This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Cornucopia - Ecommerce Website - C 9

From OWASP
Revision as of 15:27, 21 January 2016 by Dariodf (talk | contribs) (Created page with "{{DISPLAYTITLE:<span style="padding:2px 5px 0px 5px;color:white;background:#17365d;">Cornucopia - Ecommerce Website - C 9</span>}} File:Cornucopia_-_Ecommerce_Website_C_9.pn...")

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search
Cornucopia - Ecommerce Website C 9.png

Suit: Cornucopia

Card/Value: 9

Description:

Michael can bypass the application to gain access to data because administrative tools or administrative interfaces are not secured adequately.

Technical Note:

NB: The key concept for this card is protection of administrative web interfaces such as Content Management System (CMS), database and server web control panels.

References:

OWASP SCP OWASP ASVS OWASP AppSensor CAPEC SAFECODE
23 2.1 - 122 -
29 4.1 225
56 4.10
81
82
84
85
86
87
88
89
90


« Previous Card | Cornucopia | Next Card »