1422
This weakness is similar to other weaknesses that enable injection style attacks, such as SQL
injection, command injection and LDAP injection. The main difference is that the target of attack
here is the XML database.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
WASC 39 XPath Injection
Software Fault Patterns SFP24 Tainted input to command
References
[REF-531]Web Application Security Consortium. "XPath Injection". < http://projects.webappsec.org/
w/page/13247005/XPath%20Injection >.2023-04-07.
[REF-62]Mark Dowd, John McDonald and Justin Schuh. "The Art of Software Security
Assessment". 1st Edition. 2006. Addison Wesley.
CWE-644: Improper Neutralization of HTTP Headers for Scripting Syntax
Weakness ID : 644
Structure : Simple
Abstraction : Variant
Description
The product does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers
that can be used by web browser components that can process raw headers, such as Flash.
Extended Description
An attacker may be able to conduct cross-site scripting and other attacks against users who have
these components enabled.
If a product does not neutralize user controlled data being placed in the header of an HTTP
response coming from the server, the header may contain a script that will get executed in the
client's browser context, potentially resulting in a cross site scripting vulnerability or possibly an
HTTP response splitting attack. It is important to carefully control data that is being placed both
in HTTP response header and in the HTTP response body to ensure that no scripting syntax is
present, taking various encodings into account.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 116 Improper Encoding or Escaping of Output 281
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Technology : Web Based (Prevalence = Undetermined)
Likelihood Of Exploit
High
Common Consequences
CWE Version 4.14
CWE-645: Overly Restrictive Account Lockout Mechanism
CWE-645: Overly Restrictive Account Lockout Mechanism