2334
Summary
Weaknesses in this category are related to the A10 category in the OWASP Top Ten 2007.
Membership
Nature Type ID Name Page
MemberOf 629 Weaknesses in OWASP Top Ten (2007) 629 2551
HasMember 285 Improper Authorization 629 684
HasMember 288 Authentication Bypass Using an Alternate Path or
Channel
629 700
HasMember 425 Direct Request ('Forced Browsing') 629 1025
References
[REF-580]OWASP. "Top 10 2007-Failure to Restrict URL Access". 2007. < http://www.owasp.org/
index.php/Top_10_2007-A10 >.
Category-722: OWASP Top Ten 2004 Category A1 - Unvalidated Input
Category ID : 722
Summary
Weaknesses in this category are related to the A1 category in the OWASP Top Ten 2004.
Membership
Nature Type ID Name Page
MemberOf 711 Weaknesses in OWASP Top Ten (2004) 711 2559
HasMember 20 Improper Input Validation 711 20
HasMember 77 Improper Neutralization of Special Elements used in a
Command ('Command Injection')
711 145
HasMember 79 Improper Neutralization of Input During Web Page
Generation ('Cross-site Scripting')
711 163
HasMember 89 Improper Neutralization of Special Elements used in an
SQL Command ('SQL Injection')
711 201
HasMember 102 Struts: Duplicate Validation Forms 711 246
HasMember 103 Struts: Incomplete validate() Method Definition 711 248
HasMember 104 Struts: Form Bean Does Not Extend Validation Class 711 251
HasMember 106 Struts: Plug-in Framework not in Use 711 256
HasMember 109 Struts: Validator Turned Off 711 263
HasMember 120 Buffer Copy without Checking Size of Input ('Classic
Buffer Overflow')
711 304
HasMember 166 Improper Handling of Missing Special Element 711 423
HasMember 167 Improper Handling of Additional Special Element 711 425
HasMember 179 Incorrect Behavior Order: Early Validation 711 448
HasMember 180 Incorrect Behavior Order: Validate Before Canonicalize 711 451
HasMember 181 Incorrect Behavior Order: Validate Before Filter 711 453
HasMember 182 Collapse of Data into Unsafe Value 711 455
HasMember 183 Permissive List of Allowed Inputs 711 458
HasMember 425 Direct Request ('Forced Browsing') 711 1025
HasMember 472 External Control of Assumed-Immutable Web
Parameter
711 1123
HasMember 601 URL Redirection to Untrusted Site ('Open Redirect') 711 1345
HasMember 602 Client-Side Enforcement of Server-Side Security 711 1350
CWE Version 4.14
CWE-723: OWASP Top Ten 2004 Category A2 - Broken Access Control
CWE-723: OWASP Top Ten 2004 Category A2 - Broken Access Control