462
Reference Description
CVE-2005-1824 SQL injection protection scheme does not quote the "\" special character.
https://www.cve.org/CVERecord?id=CVE-2005-1824
CVE-2005-2184 Detection of risky filename extensions prevents users from automatically
executing .EXE files, but .LNK is accepted, allowing resultant Windows
symbolic link.
https://www.cve.org/CVERecord?id=CVE-2005-2184
CVE-2007-1343 Product uses list of protected variables, but accidentally omits one dangerous
variable, allowing external modification
https://www.cve.org/CVERecord?id=CVE-2007-1343
CVE-2007-5727 Chain: product only removes SCRIPT tags (CWE-184), enabling XSS
(CWE-79)
https://www.cve.org/CVERecord?id=CVE-2007-5727
CVE-2006-4308 Chain: product only checks for use of "javascript:" tag (CWE-184), allowing
XSS (CWE-79) using other tags
https://www.cve.org/CVERecord?id=CVE-2006-4308
CVE-2007-3572 Chain: OS command injection (CWE-78) enabled by using an unexpected
character that is not explicitly disallowed (CWE-184)
https://www.cve.org/CVERecord?id=CVE-2007-3572
CVE-2002-0661 "\" not in list of disallowed values for web server, allowing path traversal
attacks when the server is run on Windows and other OSes.
https://www.cve.org/CVERecord?id=CVE-2002-0661
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 990 SFP Secondary Cluster: Tainted Input to Command 888 2413
MemberOf 1347 OWASP Top Ten 2021 Category A03:2021 - Injection 1344 2490
MemberOf 1413 Comprehensive Categorization: Protection Mechanism
Failure
1400 2542
Notes
Relationship
Multiple interpretation errors can indirectly introduce inputs that should be disallowed. For
example, a list of dangerous shell metacharacters might not include a metacharacter that only
has meaning in one particular shell, not all of them; or a check for XSS manipulations might
ignore an unusual construct that is supported by one web browser, but not others.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Incomplete Blacklist
Related Attack Patterns
CAPEC-ID Attack Pattern Name
3 Using Leading 'Ghost' Character Sequences to Bypass Input Filters
6 Argument Injection
15 Command Delimiters
43 Exploiting Multiple Input Interpretation Layers
71 Using Unicode Encoding to Bypass Validation Logic
73 User-Controlled Filename
85 AJAX Footprinting
120 Double Encoding
CWE Version 4.14
CWE-185: Incorrect Regular Expression
CWE-185: Incorrect Regular Expression