2357
Category-811: OWASP Top Ten 2010 Category A2 - Cross-Site Scripting (XSS)
Category ID : 811
Summary
Weaknesses in this category are related to the A2 category in the OWASP Top Ten 2010.
Membership
Nature Type ID Name Page
MemberOf 809 Weaknesses in OWASP Top Ten (2010) 809 2563
HasMember 79 Improper Neutralization of Input During Web Page
Generation ('Cross-site Scripting')
809 163
References
[REF-762]OWASP. "Top 10 2010-A2-Cross-Site Scripting (XSS)". < http://www.owasp.org/
index.php/Top_10_2010-A2-Cross-Site_Scripting_%28XSS%29 >.
Category-812: OWASP Top Ten 2010 Category A3 - Broken Authentication and
Session Management
Category ID : 812
Summary
Weaknesses in this category are related to the A3 category in the OWASP Top Ten 2010.
Membership
Nature Type ID Name Page
MemberOf 809 Weaknesses in OWASP Top Ten (2010) 809 2563
HasMember 287 Improper Authentication 809 692
HasMember 306 Missing Authentication for Critical Function 809 741
HasMember 307 Improper Restriction of Excessive Authentication
Attempts
809 747
HasMember 798 Use of Hard-coded Credentials 809 1690
References
[REF-763]OWASP. "Top 10 2010-A3-Broken Authentication and Session Management". < http://
www.owasp.org/index.php/Top_10_2010-A3-Broken_Authentication_and_Session_Management >.
Category-813: OWASP Top Ten 2010 Category A4 - Insecure Direct Object
References
Category ID : 813
Summary
Weaknesses in this category are related to the A4 category in the OWASP Top Ten 2010.
Membership
Nature Type ID Name Page
MemberOf 809 Weaknesses in OWASP Top Ten (2010) 809 2563
HasMember 22 Improper Limitation of a Pathname to a Restricted
Directory ('Path Traversal')
809 33
CWE Version 4.14
CWE-814: OWASP Top Ten 2010 Category A5 - Cross-Site Request Forgery(CSRF)
CWE-814: OWASP Top Ten 2010 Category
A5 - Cross-Site Request Forgery(CSRF) 2358
Nature Type ID Name Page
HasMember 99 Improper Control of Resource Identifiers ('Resource
Injection')
809 243
HasMember 434 Unrestricted Upload of File with Dangerous Type 809 1048
HasMember 639 Authorization Bypass Through User-Controlled Key 809 1406
HasMember 829 Inclusion of Functionality from Untrusted Control Sphere 809 1741
HasMember 862 Missing Authorization 809 1780
HasMember 863 Incorrect Authorization 809 1787
References
[REF-764]OWASP. "Top 10 2010-A4-Insecure Direct Object References". < http://www.owasp.org/
index.php/Top_10_2010-A4-Insecure_Direct_Object_References >.
Category-814: OWASP Top Ten 2010 Category A5 - Cross-Site Request
Forgery(CSRF)
Category ID : 814
Summary
Weaknesses in this category are related to the A5 category in the OWASP Top Ten 2010.
Membership
Nature Type ID Name Page
MemberOf 809 Weaknesses in OWASP Top Ten (2010) 809 2563
HasMember 352 Cross-Site Request Forgery (CSRF) 809 868
References
[REF-765]OWASP. "Top 10 2010-A5-Cross-Site Request Forgery (CSRF)". < http://
www.owasp.org/index.php/Top_10_2010-A5-Cross-Site_Request_Forgery_%28CSRF%29 >.
Category-815: OWASP Top Ten 2010 Category A6 - Security Misconfiguration
Category ID : 815
Summary
Weaknesses in this category are related to the A6 category in the OWASP Top Ten 2010.
Membership
Nature Type ID Name Page
MemberOf 809 Weaknesses in OWASP Top Ten (2010) 809 2563
HasMember 209 Generation of Error Message Containing Sensitive
Information
809 533
HasMember 219 Storage of File with Sensitive Data Under Web Root 809 553
HasMember 250 Execution with Unnecessary Privileges 809 599
HasMember 538 Insertion of Sensitive Information into Externally-
Accessible File or Directory
809 1248
HasMember 552 Files or Directories Accessible to External Parties 809 1265
HasMember 732 Incorrect Permission Assignment for Critical Resource 809 1551
References
CWE Version 4.14
CWE-816: OWASP Top Ten 2010 Category A7 - Insecure Cryptographic Storage
CWE-816: OWASP Top Ten 2010 Category A7 - Insecure Cryptographic Storage