CWE-1027 軟體弱點詳細資料 | CVE Find

廠商與產品

CPE（通用平台枚舉）是一種用於命名硬體、軟體和作業系統的標準化方案。CPE 提供結構化命名方式，可根據廠商、產品名稱、版本、更新、版次和語言等特定屬性，唯一識別和分類資訊技術系統、平台和套件。

名稱: OWASP Top Ten 2017 Category A1 - Injection

Weaknesses in this category are related to the A1 category in the OWASP Top Ten 2017.

CWE 成員列表

CWE-77: Improper Neutralization of Special Elements used in a Command 基礎

CWE-78: Improper Neutralization of Special Elements used in an OS Command 基礎

CWE-88: Improper Neutralization of Argument Delimiters in a Command 基礎

CWE-89: Improper Neutralization of Special Elements used in an SQL Command 基礎

CWE-90: Improper Neutralization of Special Elements used in an LDAP Query 基礎

CWE-91: XML Injection 基礎

CWE-564: Use of Hibernate with HQL/SQL Query String Containing External Input 基礎

CWE-917: Improper Neutralization of Special Elements used in an Expression Language Statement 基礎

CWE-943: Improper Neutralization of Special Elements in Data Query Logic 基礎

CWE 資訊

漏洞對應備注

理由說明 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
備註 : See member weaknesses of this category.

提交

名稱	機構	日期	發布日期	Version
CWE Content Team	MITRE	2018-01-22 +00:00	2018-03-29 +00:00	3.1

修改記錄

名稱	機構	日期	備註
CWE Content Team	MITRE	2014-06-23 +00:00	updated Relationships
CWE Content Team	MITRE	2020-02-24 +00:00	updated References
CWE Content Team	MITRE	2023-04-27 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2025-09-09 +00:00	updated References

參考資料

REF-957

Top 10 2017
https://github.com/OWASP/Top10/blob/master/2017/OWASP%20Top%2010-2017%20(en).pdf