(Aug 7, 2021 09:55 PM)skylinezz Wrote:  Does anybody know how to fix "validation error: 404 - Page Not Found" when doing SQL Injection on Mutillidae 2? I'm using Mutillidae 2 to do SQL injection experiment, but when I tried to do one of the 10 security control on Mutillidae 2, it showed that validation error.

For example:
         
I tried Owasp 2017 A5- Broken Access Control - Insecured Direct Object References - Arbitrary File Inclusion - Local File Inclusion or Remote File Inclusion. 

It displayed page:  127.0.0.1/mutillidae/index.php?page=Arbitrary-file-inclusion.php

but when I changed page value to page: 127.0.0.1/mutillidae/index.php?page=/etc/passwd

                                                                                                or
       
                                                  page: 127.0.0.1/mutillidae/index.php?page=/etc/shadow


Instead I supposed to get some output when I changed the page value, but it showed this "validation error: 404 - Page Not Found".

I think I had installed and set up Mutillidae 2 correctly, but i wasn't sure if there was something that I missed

So, can anybody please help and show me how to fix this error?. Thank you