CWE-1027 · Kategoria
OWASP Top Ten 2017 Category A1 - Injection
- Status
- Niekompletny
- Dodano
- 23 czerwca 2014
- Ostatnia zmiana
- 9 września 2025
Opis
Weaknesses in this category are related to the A1 category in the OWASP Top Ten 2017.
Wpisy w tej grupie
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
- CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- CWE-90 Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
- CWE-91 XML Injection (aka Blind XPath Injection)
- CWE-564 SQL Injection: Hibernate
- CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
- CWE-943 Improper Neutralization of Special Elements in Data Query Logic
Źródła
Wpis z katalogu CWE 4.20.