2337
Category ID : 726
Summary
Weaknesses in this category are related to the A5 category in the OWASP Top Ten 2004.
Membership
Nature Type ID Name Page
MemberOf 711 Weaknesses in OWASP Top Ten (2004) 711 2559
HasMember 119 Improper Restriction of Operations within the Bounds of
a Memory Buffer
711 293
HasMember 120 Buffer Copy without Checking Size of Input ('Classic
Buffer Overflow')
711 304
HasMember 134 Use of Externally-Controlled Format String 711 365
References
[REF-585]OWASP. "A5 Buffer Overflows". 2007. < http://sourceforge.net/project/showfiles.php?
group_id=64424&package_id=70827 >.
Category-727: OWASP Top Ten 2004 Category A6 - Injection Flaws
Category ID : 727
Summary
Weaknesses in this category are related to the A6 category in the OWASP Top Ten 2004.
Membership
Nature Type ID Name Page
MemberOf 711 Weaknesses in OWASP Top Ten (2004) 711 2559
HasMember 74 Improper Neutralization of Special Elements in Output
Used by a Downstream Component ('Injection')
711 137
HasMember 77 Improper Neutralization of Special Elements used in a
Command ('Command Injection')
711 145
HasMember 78 Improper Neutralization of Special Elements used in an
OS Command ('OS Command Injection')
711 151
HasMember 89 Improper Neutralization of Special Elements used in an
SQL Command ('SQL Injection')
711 201
HasMember 91 XML Injection (aka Blind XPath Injection) 711 215
HasMember 95 Improper Neutralization of Directives in Dynamically
Evaluated Code ('Eval Injection')
711 226
HasMember 98 Improper Control of Filename for Include/Require
Statement in PHP Program ('PHP Remote File
Inclusion')
711 236
HasMember 117 Improper Output Neutralization for Logs 711 288
References
[REF-586]OWASP. "A6 Injection Flaws". 2007. < http://sourceforge.net/project/showfiles.php?
group_id=64424&package_id=70827 >.
Category-728: OWASP Top Ten 2004 Category A7 - Improper Error Handling
Category ID : 728
CWE Version 4.14
CWE-729: OWASP Top Ten 2004 Category A8 - Insecure Storage
CWE-729: OWASP Top Ten 2004 Category A8 - Insecure Storage