Answer the question
In order to leave comments, you need to log in
Kohana Session_exception[1] - error reading session data?
Good afternoon.
Here is the problem, when checking my site for vulnerabilities, one of the programs, namely the Burp suite,
gave an error Session_exception[1] - error reading session data, and under it there is a bunch of source code.
This all happened due to the fact that Burp suite passes session='../../../../etc/paswd' to any page.
So I want to ask how dangerous it is, and how to make the kohana ignore such sessions?
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question