[
{
"source_name": [
"$full_path"
],
"source_line": [
25
],
"source_column": [
615
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/note_controller.php"
],
"sink_name": "file_get_contents",
"sink_line": 29,
"sink_column": 845,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/note_controller.php",
"vuln_name": "path_traversal",
"vuln_cwe": "CWE_22",
"vuln_id": "d31e5aab04f8df3093bf661a4498976c24362ad7dfc38445e9de8330c7087176",
"vuln_type": "taint-style"
},
{
"source_name": [
"$data"
],
"source_line": [
1089
],
"source_column": [
34096
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utils.php"
],
"sink_name": "file_put_contents",
"sink_line": 1092,
"sink_column": 34224,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utils.php",
"vuln_name": "path_traversal",
"vuln_cwe": "CWE_22",
"vuln_id": "d77ca303fc0a798fd2e9a001ceaa7abb55a4ad732ad655dc8bfbb1a6148a81df",
"vuln_type": "taint-style"
},
{
"source_name": [
"$response[\"error\"][\"text\"]"
],
"source_line": [
322
],
"source_column": [
8378
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php"
],
"sink_name": "exit",
"sink_line": 321,
"sink_column": 8346,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "26b4705f8d750d6e0b897d337c0b3751c4733dd8b96bede972336dd76d23cbb3",
"vuln_type": "taint-style"
},
{
"source_name": [
"$url"
],
"source_line": [
115
],
"source_column": [
2887
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php"
],
"sink_name": "exit",
"sink_line": 116,
"sink_column": 2932,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "8af0bcdd564ba82efd1687fa6f0d0d042be3abb609f48d87d29cb6554b0801b4",
"vuln_type": "taint-style"
},
{
"source_name": [
"$url"
],
"source_line": [
112
],
"source_column": [
2820
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php"
],
"sink_name": "header",
"sink_line": 120,
"sink_column": 2998,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "header_injection",
"vuln_cwe": "CWE_601",
"vuln_id": "ce009be80d77d281e26395d95f7621387156dceb668527089aab4e4e4142167a",
"vuln_type": "taint-style"
},
{
"source_name": [
"$url"
],
"source_line": [
115
],
"source_column": [
2887
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php"
],
"sink_name": "exit",
"sink_line": 116,
"sink_column": 2932,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "d2581c77ecfc4ea72044c6666433900725ed25442714ac670098231a950e8ed6",
"vuln_type": "taint-style"
},
{
"source_name": [
"$url"
],
"source_line": [
112
],
"source_column": [
2820
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php"
],
"sink_name": "header",
"sink_line": 120,
"sink_column": 2998,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "header_injection",
"vuln_cwe": "CWE_601",
"vuln_id": "801a06bd1f1955d6626be71a970ce6f413ebfc69cf9b765f963b873fe74801ca",
"vuln_type": "taint-style"
}
]