444
Reference Description
CVE-2005-2256 Hex-encoded path traversal variants - "%2e%2e", "%2e%2e%2f", "%5c%2e
%2e"
https://www.cve.org/CVERecord?id=CVE-2005-2256
CVE-2004-2121 Hex-encoded path traversal variants - "%2e%2e", "%2e%2e%2f", "%5c%2e
%2e"
https://www.cve.org/CVERecord?id=CVE-2004-2121
CVE-2004-0280 "%20" (encoded space)
https://www.cve.org/CVERecord?id=CVE-2004-0280
CVE-2003-0424 "%20" (encoded space)
https://www.cve.org/CVERecord?id=CVE-2003-0424
CVE-2001-0693 "%20" (encoded space)
https://www.cve.org/CVERecord?id=CVE-2001-0693
CVE-2001-0778 "%20" (encoded space)
https://www.cve.org/CVERecord?id=CVE-2001-0778
CVE-2002-1831 Crash via hex-encoded space "%20".
https://www.cve.org/CVERecord?id=CVE-2002-1831
CVE-2000-0671 "%00" (encoded null)
https://www.cve.org/CVERecord?id=CVE-2000-0671
CVE-2004-0189 "%00" (encoded null)
https://www.cve.org/CVERecord?id=CVE-2004-0189
CVE-2002-1291 "%00" (encoded null)
https://www.cve.org/CVERecord?id=CVE-2002-1291
CVE-2002-1031 "%00" (encoded null)
https://www.cve.org/CVERecord?id=CVE-2002-1031
CVE-2001-1140 "%00" (encoded null)
https://www.cve.org/CVERecord?id=CVE-2001-1140
CVE-2004-0760 "%00" (encoded null)
https://www.cve.org/CVERecord?id=CVE-2004-0760
CVE-2002-1025 "%00" (encoded null)
https://www.cve.org/CVERecord?id=CVE-2002-1025
CVE-2002-1213 "%2f" (encoded slash)
https://www.cve.org/CVERecord?id=CVE-2002-1213
CVE-2004-0072 "%5c" (encoded backslash) and "%2e" (encoded dot) sequences
https://www.cve.org/CVERecord?id=CVE-2004-0072
CVE-2004-0847 "%5c" (encoded backslash)
https://www.cve.org/CVERecord?id=CVE-2004-0847
CVE-2002-1575 "%0a" (overlaps CRLF)
https://www.cve.org/CVERecord?id=CVE-2002-1575
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 992 SFP Secondary Cluster: Faulty Input Transformation 888 2416
MemberOf 1407 Comprehensive Categorization: Improper Neutralization 1400 2532
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER URL Encoding (Hex Encoding)
Related Attack Patterns
CWE Version 4.14
CWE-178: Improper Handling of Case Sensitivity
CWE-178: Improper Handling of Case Sensitivity