2490
[REF-1206]"OWASP Top 10:2021". 2021 September 4. OWASP. < https://owasp.org/Top10/ >.
Category-1347: OWASP Top Ten 2021 Category A03:2021 - Injection
Category ID : 1347
Summary
Weaknesses in this category are related to the A03 category "Injection" in the OWASP Top Ten
2021.
Membership
Nature Type ID Name Page
MemberOf 1344 Weaknesses in OWASP Top Ten (2021) 1344 2593
HasMember 20 Improper Input Validation 1344 20
HasMember 74 Improper Neutralization of Special Elements in Output
Used by a Downstream Component ('Injection')
1344 137
HasMember 75 Failure to Sanitize Special Elements into a Different
Plane (Special Element Injection)
1344 142
HasMember 77 Improper Neutralization of Special Elements used in a
Command ('Command Injection')
1344 145
HasMember 78 Improper Neutralization of Special Elements used in an
OS Command ('OS Command Injection')
1344 151
HasMember 79 Improper Neutralization of Input During Web Page
Generation ('Cross-site Scripting')
1344 163
HasMember 80 Improper Neutralization of Script-Related HTML Tags in
a Web Page (Basic XSS)
1344 177
HasMember 83 Improper Neutralization of Script in Attributes in a Web
Page
1344 183
HasMember 87 Improper Neutralization of Alternate XSS Syntax 1344 192
HasMember 88 Improper Neutralization of Argument Delimiters in a
Command ('Argument Injection')
1344 194
HasMember 89 Improper Neutralization of Special Elements used in an
SQL Command ('SQL Injection')
1344 201
HasMember 90 Improper Neutralization of Special Elements used in an
LDAP Query ('LDAP Injection')
1344 212
HasMember 91 XML Injection (aka Blind XPath Injection) 1344 215
HasMember 93 Improper Neutralization of CRLF Sequences ('CRLF
Injection')
1344 217
HasMember 94 Improper Control of Generation of Code ('Code
Injection')
1344 219
HasMember 95 Improper Neutralization of Directives in Dynamically
Evaluated Code ('Eval Injection')
1344 226
HasMember 96 Improper Neutralization of Directives in Statically Saved
Code ('Static Code Injection')
1344 232
HasMember 97 Improper Neutralization of Server-Side Includes (SSI)
Within a Web Page
1344 235
HasMember 98 Improper Control of Filename for Include/Require
Statement in PHP Program ('PHP Remote File
Inclusion')
1344 236
HasMember 99 Improper Control of Resource Identifiers ('Resource
Injection')
1344 243
CWE Version 4.14
CWE-1348: OWASP Top Ten 2021 Category A04:2021 - Insecure Design
CWE-1348: OWASP Top Ten 2021 Category A04:2021 - Insecure Design