2.3 KB · ⇊ 2 parts · ⤓ Micron 2.3 KB · ⤓ HTML 9.7 KB

top

Improper input validationcite-ref-0-1-0[1] or unchecked user input is a type of vulnerability in computer software that may be used for security exploits.cite-ref-hacking-2-0[2] This vulnerability is caused when "[t]he product does not validate or incorrectly validates input that can affect the control flow or data flow of a program."cite-ref-0-1-1[1]

Examples include:

• Buffer overflow

• Cross-site scripting

• Directory traversal

• Null byte injection

• SQL injection

• Uncontrolled format string

cite-note-0-11. ↑ "CWE-20: Improper Input Validation". Common Weakness Enumeration. MITRE. December 13, 2010. Retrieved February 22, 2011.

cite-note-hacking-22. ↑ citereferickson2008Erickson, Jon (2008). Hacking: the art of exploitation. No Starch Press Series (2, illustrated ed.). Safari Books Online. ISBN 978-1-59327-144-2.