CWE-727 · Kategoria
OWASP Top Ten 2004 Category A6 - Injection Flaws
- Status
- Przestarzały
- Dodano
- 15 sierpnia 2008
- Ostatnia zmiana
- 9 września 2025
Opis
Weaknesses in this category are related to the A6 category in the OWASP Top Ten 2004.
Wpisy w tej grupie
- CWE-117 Improper Output Neutralization for Logs
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- CWE-91 XML Injection (aka Blind XPath Injection)
- CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
- CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
Źródła
Wpis z katalogu CWE 4.20.