2336
Nature Type ID Name Page
MemberOf 711 Weaknesses in OWASP Top Ten (2004) 711 2559
HasMember 255 Credentials Management Errors 711 2315
HasMember 259 Use of Hard-coded Password 711 623
HasMember 287 Improper Authentication 711 692
HasMember 296 Improper Following of a Certificate's Chain of Trust 711 719
HasMember 298 Improper Validation of Certificate Expiration 711 726
HasMember 302 Authentication Bypass by Assumed-Immutable Data 711 735
HasMember 304 Missing Critical Step in Authentication 711 738
HasMember 307 Improper Restriction of Excessive Authentication
Attempts
711 747
HasMember 309 Use of Password System for Primary Authentication 711 754
HasMember 345 Insufficient Verification of Data Authenticity 711 851
HasMember 384 Session Fixation 711 936
HasMember 521 Weak Password Requirements 711 1223
HasMember 522 Insufficiently Protected Credentials 711 1225
HasMember 525 Use of Web Browser Cache Containing Sensitive
Information
711 1233
HasMember 613 Insufficient Session Expiration 711 1371
HasMember 620 Unverified Password Change 711 1383
HasMember 640 Weak Password Recovery Mechanism for Forgotten
Password
711 1409
HasMember 798 Use of Hard-coded Credentials 711 1690
References
[REF-583]OWASP. "A3 Broken Authentication and Session Management". 2007. < http://
sourceforge.net/project/showfiles.php?group_id=64424&package_id=70827 >.
Category-725: OWASP Top Ten 2004 Category A4 - Cross-Site Scripting (XSS)
Flaws
Category ID : 725
Summary
Weaknesses in this category are related to the A4 category in the OWASP Top Ten 2004.
Membership
Nature Type ID Name Page
MemberOf 711 Weaknesses in OWASP Top Ten (2004) 711 2559
HasMember 79 Improper Neutralization of Input During Web Page
Generation ('Cross-site Scripting')
711 163
HasMember 644 Improper Neutralization of HTTP Headers for Scripting
Syntax
711 1422
References
[REF-584]OWASP. "A4 Cross-Site Scripting (XSS) Flaws". 2007. < http://sourceforge.net/project/
showfiles.php?group_id=64424&package_id=70827 >.
Category-726: OWASP Top Ten 2004 Category A5 - Buffer Overflows
CWE Version 4.14
CWE-727: OWASP Top Ten 2004 Category A6 - Injection Flaws
CWE-727: OWASP Top Ten 2004 Category A6 - Injection Flaws