Struts: Validator Without Form Field - Revision history

KirstenS at 23:01, 7 April 2009

2009-04-07T23:01:40Z

KirstenS at 01:21, 18 February 2009

2009-02-18T01:21:12Z

KirstenS: /* References */

2009-02-18T01:19:45Z

‎References

KirstenS at 00:41, 6 November 2008

2008-11-06T00:41:08Z

KirstenS at 00:54, 1 October 2008

2008-10-01T00:54:39Z

Weilin Zhong: Contents provided by Fortify.

2006-07-24T18:26:35Z

Contents provided by Fortify.

Weilin Zhong at 19:39, 16 June 2006

2006-06-16T19:39:34Z

New page

{{Template:Vulnerability}}

==Description==

==Examples ==

==Related Threats==

==Related Attacks==

==Related Vulnerabilities==

==Related Countermeasures==

==Categories==

{{Template:Stub}}

[[Category:Input Validation Vulnerability]]

[[Category:Struts]]

← Older revision		Revision as of 23:01, 7 April 2009
Line 4:		Line 4:


−	~~__TOC__~~
−
−	~~[[ASDR Table of Contents]]~~

@@ Line 1: / Line 1: @@
-{{Template:Vulnerability}}
+{{template:CandidateForDeletion}}
-{{Template:Fortify}}
 __TOC__
@@ Line 10: / Line 12: @@
 Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''

← Older revision		Revision as of 01:19, 18 February 2009
Line 94:		Line 94:

	__NOTOC__		__NOTOC__
−
−
−	~~[[Category:OWASP ASDR Project]]~~
−	~~[Category:Input Validation Vulnerability]]~~
−	~~[[Category:Struts]]~~
−	~~[[Category:Java]]~~
−	~~[[Category:Code Snippet]]~~
−	~~[[Category:Implementation]]~~
−	~~[[Category:Vulnerability]]~~

@@ Line 2: / Line 2: @@
 {{Template:Fortify}}
-[[Category:FIXME|This is the text from the old template. This needs to be rewritten using the new template.]]
+__TOC__
 Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''
-[[ASDR Table of Contents]]
+[[Category:FIXME|This is the text from the old template. This needs to be rewritten using the new template.]]
@@ Line 100: / Line 102: @@
 [[Category:Code Snippet]]
 [[Category:Implementation]]

@@ Line 2: / Line 2: @@
 {{Template:Fortify}}
-==Abstract==
+[[Category:FIXME|This is the text from the old template. This needs to be rewritten using the new template.]]
 ==Description==
 It is easy for developers to forget to update validation logic when they make changes to an ActionForm class. One indication that validation logic is not being properly maintained is inconsistencies between the action form and the validation form.
-==Examples ==
+==Risk Factors==
 ===Example 1===
@@ Line 52: / Line 64: @@
 It is critically important that validation logic be maintained and kept in sync with the rest of the application. Unchecked input is the root cause of some of today's worst and most common software security problems. Cross-site scripting, SQL injection, and process control vulnerabilities all stem from incomplete or absent input validation. Although J2EE applications are not generally susceptible to memory corruption attacks, if a J2EE application interfaces with native code that does not perform array bounds checking, an attacker may be able to use an input validation mistake in the J2EE application to launch a buffer overflow attack.
-==Related Attacks==
+==Related [[Attacks]]==
-==Related Vulnerabilities==
+==References==
-[[:Category:Input Validation]]
+__NOTOC__
-[[Category:Input Validation Vulnerability]]
+[[Category:OWASP ASDR Project]]
 [[Category:Struts]]
 [[Category:Java]]
 [[Category:Code Snippet]]
 [[Category:Implementation]]