Weakness (CWE)
CWE-482: Comparing instead of Assigning
Variant Draft
The code uses an operator for comparison when the intention was to perform an assignment.
How to prevent it (1 mitigation)
-
Testing
Many IDEs and static analysis products will detect this problem.
Source: MITRE CWE-482
2 results · Feed
-
Critical 9.1
Froxlor Admin-to-Root Privilege Escalation via Input Validation Bypass + OS Command Injection
Froxlor is open source server administration software. Prior to 2.3.4, a typo in Froxlor's input validation code (== instead of =) completely disables email format checking for all settings fields declared as email type. This allows an authenticated admin to …
-
High 8.8
An issue in phiola/src/afilter/pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code…