145
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 19 Data Processing Errors 2309
Applicable Platforms
Language : PHP (Prevalence = Undetermined)
Language : Perl (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Confidentiality
Integrity
Availability
Execute Unauthorized Code or Commands
Potential Mitigations
Phase: Implementation
The regular expression feature in some languages allows inputs to be quoted or escaped before
insertion, such as \Q and \E in Perl.
Observed Examples
Reference Description
CVE-2006-2059 Executable regexp in PHP by inserting "e" modifier into first argument to
preg_replace
https://www.cve.org/CVERecord?id=CVE-2006-2059
CVE-2005-3420 Executable regexp in PHP by inserting "e" modifier into first argument to
preg_replace
https://www.cve.org/CVERecord?id=CVE-2005-3420
CVE-2006-2878 Complex curly syntax inserted into the replacement argument to PHP
preg_replace(), which uses the "/e" modifier
https://www.cve.org/CVERecord?id=CVE-2006-2878
CVE-2006-2908 Function allows remote attackers to execute arbitrary PHP code via the
username field, which is used in a preg_replace function call with a /e
(executable) modifier.
https://www.cve.org/CVERecord?id=CVE-2006-2908
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 990 SFP Secondary Cluster: Tainted Input to Command 888 2413
MemberOf 1409 Comprehensive Categorization: Injection 1400 2535
Notes
Research Gap
Under-studied. The existing PHP reports are limited to highly skilled researchers, but there are
few examples for other languages. It is suspected that this is under-reported for all languages.
Usability factors might make it more prevalent in PHP, but this theory has not been investigated.
Taxonomy Mappings
CWE Version 4.14
CWE-625: Permissive Regular Expression
CWE-625: Permissive Regular Expression