Input Validation Vulnerabilities
When software fails to validate input properly, an attacker is able to craft the input in a form that is not expected by the
rest of the application. This will lead to parts of the system receiving unintended input, which may result in altered control
flow, arbitrary control of a resource, or arbitrary code execution.
--- CWE 20: Improper Input Validation
Author: Laurie Williams
Maintained By: Laurie Williams
Last Updated: 2009-08-22
Modules
Assignments
Lectures
Williams: Other "Top 25" Vulnerabilities
Williams and Shin: SQL Injection and XSS
Williams: Intro to Input Validation
Reading
OWASP: Parameter Manipulation
Scambray and Shema: Input Validation Attacks
Sites
OWASP: Testing for SQL Injection
ha.ckers: Cross-site Scripting Cheat Sheet
OWASP: Cross-site Scripting
OWASP: SQL Injection
ferruh.mavituna: SQL Injection Cheat Sheet
Videos
Imperva: Understanding Script Injection
Previous
