This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Cornucopia - Ecommerce Website - C 5"

From OWASP
Jump to: navigation, search
(Created page with "{{DISPLAYTITLE:<span style="padding:2px 5px 0px 5px;color:white;background:#17365d;">Cornucopia - Ecommerce Website - C 5</span>}} File:Cornucopia_-_Ecommerce_Website_C_5.pn...")
 
 
Line 56: Line 56:
 
   </tr>
 
   </tr>
 
</table>
 
</table>
 
 
 
 
  
  
  
 
<div style="padding:5px;background:LightGray;color:White;font-weight:bold;">[[Cornucopia_-_Ecommerce_Website_-_C_4|« Previous Card]] <span style="padding-left:10px;padding-right:10px;">|</span>  [[Cornucopia_-_Ecommerce_Website_-_C|Cornucopia]] <span style="padding-left:10px;padding-right:10px;">|</span> [[Cornucopia_-_Ecommerce_Website_-_C_6|Next Card »]] </div>
 
<div style="padding:5px;background:LightGray;color:White;font-weight:bold;">[[Cornucopia_-_Ecommerce_Website_-_C_4|« Previous Card]] <span style="padding-left:10px;padding-right:10px;">|</span>  [[Cornucopia_-_Ecommerce_Website_-_C|Cornucopia]] <span style="padding-left:10px;padding-right:10px;">|</span> [[Cornucopia_-_Ecommerce_Website_-_C_6|Next Card »]] </div>

Latest revision as of 16:30, 21 January 2016

Cornucopia - Ecommerce Website C 5.png

Suit: Cornucopia

Card/Value: 5

Description:

Larry can influence the trust other parties including users have in the application, or abuse that trust elsewhere (e.g. in another application).

Technical Note:

Abuse of trust attacks include:

  • Clickjacking.
  • Phishing.
  • Pharming.
  • SSL downgrade/misconfiguration.

References:

OWASP SCP OWASP ASVS OWASP AppSensor CAPEC SAFECODE
- - - 89 -
103
181
459


« Previous Card | Cornucopia | Next Card »