V
V
Vitaliy Semyanchuk2014-01-28 11:23:48
Kohana
Vitaliy Semyanchuk, 2014-01-28 11:23:48

Kohana Session_exception[1] - error reading session data?

Good afternoon.
Here is the problem, when checking my site for vulnerabilities, one of the programs, namely the Burp suite,
gave an error Session_exception[1] - error reading session data, and under it there is a bunch of source code.
This all happened due to the fact that Burp suite passes session='../../../../etc/paswd' to any page.
So I want to ask how dangerous it is, and how to make the kohana ignore such sessions?

Answer the question

In order to leave comments, you need to log in

1 answer(s)
V
Vit, 2014-01-28
@fix20152

The test program attempted to read a file that cannot be read. Kohana honestly gave a reading error - this is normal. On the contrary, it would be bad if your site gave the attacker the contents of /etc/passwd

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question