_line": 50,
"sink_column": 1680,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/firmware.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "c09517587a49d8f4210ef08f4c0ce9c16ba927ef96d9b438f1efdd5e10ec7eee",
"vuln_type": "taint-style"
},
{
"source_name": [
"$url"
],
"source_line": [
115
],
"source_column": [
2887
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php"
],
"sink_name": "exit",
"sink_line": 116,
"sink_column": 2932,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "5132feaad289f3bd1c267d61eef21847189b9bf292225b4a0ed71db6816bfccd",
"vuln_type": "taint-style"
},
{
"source_name": [
"$url"
],
"source_line": [
112
],
"source_column": [
2820
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php"
],
"sink_name": "header",
"sink_line": 120,
"sink_column": 2998,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "header_injection",
"vuln_cwe": "CWE_601",
"vuln_id": "ce009be80d77d281e26395d95f7621387156dceb668527089aab4e4e4142167a",
"vuln_type": "taint-style"
},
{
"source_name": [
"$url"
],
"source_line": [
115
],
"source_column": [
2887
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php"
],
"sink_name": "exit",
"sink_line": 116,
"sink_column": 2932,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "28ade3473a9dd582bece2cbfd15f5060580db397eaf81e7779203a386728244a",
"vuln_type": "taint-style"
},
{
"source_name": [
"$url"
],
"source_line": [
112
],
"source_column": [
2820
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php"
],
"sink_name": "header",
"sink_line": 120,
"sink_column": 2998,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "header_injection",
"vuln_cwe": "CWE_601",
"vuln_id": "801a06bd1f1955d6626be71a970ce6f413ebfc69cf9b765f963b873fe74801ca",
"vuln_type": "taint-style"
},
{
"source_name": [
"$svmversion"
],
"source_line": [
122
],
"source_column": [
3292
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/firmware.php"
],
"sink_name": "echo",
"sink_line": 159,
"sink_column": 4855,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/firmware.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "d35824afd38fc39594d5fb5f6fea24e3c8b19231b4cb8224f5b653f065d05975",
"vuln_type": "taint-style"
},
{
"source_name": [
"$releasedate"
],
"source_line": [
123
],
"source_column": [
3372
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/firmware.php"
],
"sink_name": "echo",
"sink_line": 160,
"sink_column": 4951,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/firmware.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "4fe7a17187d6453c97e7a3336c80f2f232a7490c50071cc7132fda3003114a49",
"vuln_type": "taint-style"
},
{
"source_name": [
"$mcuversion"
],
"source_line": [
124
],
"source_column": [
3442
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/firmware.php"
],
"sink_name": "echo",
"sink_line": 161,
"sink_column": 5058,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/firmware.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "2235e3a10b3c578801437471124726bdf17134230c406425207d6cdec6094f21",
"vuln_type": "taint-style"
}
]
