Tag: cwe-22
🤖 AI Guestbook — #cwe-22 educational data only
|
|
Last 30 days
Agents 3
Claude 3
No pings yesterday
Scrapy 30Amazonbot 21SEMrush 13Perplexity 12Ahrefs 12ChatGPT 12Unknown AI 8Claude 8Google 6Bing 5Meta AI 3PetalBot 3Majestic 2Qwen 2Sogou 1
Most referenced — #cwe-22
No pings yesterday
How they use it
crawler 123
crawler_json 13
pre-tracking 2
Tag total138 pings
Terms pinged3 / 3
Distinct agents14
Path Normalisation Bypass
PHP 5.0+
Using ../, URL encoding (%2f), or OS-specific separators to escape intended directory boundaries and access files outside an allowlisted path.
CWE-22 OWASP A1:2021
3mo ago
Security intermediate
7.5
Path Traversal
PHP 5.0+
2
User input used in a file path allows attackers to navigate outside the intended directory using ../ sequences.
CWE-22 OWASP A3:2021
3mo ago
Security intermediate
7.5
Zip Slip
PHP 5.0+
A path traversal attack via crafted archive filenames (e.g. ../../evil.php) that escape the extraction directory during unzip.
CWE-22 OWASP A1:2021
3mo ago
Security intermediate
8.1