CWE-727 軟體弱點詳細資料 | CVE Find

廠商與產品

CPE（通用平台枚舉）是一種用於命名硬體、軟體和作業系統的標準化方案。CPE 提供結構化命名方式，可根據廠商、產品名稱、版本、更新、版次和語言等特定屬性，唯一識別和分類資訊技術系統、平台和套件。

名稱: OWASP Top Ten 2004 Category A6 - Injection Flaws

Weaknesses in this category are related to the A6 category in the OWASP Top Ten 2004.

CWE 成員列表

CWE-117: Improper Output Neutralization for Logs 基礎

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 基礎

CWE-77: Improper Neutralization of Special Elements used in a Command 基礎

CWE-78: Improper Neutralization of Special Elements used in an OS Command 基礎

CWE-89: Improper Neutralization of Special Elements used in an SQL Command 基礎

CWE-91: XML Injection 基礎

CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code 基礎

CWE-98: Improper Control of Filename for Include/Require Statement in PHP Program 基礎

CWE 資訊

漏洞對應備注

理由說明 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
備註 : See member weaknesses of this category.

提交

名稱	機構	日期	發布日期	Version
	Veracode	2008-08-15 +00:00	2008-09-09 +00:00	1.0

修改記錄

名稱	機構	日期	備註
CWE Content Team	MITRE	2009-03-10 +00:00	updated Relationships
CWE Content Team	MITRE	2023-04-27 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2025-09-09 +00:00	updated References

參考資料

REF-586

A6 Injection Flaws
OWASP.
https://github.com/OWASP/Top10/blob/master/2004/OWASP_Top_Ten_2004.pdf