[
{
"source_name": [
"$sprintf_return"
],
"source_line": [
38
],
"source_column": [
849
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utility.php"
],
"sink_name": "exit",
"sink_line": 38,
"sink_column": 845,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utility.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "643130dab2ac9bac9c512ecea6898d58a90526ce85a272cdb4d71dd86b2dd058",
"vuln_type": "taint-style"
},
{
"source_name": [
"$cmd"
],
"source_line": [
936
],
"source_column": [
29751
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utils.php"
],
"sink_name": "shell_exec",
"sink_line": 938,
"sink_column": 29856,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utils.php",
"vuln_name": "command_injection",
"vuln_cwe": "CWE_78",
"vuln_id": "06310b5839e4c2e4c9583d2ebd5fac1c8539a1903b22afc88067109e39e62045",
"vuln_type": "taint-style"
},
{
"source_name": [
"$tempName"
],
"source_line": [
718
],
"source_column": [
23172
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utils.php"
],
"sink_name": "shell_exec",
"sink_line": 775,
"sink_column": 24974,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utils.php",
"vuln_name": "command_injection",
"vuln_cwe": "CWE_78",
"vuln_id": "7fde4d14e82f64fd2b430dd336db42e73382c8b9bc5de79bd379686a2794dee5",
"vuln_type": "taint-style"
},
{
"source_name": [
"$tempName"
],
"source_line": [
718
],
"source_column": [
23172
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utils.php"
],
"sink_name": "shell_exec",
"sink_line": 777,
"sink_column": 25062,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utils.php",
"vuln_name": "command_injection",
"vuln_cwe": "CWE_78",
"vuln_id": "7fde4d14e82f64fd2b430dd336db42e73382c8b9bc5de79bd379686a2794dee5",
"vuln_type": "taint-style"
},
{
"source_name": [
"$response[\"error\"][\"text\"]"
],
"source_line": [
322
],
"source_column": [
8378
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php"
],
"sink_name": "exit",
"sink_line": 321,
"sink_column": 8346,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "30ed2f1a77dcdfcce54e83957f485ae6b47283e97def58a56551db21ee6e025a",
"vuln_type": "taint-style"
},
{
"source_name": [
"$response[\"error\"][\"text\"]"
],
"source_line": [
322
],
"source_column": [
8378
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php"
],
"sink_name": "exit",
"sink_line": 321,
"sink_column": 8346,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "0a7d099f41cb8550df888375dae250428b2761cd96c6ed178e65eca8b4285582",
"vuln_type": "taint-style"
},
{
"source_name": [
"$response[\"error\"][\"text\"]"
],
"source_line": [
277
],
"source_column": [
7342
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php"
],
"sink_name": "echo",
"sink_line": 276,
"sink_column": 7314,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "9d388f63c2ec73413b455c8336b6ffc01c4c2b27faf096f9bd5300331e929f96",
"vuln_type": "taint-style"
},
{
"source_name": [
"$L_return",
"$L_return",
"$L_return"
],
"source_line": [
71,
77,
80
],
"source_column": [
1607,
1739,
1805
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/lang.php",
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/lang.php",
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/lang.php"
],
"sink_name": "exit",
"sink_line": 29,
"sink_column": 624,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utility.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "5a5aeb0333377e750b7f0afc33d02d61250aa680fabbef521fa4ce826b510fd7",
"vuln_type": "taint-style"
},
{
"source_name": [
"$L_return",
"$L_return",
"$L_return"
],
"source_line": [
71,
77,
80
],
"source_column": [
1607,
1739,
1805
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/lang.php",
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/lang.php",
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/lang.php"
],
"sink_name": "exit",
"sink_line": 85,
"sink_column": 2107,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utility.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "5a5aeb0333377e750b7f0afc33d02d61250aa680fabbef521fa4ce826b510fd7",
"vuln_type": "taint-style"
},
{
"source_name": [
"$url"
],
"source_line": [
115
],
"source_column": [
2887
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php"
],
"sink_name": "exit",
"sink_line": 116,
"sink_column": 2932,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "66621d22683c2a6d9d8189dd470133e421a9bf969d6313315960c62d8d3d0557",
"vuln_type": "taint-style"
},
{
"source_name": [
"$url"
],
"source_line": [
112
],
"source_column": [
2820
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php"
],
"sink_name": "header",
"sink_line": 120,
"sink_column": 2998,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "header_injection",
"vuln_cwe": "CWE_601",
"vuln_id": "098174d819a97e19cc9137211f7a4cc7c617f16504bbccb57c93946bae86ca73",
"vuln_type": "taint-style"
},
{
"source_name": [
"$basename_return"
],
"source_line": [
156
],
"source_column": [
4316
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utility.php"
],
"sink_name": "header",
"sink_line": 156,
"sink_column": 4263,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utility.php",
"vuln_name": "header_injection",
"vuln_cwe": "CWE_601",
"vuln_id": "c1b5892de01cdea5d9680f0cc83c6a8a14578f4b5b4d89519e14f061b0610f36",
"vuln_type": "taint-style"
},
{
"source_name": [
"$file"
],
"source_line": [
152
],
"source_column": [
4079
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utility.php"
],
"sink_name": "readfile",
"sink_line": 161,
"sink_column": 4504,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utility.php",
"vuln_name": "path_traversal",
"vuln_cwe": "CWE_22",
"vuln_id": "64006558e5f84021729975f12826905989f3f4925e53c4163058fdcf5bc14bda",
"vuln_type": "taint-style"
},
{
"source_name": [
"$file"
],
"source_line": [
152
],
"source_column": [
4079
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utility.php"
],
"sink_name": "unlink",
"sink_line": 162,
"sink_column": 4527,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utility.php",
"vuln_name": "path_traversal",
"vuln_cwe": "CWE_22",
"vuln_id": "d14643f440c6b6b52d908f59f3a504c1f40a59a43f527f4da116427e403a7ec5",
"vuln_type": "taint-style"
},
{
"source_name": [
"$L_return",
"$L_return",
"$L_return"
],
"source_line": [
71,
77,
80
],
"source_column": [
1607,
1739,
1805
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/lang.php",
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/lang.php",
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/lang.php"
],
"sink_name": "exit",
"sink_line": 165,
"sink_column": 4573,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utility.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "5a5aeb0333377e750b7f0afc33d02d61250aa680fabbef521fa4ce826b510fd7",
"vuln_type": "taint-style"
},
{
"source_name": [
"$sprintf_return"
],
"source_line": [
38
],
"source_column": [
849
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utility.php"
],
"sink_name": "exit",
"sink_line": 38,
"sink_column": 845,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/utility.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "f4186ca3b3d704fb0ce86e8312966962e50ed534db94064a67cdc80b26a9d043",
"vuln_type": "taint-style"
},
{
"source_name": [
"$L_return",
"$L_return",
"$L_return"
],
"source_line": [
71,
77,
80
],
"source_column": [
1607,
1739,
1805
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/lang.php",
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/lang.php",
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/lang.php"
],
"sink_name": "exit",
"sink_line": 173,
"sink_column": 4754,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "da8beac0aea306f74454a2f8875a49ab885eebf476a453ae7dfa8ef38e76912a",
"vuln_type": "taint-style"
},
{
"source_name": [
"$L_return",
"$L_return",
"$L_return"
],
"source_line": [
71,
77,
80
],
"source_column": [
1607,
1739,
1805
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/lang.php",
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/lang.php",
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/lang.php"
],
"sink_name": "exit",
"sink_line": 176,
"sink_column": 4825,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "da8beac0aea306f74454a2f8875a49ab885eebf476a453ae7dfa8ef38e76912a",
"vuln_type": "taint-style"
},
{
"source_name": [
"$url"
],
"source_line": [
115
],
"source_column": [
2887
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php"
],
"sink_name": "exit",
"sink_line": 116,
"sink_column": 2932,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "xss",
"vuln_cwe": "CWE_79",
"vuln_id": "4889af65dd7e7b04cf390fbcb6c4baa72b3963c54a8a10c5bef10e6dab7452b2",
"vuln_type": "taint-style"
},
{
"source_name": [
"$url"
],
"source_line": [
112
],
"source_column": [
2820
],
"source_file": [
"\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php"
],
"sink_name": "header",
"sink_line": 120,
"sink_column": 2998,
"sink_file": "\/logs\/firmware\/unblob_extracted\/firmware_extract\/1568982-13971496.squashfs_v4_le_extract\/www\/public\/sdcard\/cpt\/app\/base_controller.php",
"vuln_name": "header_injection",
"vuln_cwe": "CWE_601",
"vuln_id": "ce009be80d77d281e26395d95f7621387156dceb668527089aab4e4e4142167a",
"vuln_type": "taint-style"
}
]
