AWS logo
Amazon QDetector LibrarySign in to Amazon Q
AWSbreadcrumb dividerDocumentationbreadcrumb dividerAmazon Qbreadcrumb dividerDetector Librarybreadcrumb dividerPHPbreadcrumb dividerTagsFeedbackFeedback icon

Amazon Q

Detector Library

PHP detectors (37/37)

Server Side Request ForgerySQL InjectionActivated Debug FeatureSensitive information leakLog InjectionMissing AuthorizationOrigins-verified cross-origin communicationsCross-site scriptingPath TraversalAvoiding Exceptions in PHPOS command injectionIncorrect ComparisonLdap Bind Without PasswordSendfile InjectionInteger Overflow or WraparoundAssert UseLoose file permissionsHardcoded credentialsImproper AuthenticationInsecure connectionWeak Random Number GenerationOpen RedirectAllow Url Fopen Or IncludeInsecure cryptographyObject Input Stream Insecure DeserializationCookie Without Http Only FlagCode InjectionZip bomb attackUnsafe ReflectionSecure Signal HandlingDeserialization of untrusted dataUnrestricted File UploadStatic Initialization Vector (IV)Coral Csrf RuleInsecure cookieImproper access controlInsecure Object Attribute Modification

Tags

a
# access-control
c
# cookies# cryptography
i
# information-leak# injection
o
# owasp-top10
s
# secrets# sql
t
# top25-cwes