Questions tagged [laravel]

Laravel is a PHP framework.

Filter by
Sorted by
Tagged with
1
vote
0answers
162 views

laravel-poc-CVE-2018-15133 [closed]

I want to test laravel exploit POC based on https://github.com/kozmic/laravel-poc-CVE-2018-15133/ I did docker steps to reach laravel home page on localhost:8000 then I got API key and simply I put ...
0
votes
2answers
118 views

How to detect website active routes?

I'm building a website using Laravel and I'm just thinking about security. I would like to know if there is a way for attacker to detect all active web routes for a website ? For example: http://...
2
votes
1answer
42 views

Limit rights for user applications

I have a website, where users are available to upload small applications which runs 24/7 on my server. So if the user upload an application, some folders will be created: /{USER_ID}/{APP_ID}/ (if ...
-2
votes
2answers
1k views

How to leave a backdoor in a Laravel application?

I'm pretty curious how someone could leave a backdoor in a Laravel application? In my opinion there isn't a way, because the entry point of the requests is a route file, and you have to write code for ...
5
votes
2answers
1k views

Why does this Laravel CSRF vulnerability work?

Recently Laravel 4 was updated to address a security concern: there was a CSRF vulnerability in their code. Here's the old code: if (Session::token() != Input::get('_token')) { throw new ...