2414
Nature Type ID Name Page
HasMember 83 Improper Neutralization of Script in Attributes in a Web
Page
888 183
HasMember 84 Improper Neutralization of Encoded URI Schemes in a
Web Page
888 186
HasMember 85 Doubled Character XSS Manipulations 888 188
HasMember 86 Improper Neutralization of Invalid Characters in
Identifiers in Web Pages
888 190
HasMember 87 Improper Neutralization of Alternate XSS Syntax 888 192
HasMember 88 Improper Neutralization of Argument Delimiters in a
Command ('Argument Injection')
888 194
HasMember 89 Improper Neutralization of Special Elements used in an
SQL Command ('SQL Injection')
888 201
HasMember 90 Improper Neutralization of Special Elements used in an
LDAP Query ('LDAP Injection')
888 212
HasMember 91 XML Injection (aka Blind XPath Injection) 888 215
HasMember 93 Improper Neutralization of CRLF Sequences ('CRLF
Injection')
888 217
HasMember 95 Improper Neutralization of Directives in Dynamically
Evaluated Code ('Eval Injection')
888 226
HasMember 96 Improper Neutralization of Directives in Statically Saved
Code ('Static Code Injection')
888 232
HasMember 97 Improper Neutralization of Server-Side Includes (SSI)
Within a Web Page
888 235
HasMember 99 Improper Control of Resource Identifiers ('Resource
Injection')
888 243
HasMember 102 Struts: Duplicate Validation Forms 888 246
HasMember 103 Struts: Incomplete validate() Method Definition 888 248
HasMember 104 Struts: Form Bean Does Not Extend Validation Class 888 251
HasMember 105 Struts: Form Field Without Validator 888 253
HasMember 106 Struts: Plug-in Framework not in Use 888 256
HasMember 107 Struts: Unused Validation Form 888 259
HasMember 108 Struts: Unvalidated Action Form 888 261
HasMember 109 Struts: Validator Turned Off 888 263
HasMember 110 Struts: Validator Without Form Field 888 264
HasMember 112 Missing XML Validation 888 269
HasMember 113 Improper Neutralization of CRLF Sequences in HTTP
Headers ('HTTP Request/Response Splitting')
888 271
HasMember 130 Improper Handling of Length Parameter Inconsistency 888 351
HasMember 134 Use of Externally-Controlled Format String 888 365
HasMember 138 Improper Neutralization of Special Elements 888 373
HasMember 140 Improper Neutralization of Delimiters 888 376
HasMember 141 Improper Neutralization of Parameter/Argument
Delimiters
888 378
HasMember 142 Improper Neutralization of Value Delimiters 888 380
HasMember 143 Improper Neutralization of Record Delimiters 888 381
HasMember 144 Improper Neutralization of Line Delimiters 888 383
HasMember 145 Improper Neutralization of Section Delimiters 888 385
HasMember 146 Improper Neutralization of Expression/Command
Delimiters
888 387
HasMember 147 Improper Neutralization of Input Terminators 888 389
HasMember 148 Improper Neutralization of Input Leaders 888 391
CWE Version 4.14
CWE-990: SFP Secondary Cluster: Tainted Input to Command
CWE-990: SFP Secondary Cluster: Tainted Input to Command