2389
Category ID : 907
Summary
This category identifies Software Fault Patterns (SFPs) within the Other cluster.
Membership
Nature Type ID Name Page
MemberOf 888 Software Fault Pattern (SFP) Clusters 888 2571
HasMember 975 SFP Secondary Cluster: Architecture 888 2406
HasMember 976 SFP Secondary Cluster: Compiler 888 2407
HasMember 977 SFP Secondary Cluster: Design 888 2407
HasMember 978 SFP Secondary Cluster: Implementation 888 2408
Category-929: OWASP Top Ten 2013 Category A1 - Injection
Category ID : 929
Summary
Weaknesses in this category are related to the A1 category in the OWASP Top Ten 2013.
Membership
Nature Type ID Name Page
MemberOf 928 Weaknesses in OWASP Top Ten (2013) 928 2574
HasMember 74 Improper Neutralization of Special Elements in Output
Used by a Downstream Component ('Injection')
928 137
HasMember 77 Improper Neutralization of Special Elements used in a
Command ('Command Injection')
928 145
HasMember 78 Improper Neutralization of Special Elements used in an
OS Command ('OS Command Injection')
928 151
HasMember 88 Improper Neutralization of Argument Delimiters in a
Command ('Argument Injection')
928 194
HasMember 89 Improper Neutralization of Special Elements used in an
SQL Command ('SQL Injection')
928 201
HasMember 90 Improper Neutralization of Special Elements used in an
LDAP Query ('LDAP Injection')
928 212
HasMember 91 XML Injection (aka Blind XPath Injection) 928 215
HasMember 643 Improper Neutralization of Data within XPath
Expressions ('XPath Injection')
928 1419
HasMember 652 Improper Neutralization of Data within XQuery
Expressions ('XQuery Injection')
928 1435
References
[REF-927]OWASP. "Top 10 2013-A1-Injection". < https://www.owasp.org/index.php/Top_10_2013-
A1-Injection >.
Category-930: OWASP Top Ten 2013 Category A2 - Broken Authentication and
Session Management
Category ID : 930
CWE Version 4.14
CWE-931: OWASP Top Ten 2013 Category A3 - Cross-Site Scripting (XSS)
CWE-931: OWASP Top Ten 2013 Category A3 - Cross-Site Scripting (XSS)