Top 10 2013-A5-Security Misconfiguration

TEMPORARY PLACEHOLDER for 2013 T10

NOTE: THIS IS NOT THE LATEST VERSION. Please visit the OWASP Top 10 project page to find the latest edition.

[[Top 10 {{{year}}}-Insecure Direct Object References|← Insecure Direct Object References]]

[[Top 10 {{{year}}}-Table of Contents | {{{year}}} Table of Contents]] [[Top_10_{{{year}}}-Top 10|{{{year}}} Top 10 List]]

[[Top 10 {{{year}}}-Sensitive Data Exposure|Sensitive Data Exposure →]]

PLEASE DELETE ME

    <td style="font-size: 100%; font-weight: bold; background-color: #D9D9D9; color: #000000; border: 3px solid #444444">

Application / Business Specific </td> </tr> <tr valign="top">

    <td style="text-align: left; border: 3px solid #444444;">blank.</td>
    <td style="text-align: left; border: 3px solid #444444;">blank</td>
    <td colspan=2  style="text-align: left; border: 3px solid #444444;">blank</td>
    <td style="text-align: left; border: 3px solid #444444;">blank</td>
    <td style="text-align: left; border: 3px solid #444444;">blank</td>

</tr></table></center>

Am I Vulnerable To 'Security Misconfiguration'? blank	How Do I Prevent 'Security Misconfiguration'? blank blankBullet1 blankBullet2
Example Attack Scenarios blank blank code blank http://example.com/app/accountView?id=' or '1'='1 blank	References OWASP OWASP SQL Injection Prevention Cheat Sheet ESAPI Encoder API External CWE Entry 77 on Command Injection CWE Entry 89 on SQL Injection

[[Top 10 {{{year}}}-Insecure Direct Object References|← Insecure Direct Object References]]

[[Top 10 {{{year}}}-Table of Contents | {{{year}}} Table of Contents]] [[Top_10_{{{year}}}-Top 10|{{{year}}} Top 10 List]]

[[Top 10 {{{year}}}-Sensitive Data Exposure|Sensitive Data Exposure →]]

---

© 2002-2013 OWASP Foundation This document is licensed under the Creative Commons Attribution-ShareAlike 3.0 license. Some rights reserved. [[Category:OWASP Top Ten {{{year}}} Project]]