2330
Category-569: Expression Issues
Category ID : 569
Summary
Weaknesses in this category are related to incorrectly written expressions within code.
Membership
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
HasMember 480 Use of Incorrect Operator 699 1150
HasMember 570 Expression is Always False 699 1292
HasMember 571 Expression is Always True 699 1295
HasMember 783 Operator Precedence Logic Error 699 1650
Category-712: OWASP Top Ten 2007 Category A1 - Cross Site Scripting (XSS)
Category ID : 712
Summary
Weaknesses in this category are related to the A1 category in the OWASP Top Ten 2007.
Membership
Nature Type ID Name Page
MemberOf 629 Weaknesses in OWASP Top Ten (2007) 629 2551
HasMember 79 Improper Neutralization of Input During Web Page
Generation ('Cross-site Scripting')
629 163
References
[REF-572]OWASP. "Top 10 2007-Cross Site Scripting". 2007. < http://www.owasp.org/index.php/
Top_10_2007-A1 >.
Category-713: OWASP Top Ten 2007 Category A2 - Injection Flaws
Category ID : 713
Summary
Weaknesses in this category are related to the A2 category in the OWASP Top Ten 2007.
Membership
Nature Type ID Name Page
MemberOf 629 Weaknesses in OWASP Top Ten (2007) 629 2551
HasMember 77 Improper Neutralization of Special Elements used in a
Command ('Command Injection')
629 145
HasMember 89 Improper Neutralization of Special Elements used in an
SQL Command ('SQL Injection')
629 201
HasMember 90 Improper Neutralization of Special Elements used in an
LDAP Query ('LDAP Injection')
629 212
HasMember 91 XML Injection (aka Blind XPath Injection) 629 215
CWE Version 4.14
CWE-714: OWASP Top Ten 2007 Category A3 - Malicious File Execution
CWE-714: OWASP Top Ten 2007 Category A3 - Malicious File Execution