Added S-48

harsh-bothra · harsh-bothra · commit 4f78a39c19da · 2022-02-17T22:42:35.000+05:30
diff --git a/README.md b/README.md
@@ -66,6 +66,7 @@ S.No. | Topic
 **45** | [Vulnerable Code Snippet - 32](/resources/vulnerable-code-32.md)
 **46** | [Vulnerable Code Snippet - 33](/resources/vulnerable-code-33.md)
 **47** | [Vulnerable Code Snippet - 34](/resources/vulnerable-code-34.md)
+**48** | [Vulnerable Code Snippet - 35](/resources/vulnerable-code-35.md)
 
 
 # SecurityExplained NewsLetter
diff --git a/media/code-35.jpg b/media/code-35.jpg
diff --git a/resources/vulnerable-code-35.md b/resources/vulnerable-code-35.md
@@ -0,0 +1,16 @@
+### SecurityExplained S-47: Vulnerable Code Snippet - 35
+
+#### Vulnerable Code: 
+
+![Vulnerable Code](../media/code-35.jpg)
+
+
+#### Solution: 
+
+The code is vulnerable to XSS and LFI. The focus in this code is that the filename can be used as a payload to execute Javasript and preform an XSS attack. 
+When filtering a function always remember that it's more than one bug that can be exploited in it. For example this is highly vulnerable to LFI but it's also vulnerable to XSS.
+
+Twitter Thread: https://twitter.com/harshbothra_/status/1494127206552985605
+
+##### Code Credits: @Brumens2 
+ 
