CWE-994 · Kategoria
SFP Secondary Cluster: Tainted Input to Variable
- Status
- Niekompletny
- Dodano
- 29 lipca 2014
- Ostatnia zmiana
- 29 czerwca 2023
Opis
This category identifies Software Fault Patterns (SFPs) within the Tainted Input to Variable cluster (SFP25).
Wpisy w tej grupie
- CWE-15 External Control of System or Configuration Setting
- CWE-20 Improper Input Validation
- CWE-454 External Initialization of Trusted Variables or Data Stores
- CWE-496 Public Data Assigned to Private Array-Typed Field
- CWE-502 Deserialization of Untrusted Data
- CWE-566 Authorization Bypass Through User-Controlled SQL Primary Key
- CWE-606 Unchecked Input for Loop Condition
- CWE-616 Incomplete Identification of Uploaded File Variables (PHP)
Wpis z katalogu CWE 4.20.