2011 Top 25 - Insecure Interaction Between Components

Opis

Weaknesses in this category are listed in the "Insecure Interaction Between Components" section of the 2011 CWE/SANS Top 25 Most Dangerous Software Errors.

Wpisy w tej grupie

• CWE-352 Cross-Site Request Forgery (CSRF)
• CWE-434 Unrestricted Upload of File with Dangerous Type
• CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
• CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
• CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CWE-829 Inclusion of Functionality from Untrusted Control Sphere
• CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Źródła