This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Server-Side Includes (SSI) Injection"

From OWASP
Jump to: navigation, search
 
(Description)
Line 1: Line 1:
 
 
{{Template:Attack}}
 
{{Template:Attack}}
  
 
==Description==
 
==Description==
 +
SSI can be injected in to input fields where code is echo'd out and attackers are able to execute commands.
  
 
==Examples ==
 
==Examples ==

Revision as of 19:16, 29 April 2007

This is an Attack. To view all attacks, please see the Attack Category page.


Description

SSI can be injected in to input fields where code is echo'd out and attackers are able to execute commands.

Examples

Related Threats

Related Attacks

Related Vulnerabilities

Related Countermeasures

Categories

This article is a stub. You can help OWASP by expanding it or discussing it on its Talk page.