Common Weakness Enumeration

5

J2EE Misconfiguration: Data Transmission Without Encryption

6

J2EE Misconfiguration: Insufficient Session-ID Length

7

J2EE Misconfiguration: Missing Custom Error Page

8

J2EE Misconfiguration: Entity Bean Declared Remote

9

J2EE Misconfiguration: Weak Access Permissions for EJB Methods

11

ASP.NET Misconfiguration: Creating Debug Binary

12

ASP.NET Misconfiguration: Missing Custom Error Page

13

ASP.NET Misconfiguration: Password in Configuration File

14

Compiler Removal of Code to Clear Buffers

15

External Control of System or Configuration Setting

20

Improper Input Validation

22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

23

Relative Path Traversal

24

Path Traversal: '../filedir'

25

Path Traversal: '/../filedir'

26

Path Traversal: '/dir/../filename'

27

Path Traversal: 'dir/../../filename'

28

Path Traversal: '..filedir'

29

Path Traversal: '..filename'

30

Path Traversal: 'dir..filename'

31

Path Traversal: 'dir....filename'

32

Path Traversal: '...' (Triple Dot)

33

Path Traversal: '....' (Multiple Dot)

34

Path Traversal: '....//'

35

Path Traversal: '.../...//'

36

Absolute Path Traversal

37

Path Traversal: '/absolute/pathname/here'

38

Path Traversal: 'absolutepathnamehere'

39

Path Traversal: 'C:dirname'

40

Path Traversal: 'UNCsharename' (Windows UNC Share)

41

Improper Resolution of Path Equivalence

42

Path Equivalence: 'filename.' (Trailing Dot)

43

Path Equivalence: 'filename....' (Multiple Trailing Dot)

44

Path Equivalence: 'file.name' (Internal Dot)

45

Path Equivalence: 'file...name' (Multiple Internal Dot)

46

Path Equivalence: 'filename ' (Trailing Space)

47

Path Equivalence: ' filename' (Leading Space)

48

Path Equivalence: 'file name' (Internal Whitespace)

49

Path Equivalence: 'filename/' (Trailing Slash)

50

Path Equivalence: '//multiple/leading/slash'

51

Path Equivalence: '/multiple//internal/slash'

52

Path Equivalence: '/multiple/trailing/slash//'

53

Path Equivalence: 'multipleinternalbackslash'

54

Path Equivalence: 'filedir' (Trailing Backslash)

55

Path Equivalence: '/./' (Single Dot Directory)

56

Path Equivalence: 'filedir*' (Wildcard)

57

Path Equivalence: 'fakedir/../realdir/filename'

58

Path Equivalence: Windows 8.3 Filename

59

Improper Link Resolution Before File Access ('Link Following')

61

UNIX Symbolic Link (Symlink) Following