2331
Nature Type ID Name Page
HasMember 93 Improper Neutralization of CRLF Sequences ('CRLF
Injection')
629 217
Category-714: OWASP Top Ten 2007 Category A3 - Malicious File Execution
Category ID : 714
Summary
Weaknesses in this category are related to the A3 category in the OWASP Top Ten 2007.
Membership
Nature Type ID Name Page
MemberOf 629 Weaknesses in OWASP Top Ten (2007) 629 2551
HasMember 78 Improper Neutralization of Special Elements used in an
OS Command ('OS Command Injection')
629 151
HasMember 95 Improper Neutralization of Directives in Dynamically
Evaluated Code ('Eval Injection')
629 226
HasMember 98 Improper Control of Filename for Include/Require
Statement in PHP Program ('PHP Remote File
Inclusion')
629 236
HasMember 434 Unrestricted Upload of File with Dangerous Type 629 1048
Category-715: OWASP Top Ten 2007 Category A4 - Insecure Direct Object
Reference
Category ID : 715
Summary
Weaknesses in this category are related to the A4 category in the OWASP Top Ten 2007.
Membership
Nature Type ID Name Page
MemberOf 629 Weaknesses in OWASP Top Ten (2007) 629 2551
HasMember 22 Improper Limitation of a Pathname to a Restricted
Directory ('Path Traversal')
629 33
HasMember 472 External Control of Assumed-Immutable Web
Parameter
629 1123
HasMember 639 Authorization Bypass Through User-Controlled Key 629 1406
References
[REF-528]OWASP. "Top 10 2007-Insecure Direct Object Reference". 2007. < http://
www.owasp.org/index.php/Top_10_2007-A4 >.
Category-716: OWASP Top Ten 2007 Category A5 - Cross Site Request
Forgery (CSRF)
Category ID : 716
CWE Version 4.14
CWE-717: OWASP Top Ten 2007 Category A6 - Information Leakage and Improper Error Handling
CWE-717: OWASP Top Ten 2007 Category A6 -
Information Leakage and Improper Error Handling 2332
Summary
Weaknesses in this category are related to the A5 category in the OWASP Top Ten 2007.
Membership
Nature Type ID Name Page
MemberOf 629 Weaknesses in OWASP Top Ten (2007) 629 2551
HasMember 352 Cross-Site Request Forgery (CSRF) 629 868
References
[REF-574]OWASP. "Top 10 2007-Cross Site Request Forgery". 2007. < http://www.owasp.org/
index.php/Top_10_2007-A5 >.
Category-717: OWASP Top Ten 2007 Category A6 - Information Leakage and
Improper Error Handling
Category ID : 717
Summary
Weaknesses in this category are related to the A6 category in the OWASP Top Ten 2007.
Membership
Nature Type ID Name Page
MemberOf 629 Weaknesses in OWASP Top Ten (2007) 629 2551
HasMember 200 Exposure of Sensitive Information to an Unauthorized
Actor
629 504
HasMember 203 Observable Discrepancy 629 518
HasMember 209 Generation of Error Message Containing Sensitive
Information
629 533
HasMember 215 Insertion of Sensitive Information Into Debugging Code 629 551
References
[REF-575]OWASP. "Top 10 2007-Information Leakage and Improper Error Handling". 2007. <
http://www.owasp.org/index.php/Top_10_2007-A6 >.
Category-718: OWASP Top Ten 2007 Category A7 - Broken Authentication and
Session Management
Category ID : 718
Summary
Weaknesses in this category are related to the A7 category in the OWASP Top Ten 2007.
Membership
Nature Type ID Name Page
MemberOf 629 Weaknesses in OWASP Top Ten (2007) 629 2551
HasMember 287 Improper Authentication 629 692
HasMember 301 Reflection Attack in an Authentication Protocol 629 733
HasMember 522 Insufficiently Protected Credentials 629 1225
References
CWE Version 4.14
CWE-719: OWASP Top Ten 2007 Category A8 - Insecure Cryptographic Storage
CWE-719: OWASP Top Ten 2007 Category A8 - Insecure Cryptographic Storage