2010 Top 25 - Insecure Interaction Between Components

Opis

Weaknesses in this category are listed in the "Insecure Interaction Between Components" section of the 2010 CWE/SANS Top 25 Programming Errors.

Wpisy w tej grupie

• CWE-209 Generation of Error Message Containing Sensitive Information
• CWE-352 Cross-Site Request Forgery (CSRF)
• CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
• CWE-434 Unrestricted Upload of File with Dangerous Type
• CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
• CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
• CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Źródła