MvMmall Vulnerability Analysis

Author: html "target = _ blank>Sobiny

Analyzed. The session record method of this program is through the include/session. class. php file.

The mvm_session class of this file
 

View source Print? 01.     function handler(){ 02.          session_module_name( user ); 03.          session_set_save_handler( 04.              array ( mvm_session , open ), 05.              array ( mvm_session , close ), 06.              array ( mvm_session , read ), 07.              array ( mvm_session , write ), 08.              array ( mvm_session , destroy ), 09.              array ( mvm_session , gc ) 10.              ); 11.      }

The function initializes and defines various methods of the session ..
It mainly talks about the write function:

 

View source