Improper input validation[1] or unchecked user input is a type of vulnerability in computer software that may be used for security exploits.[2] This vulnerability is caused when "[t]he product does not validate or incorrectly validates input that can affect the control flow or data flow of a program."[1]
Examples include:
- Buffer overflow
- Cross-site scripting
- Directory traversal
- Null byte injection
- SQL injection
- Uncontrolled format string
YouTube Encyclopedic
-
1/3Views:1 62516 2098 372
-
Input Sanitization — Peter Faiman
-
A simple Format String exploit example - bin 0x11
-
Format String Exploit and overwrite the Global Offset Table - bin 0x13
Transcription
References
- ^ a b "CWE-20: Improper Input Validation". Common Weakness Enumeration. MITRE. December 13, 2010. Retrieved February 22, 2011.
- ^ Erickson, Jon (2008). Hacking: the art of exploitation. No Starch Press Series (2, illustrated ed.). Safari Books Online. ISBN 978-1-59327-144-2.
 | This security software article is a stub. You can help Wikipedia by expanding it. |
This page was last edited on 24 November 2022, at 02:39