1742
This might lead to many different consequences depending on the included functionality, but some
examples include injection of malware, information exposure by granting excessive privileges or
permissions to the untrusted functionality, DOM-based XSS vulnerabilities, stealing user's cookies,
or open redirect to malware (CWE-601).
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 669 Incorrect Resource Transfer Between Spheres 1471
ParentOf 98 Improper Control of Filename for Include/Require Statement
in PHP Program ('PHP Remote File Inclusion')