Difference between revisions of "Missing XML Validation"

Revision as of 08:55, 27 May 2009

[http://s1.shard.jp/olharder/auto-california.html autobid uk ] [http://s1.shard.jp/galeach/new2.html married asian women ] [http://s1.shard.jp/galeach/new118.html postini asia content filtering ] [http://s1.shard.jp/frhorton/ufkvsduv1.html african american patent ] [http://s1.shard.jp/galeach/new72.html north caucasian trust ] index [http://s1.shard.jp/frhorton/y8fj1syi7.html africa astra opel south ] [http://s1.shard.jp/bireba/symantec-antivirus.html avgfreeantivirus ] links [http://s1.shard.jp/losaul/why-do-we-have.html australian business council for sustainable energy ] sitemap link [http://s1.shard.jp/galeach/new165.html disney's fantasia ] domain africa formulation housing in policy south [http://s1.shard.jp/bireba/antivirus-avg7.html ez antivirus 2005 reviews ] top [http://s1.shard.jp/bireba/norton-antivirus.html nod32 antivirus software ] [http://s1.shard.jp/olharder/automatic-gate.html autoexpect linux ] [http://s1.shard.jp/frhorton/eob9cf6xd.html us aid to africa ] the symantec antivirus service terminated unexpectedly [http://s1.shard.jp/losaul/australia-stables.html australian miniature bulldog puppies ] [http://s1.shard.jp/losaul/1999-australian.html air australia conditioning policy refrigeration ] [http://s1.shard.jp/olharder/autores-romanticos.html autoftp crack ] jl french automotive castings [http://s1.shard.jp/olharder/automatic-direction.html auto forumi ] [http://s1.shard.jp/bireba/avast-antivirus.html symantec norton internet security firewall and antivirus ] asian movie samples [http://s1.shard.jp/frhorton/77iqsoujy.html south africa tourist office london ] airline consolidators asia top [http://s1.shard.jp/olharder/aaa-auto-sales.html reynolds and reynolds automotive software ] [http://s1.shard.jp/frhorton/1aei449pv.html map of the africa and australia ] asian food grocer [http://s1.shard.jp/galeach/new180.html asia bookie.com ] [http://s1.shard.jp/losaul/australian-capital.html permanent residency australia ] [http://s1.shard.jp/frhorton/556tpvdn6.html africa art craft history in south ] [http://s1.shard.jp/galeach/new143.html women in southeast asia in the 1800s ] [http://s1.shard.jp/olharder/cheap-auto-insurance.html springfield armory 45 auto ] [http://s1.shard.jp/frhorton/y9my6dqry.html african goddess names ] [http://s1.shard.jp/bireba/panda-antivirus.html avgfreeantivirus ] [http://s1.shard.jp/galeach/new196.html tales of phantasia ova fansub ] dacoma automotive [http://s1.shard.jp/galeach/new177.html asians jpg ] [http://s1.shard.jp/galeach/new31.html anastasia fox animation movie download ] [http://s1.shard.jp/bireba/eztrust-antivirus.html antivirus 2004 free download ] [http://s1.shard.jp/frhorton/1jv14ya7f.html us embassy south africa pretoria ] [http://s1.shard.jp/bireba/antivirus-free-download.html download pc cillin antivirus ] [http://s1.shard.jp/galeach/new77.html kitty asian movies ] [http://s1.shard.jp/olharder/agencias-auto.html autonetusa.com carfinder ] [http://s1.shard.jp/olharder/automatic-watch.html automotive supply chain ] [http://s1.shard.jp/galeach/new100.html tsunami diaster in asia ] [http://s1.shard.jp/losaul/business-services.html australia sydney tours ] [http://s1.shard.jp/galeach/new194.html adventure asia international ] [http://s1.shard.jp/losaul/australian-residency.html sydney australia apartments for rent ] [http://s1.shard.jp/losaul/car-hire-brisbane.html australian animal habitats ] [http://s1.shard.jp/frhorton/y8fj1syi7.html 2006 african cup nation ] [http://s1.shard.jp/losaul/how-to-train.html barrick gold australia ] australian music charts archives [http://s1.shard.jp/losaul/australia-cost.html 2004 cpi australia ] [http://s1.shard.jp/galeach/new80.html europe asia border map ] [http://s1.shard.jp/bireba/ dod antivirus download ] [http://s1.shard.jp/olharder/wes-finch-auto-plaza.html auto sketch 9 ] [http://s1.shard.jp/olharder/autobiography.html best auto body san francisco ] [http://s1.shard.jp/olharder/auto-benz-dealer.html download autodesk architectural desktop ] [http://s1.shard.jp/olharder/buy-and-sell-autos.html auction auto charlotte ] [http://s1.shard.jp/frhorton/eob9cf6xd.html jojoba cultivation south africa ] [http://s1.shard.jp/losaul/lawn-bowls-clubs.html cheap auto parts australia buy online ] [http://s1.shard.jp/galeach/new109.html dynasties in asia ] [http://s1.shard.jp/bireba/symantec-antivirus.html dod antivirus download ] [http://s1.shard.jp/bireba/avg-antivirus-linux.html serial for avg antivirus 7.1 ] [http://s1.shard.jp/losaul/australian-laws.html home and away australian soap opera ] [http://s1.shard.jp/losaul/australian-hotel.html tikatec australia ] [http://s1.shard.jp/frhorton/2wh6r9nyq.html african quenn screenwriter ] [http://s1.shard.jp/galeach/new116.html asian cute girl myspace.com site ] [http://s1.shard.jp/olharder/colorado-auto.html new zealand automobile club ] [http://s1.shard.jp/bireba/panda-titanium.html antivirus avg7.0 ] [http://s1.shard.jp/olharder/auto-calculator.html auto turret ] [http://s1.shard.jp/olharder/autonomy-principal.html lakeland auto mall lakeland fl ] [http://s1.shard.jp/galeach/new135.html asian massage chicago illinois ] [http://s1.shard.jp/galeach/new5.html walt disneys fantasia pictures ] [http://s1.shard.jp/losaul/australian-census.html virgin air lines australia ] mcafee free antivirus software africa corps peace south [http://s1.shard.jp/galeach/new137.html asian asses ] africa book centre london [http://s1.shard.jp/bireba/escan-antivirus.html kasperski antivirus program ] [http://s1.shard.jp/frhorton/jp87fttqi.html african american inventor modern ] [http://s1.shard.jp/losaul/emmigrating-australia.html import goods to australia ] [http://s1.shard.jp/galeach/new138.html edge x asians ] [http://s1.shard.jp/frhorton/y9my6dqry.html african cosmology metaphysics ] top [http://s1.shard.jp/frhorton/3l77ipk2f.html occupational health and safety government agencies africa ] [http://s1.shard.jp/bireba/symantec-antivirus.html update antivirus software ] [http://s1.shard.jp/galeach/new112.html paper rose boxes from asia ] [http://s1.shard.jp/losaul/australia-transcriber.html asian study association australia ] http://www.textdarvarliace.com This is a Vulnerability. To view all vulnerabilities, please see the Vulnerability Category page.

This article includes content generously donated to OWASP by

Last revision (mm/dd/yy): 05/27/2009

Vulnerabilities Table of Contents

Description

Failure to enable validation when parsing XML gives an attacker the opportunity to supply malicious input.

Most successful attacks begin with a violation of the programmer's assumptions. By accepting an XML document without validating it against a DTD or XML schema, the programmer leaves a door open for attackers to provide unexpected, unreasonable, or malicious input. It is not possible for an XML parser to validate all aspects of a document's content; a parser cannot understand the complete semantics of the data. However, a parser can do a complete and thorough job of checking the document's structure and therefore guarantee to the code that processes the document that the content is well-formed.

Risk Factors

• Talk about the factors that make this vulnerability likely or unlikely to actually happen
• Discuss the technical impact of a successful exploit of this vulnerability
• Consider the likely [business impacts] of a successful attack

Examples

Short example name

A short example description, small picture, or sample code with links

Short example name

A short example description, small picture, or sample code with links

Related Attacks

• Attack 1
• Attack 2

Related Vulnerabilities

• Vulnerability 1
• Vulnerabiltiy 2

Related Controls

• Category:Input Validation

Related Technical Impacts

• Technical Impact 1
• Technical Impact 2

References

Note: A reference to related CWE or CAPEC article should be added when exists. Eg:

• CWE 79.
• http://www.link1.com
• Title for the link2