CWE-473
PHP External Variable Modification
A PHP application does not properly protect against the modification of variables from external sources, such as query parameters or cookies. This can expose the application to numerous weaknesses that would not exist otherwise.
Impactr finds and proves whether CWE-473 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.