Jump to content
Claudia M

What does this PHP warning mean?

Recommended Posts

What does this mean and should I do anything?  Thanks in advance, Me

[26-Dec-2018 14:45:55 UTC] PHP Warning:  Security Warning: Illegal array key "eSPc=4156_AND_1=1_UNION_ALL_SELECT_1,NULL,'<script>alert("XSS")</script>',table_name_FROM_information_schema_tables_WHERE_2>1--/**/;_EXEC_xp_cmdshell('cat___/__/__/etc/passwd')#" was detected and was removed. in /home/??????/public_html/classes/sanitize.class.php on line 111


Share this post

Link to post
Share on other sites

This is an attempt to SQL Inject a database command to [eventually] fetch passwords from the computer operating system's password repository.

The attempt was thwarted by CubeCart's code to filter out things that have any other character(s) other than a very limited set of characters.

The attempt is not a personal attack. Probably just an automated script looking for weaknesses.

Share this post

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Create New...