Improper input validation: Difference between revisions

Revision as of 14:10, 9 May 2012

Latest revision as of 02:39, 24 November 2022

(6 intermediate revisions by 6 users not shown)

Line 1:

'''Improper input validation'''<ref name=":0">{{cite web |work=[[Common Weakness Enumeration]] |publisher=[[MITRE]] |title=CWE-20: Improper Input Validation |url=http://cwe.mitre.org/data/definitions/20.html |date=December 13, 2010 |accessdate=February 22, 2011}}</ref> or '''unchecked user input''' is a type of [[vulnerability (computing)|vulnerability]] in [[computer software]] that may be used for [[security exploit]]s.<ref name=hacking>{{cite book|title=Hacking: the art of exploitation|series=No Starch Press Series|publisher=Safari Books Online|first=Jon|last=Erickson|Editionedition=2, illustrated|year=2008|ISBN= 978-1-59327-144-2}}</ref> This vulnerability is caused when "[t]he product does not validate or incorrectly validates input that can affect the control flow or data flow of a program."<ref name=":0" />

Examples include:

Line 12:

{{reflist}}

{{security-software -stub}}

{{DEFAULTSORT:String Exploits}}

[[Category:Computer security exploits]]