188
Nature Type ID Name Page
MemberOf 1409 Comprehensive Categorization: Injection 1400 2535
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER XSS using Script Via Encoded URI
Schemes
Software Fault Patterns SFP24 Tainted input to command
CWE-85: Doubled Character XSS Manipulations
Weakness ID : 85
Structure : Simple
Abstraction : Variant
Description
The web application does not filter user-controlled input for executable script disguised using
doubling of the involved characters.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 79 Improper Neutralization of Input During Web Page
Generation ('Cross-site Scripting')