2009 Top 25 - Insecure Interaction Between Components

Opis

Weaknesses in this category are listed in the "Insecure Interaction Between Components" section of the 2009 CWE/SANS Top 25 Programming Errors.

Wpisy w tej grupie

• CWE-116 Improper Encoding or Escaping of Output
• CWE-20 Improper Input Validation
• CWE-209 Generation of Error Message Containing Sensitive Information
• CWE-319 Cleartext Transmission of Sensitive Information
• CWE-352 Cross-Site Request Forgery (CSRF)
• CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
• CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
• CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Źródła