CWE-929 · Kategoria
OWASP Top Ten 2013 Category A1 - Injection
- Status
- Przestarzały
- Dodano
- 16 lipca 2013
- Ostatnia zmiana
- 9 września 2025
Opis
Weaknesses in this category are related to the A1 category in the OWASP Top Ten 2013.
Wpisy w tej grupie
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
- CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- CWE-90 Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
- CWE-91 XML Injection (aka Blind XPath Injection)
- CWE-643 Improper Neutralization of Data within XPath Expressions ('XPath Injection')
- CWE-652 Improper Neutralization of Data within XQuery Expressions ('XQuery Injection')
Źródła
Wpis z katalogu CWE 4.20.