165
account on that web site. Finally, the script could exploit a vulnerability in the web browser itself
possibly taking over the victim's machine, sometimes referred to as "drive-by hacking."
In many cases, the attack can be launched without the victim even being aware of it. Even with
careful users, attackers frequently use a variety of methods to encode the malicious portion of the
attack, such as URL encoding or Unicode, so the request looks less suspicious.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 74 Improper Neutralization of Special Elements in Output Used
by a Downstream Component ('Injection')