7PK - Input Validation and Representation

Opis

This category represents one of the phyla in the Seven Pernicious Kingdoms vulnerability classification. It includes weaknesses that exist when an application does not properly validate or represent input. According to the authors of the Seven Pernicious Kingdoms, "Input validation and representation problems are caused by metacharacters, alternate encodings and numeric representations. Security problems result from trusting input."

Wpisy w tej grupie

• CWE-20 Improper Input Validation
• CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
• CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
• CWE-99 Improper Control of Resource Identifiers ('Resource Injection')

Źródła