Difference between revisions of "Top 10 2010-A1-Injection"

Revision as of 20:43, 13 April 2010

NOTE: THIS IS NOT THE LATEST VERSION. Please visit the OWASP Top 10 project page to find the latest edition.

Am I Vulnerable to Injection?

blah blah blah more and more yada yada yad blah blah blah more and more yada yada yad blah blah blah more and more yada yada yad blah blah blah more and more yada yada yad blah blah blah more and more yada yada yad blah blah blah more and more yada yada yad blah blah blah more and more yada yada yad

Example Attack Scenario

How Do I Prevent XSS?

References

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4899
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3389
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0580

Related Articles

• Error Handling
• Category:Sensitive Data Protection Vulnerability

References

• CWE: CWE-200 (Information Leak), CWE-203 (Discrepancy Information Leak), CWE-215 (Information Leak Through Debug Information), CWE-209 (Error Message Information Leak), others.
• WASC Threat Classification:
  • http://www.webappsec.org/projects/threat/classes/information_leakage.shtml

© 2002-2010 OWASP Foundation This document is licensed under the Creative Commons Attribution-ShareAlike 3.0 license. Some rights reserved.