Forum Discussion

davidfisher's avatar
davidfisher
Icon for Cirrus rankCirrus
Sep 29, 2018

PHP Auction Site is not vulnerable..?

I downloaded the file here: https://devcentral.f5.com/articles/configuring-the-big-ip-and-php-hack-it-yourself-auction-site And I am trying out the discover parameter tampering vul from the ASM 13 ...
ASM Advanced WAF
security
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Oct 01, 2018

I've just tested my lab PHP Auction site. This works once you are already authenticated. So login as user joe and then change the parameter to someone else. This will show you their Control Panel. Works for me.

 

Hope this helps,

 

N