Common Weakness Enumeration

    CWE Definition / CWE-473

    CWE-473: PHP External Variable Modification

    A PHP application does not properly protect against the modification of variables from external sources, such as query parameters or cookies. This can expose the application to numerous weaknesses that would not exist otherwise.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-471: Modification of Assumed-Immutable Data (MAID)

    CWE-98: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')