[
{
"source_name": [
"$grPath"
],
"source_line": [
26
],
"source_column": [
709
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/grdata.php"
],
"sink_name": "file_get_contents",
"sink_line": 39,
"sink_column": 1395,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/grdata.php",
"vuln_name": "path_traversal",
"vuln_cwe": "CWE_22",
"vuln_id": "26156127ce05d77ac64f75c4b94bc3b7e03febb8936a34a27f498111b8bb9f3c",
"vuln_type": "taint-style"
},
{
"source_name": [
"$filename"
],
"source_line": [
1188
],
"source_column": [
36704
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utils.php"
],
"sink_name": "fopen",
"sink_line": 1192,
"sink_column": 36840,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utils.php",
"vuln_name": "path_traversal",
"vuln_cwe": "CWE_22",
"vuln_id": "2a9bae319d0cbc0a8da1d1805ccd587b592943653e99ade0b36c7953ce114929",
"vuln_type": "taint-style"
},
{
"source_name": [
"$buffer"
],
"source_line": [
1197
],
"source_column": [
36962
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utils.php"
],
"sink_name": "echo",
"sink_line": 1198,
"sink_column": 37014,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utils.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "e7e24a5fe72880ded26760ee1b219e7a3974afe4b1c2976305948188d1c3a8e2",
"vuln_type": "taint-style"
},
{
"source_name": [
"$response[\"error\"][\"text\"]"
],
"source_line": [
322
],
"source_column": [
8378
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php"
],
"sink_name": "exit",
"sink_line": 321,
"sink_column": 8346,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "cff80987fbb0f294d7097f7332204cd4dd632f699cc0d2b5e00f6f3a1b20e817",
"vuln_type": "taint-style"
},
{
"source_name": [
"$url"
],
"source_line": [
115
],
"source_column": [
2887
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php"
],
"sink_name": "exit",
"sink_line": 116,
"sink_column": 2932,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "40c00b543c4e23424d6bdaa2bb47903c33f008bf0fde352bbfd89c69ef998873",
"vuln_type": "taint-style"
},
{
"source_name": [
"$url"
],
"source_line": [
112
],
"source_column": [
2820
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php"
],
"sink_name": "header",
"sink_line": 120,
"sink_column": 2998,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "header_injection",
"vuln_cwe": "CWE_601",
"vuln_id": "ce009be80d77d281e26395d95f7621387156dceb668527089aab4e4e4142167a",
"vuln_type": "taint-style"
},
{
"source_name": [
"$url"
],
"source_line": [
115
],
"source_column": [
2887
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php"
],
"sink_name": "exit",
"sink_line": 116,
"sink_column": 2932,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "60342ca6044f44fc5412d72f57c4057c867f4987e8061ec6d8109cb50ed2937e",
"vuln_type": "taint-style"
},
{
"source_name": [
"$url"
],
"source_line": [
112
],
"source_column": [
2820
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php"
],
"sink_name": "header",
"sink_line": 120,
"sink_column": 2998,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "header_injection",
"vuln_cwe": "CWE_601",
"vuln_id": "801a06bd1f1955d6626be71a970ce6f413ebfc69cf9b765f963b873fe74801ca",
"vuln_type": "taint-style"
}
]
