Tên: Weaknesses in OWASP Top Ten (2007)

CWE nodes in this view (graph) are associated with the OWASP Top Ten, as released in 2007. This view is considered obsolete as a newer version of the OWASP Top Ten is available.

Thành viên CWE

CWE-712: OWASP Top Ten 2007 Category A1 - Cross Site Scripting (XSS) Danh mục

CWE-712: Weaknesses in this category are related to the A1 category in the OWASP Top Ten 2007.

CWE-79: Improper Neutralization of Input During Web Page Generation Cơ sở

CWE-713: OWASP Top Ten 2007 Category A2 - Injection Flaws Danh mục

CWE-713: Weaknesses in this category are related to the A2 category in the OWASP Top Ten 2007.

CWE-77: Improper Neutralization of Special Elements used in a Command Cơ sở

CWE-89: Improper Neutralization of Special Elements used in an SQL Command Cơ sở

CWE-90: Improper Neutralization of Special Elements used in an LDAP Query Cơ sở

CWE-91: XML Injection Cơ sở

CWE-93: Improper Neutralization of CRLF Sequences Cơ sở

CWE-714: OWASP Top Ten 2007 Category A3 - Malicious File Execution Danh mục

CWE-714: Weaknesses in this category are related to the A3 category in the OWASP Top Ten 2007.

CWE-434: Unrestricted Upload of File with Dangerous Type Cơ sở

CWE-78: Improper Neutralization of Special Elements used in an OS Command Cơ sở

CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code Cơ sở

CWE-98: Improper Control of Filename for Include/Require Statement in PHP Program Cơ sở

CWE-715: OWASP Top Ten 2007 Category A4 - Insecure Direct Object Reference Danh mục

CWE-715: Weaknesses in this category are related to the A4 category in the OWASP Top Ten 2007.

CWE-22: Improper Limitation of a Pathname to a Restricted Directory Cơ sở

CWE-472: External Control of Assumed-Immutable Web Parameter Cơ sở

CWE-639: Authorization Bypass Through User-Controlled Key Cơ sở

CWE-716: OWASP Top Ten 2007 Category A5 - Cross Site Request Forgery (CSRF) Danh mục

CWE-716: Weaknesses in this category are related to the A5 category in the OWASP Top Ten 2007.

CWE-352: Cross-Site Request Forgery Cơ sở

CWE-717: OWASP Top Ten 2007 Category A6 - Information Leakage and Improper Error Handling Danh mục

CWE-717: Weaknesses in this category are related to the A6 category in the OWASP Top Ten 2007.

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor Cơ sở

CWE-203: Observable Discrepancy Cơ sở

CWE-209: Generation of Error Message Containing Sensitive Information Cơ sở

CWE-215: Insertion of Sensitive Information Into Debugging Code Cơ sở

CWE-718: OWASP Top Ten 2007 Category A7 - Broken Authentication and Session Management Danh mục

CWE-718: Weaknesses in this category are related to the A7 category in the OWASP Top Ten 2007.

CWE-287: Improper Authentication Cơ sở

CWE-301: Reflection Attack in an Authentication Protocol Cơ sở

CWE-522: Insufficiently Protected Credentials Cơ sở

CWE-719: OWASP Top Ten 2007 Category A8 - Insecure Cryptographic Storage Danh mục

CWE-719: Weaknesses in this category are related to the A8 category in the OWASP Top Ten 2007.

CWE-311: Missing Encryption of Sensitive Data Cơ sở

CWE-321: Use of Hard-coded Cryptographic Key Cơ sở

CWE-325: Missing Cryptographic Step Cơ sở

CWE-326: Inadequate Encryption Strength Cơ sở

CWE-720: OWASP Top Ten 2007 Category A9 - Insecure Communications Danh mục

CWE-720: Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2007.

CWE-311: Missing Encryption of Sensitive Data Cơ sở

CWE-321: Use of Hard-coded Cryptographic Key Cơ sở

CWE-325: Missing Cryptographic Step Cơ sở

CWE-326: Inadequate Encryption Strength Cơ sở

CWE-721: OWASP Top Ten 2007 Category A10 - Failure to Restrict URL Access Danh mục

CWE-721: Weaknesses in this category are related to the A10 category in the OWASP Top Ten 2007.

CWE-285: Improper Authorization Cơ sở

CWE-288: Authentication Bypass Using an Alternate Path or Channel Cơ sở

CWE-425: Direct Request Cơ sở

Thông tin chế độ xem CWE

Ghi chú ánh xạ lỗ hổng

Lý do : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
Bình luận : Use this View or other Views to search and navigate for the appropriate weakness.

Ghi chú

The relationships in this view are a direct extraction of the CWE mappings that are in the 2007 OWASP document. CWE has changed since the release of that document.

Đối tượng

Bên liên quan	Mô tả
Software Developers	This view outlines the most important issues as identified by the OWASP Top Ten (2007 version), providing a good starting point for web application developers who want to code more securely.
Product Customers	This view outlines the most important issues as identified by the OWASP Top Ten (2007 version), providing customers with a way of asking their software developers to follow minimum expectations for secure code.
Educators	Since the OWASP Top Ten covers the most frequently encountered issues, this view can be used by educators as training material for students.

Gửi

Tên	Tổ chức	Ngày	Ngày phát hành	Version
CWE Content Team	MITRE	2007-10-01 +00:00	2007-10-01 +00:00	Draft 7

Sửa đổi

Tên	Tổ chức	Ngày	Bình luận
CWE Content Team	MITRE	2008-09-08 +00:00	updated Description, Name, Relationships, References, Relationship_Notes, View_Audience, View_Structure
CWE Content Team	MITRE	2017-01-19 +00:00	updated Relationships
CWE Content Team	MITRE	2017-11-08 +00:00	updated References
CWE Content Team	MITRE	2019-01-03 +00:00	updated Description
CWE Content Team	MITRE	2020-02-24 +00:00	updated View_Audience
CWE Content Team	MITRE	2023-04-27 +00:00	updated References
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes

Tài liệu tham khảo

REF-43

OWASP TOP 10
OWASP.
https://github.com/owasp-top/owasp-top-2007

Chi tiết chế độ xem CWE-629

CWE-629