Forum Discussion
davidfisher
Cirrus
CirrusPHP Auction Site is not vulnerable..?
I downloaded the file here:
https://devcentral.f5.com/articles/configuring-the-big-ip-and-php-hack-it-yourself-auction-site
And I am trying out the discover parameter tampering vul from the ASM 13 ...
nathe
Cirrocumulus
CirrocumulusI've just tested my lab PHP Auction site. This works once you are already authenticated. So login as user joe and then change the parameter to someone else. This will show you their Control Panel. Works for me.
Hope this helps,
N
