Jump to content
Claudia M

What does this PHP warning mean?

Recommended Posts

What does this mean and should I do anything?  Thanks in advance, Me

[26-Dec-2018 14:45:55 UTC] PHP Warning:  Security Warning: Illegal array key "eSPc=4156_AND_1=1_UNION_ALL_SELECT_1,NULL,'<script>alert("XSS")</script>',table_name_FROM_information_schema_tables_WHERE_2>1--/**/;_EXEC_xp_cmdshell('cat___/__/__/etc/passwd')#" was detected and was removed. in /home/??????/public_html/classes/sanitize.class.php on line 111

 

Share this post


Link to post
Share on other sites

This is an attempt to SQL Inject a database command to [eventually] fetch passwords from the computer operating system's password repository.

The attempt was thwarted by CubeCart's code to filter out things that have any other character(s) other than a very limited set of characters.

The attempt is not a personal attack. Probably just an automated script looking for weaknesses.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×