Improper input validation
Appearance
An editor has nominated this article for deletion. You are welcome to participate in the deletion discussion, which will decide whether or not to retain it. |
![]() | The topic of this article may not meet Wikipedia's general notability guideline. (March 2008) |
String exploits are security exploits involving handling of string data in computer software.Hacking: the art of exploitation. No Starch Press Series. Safari Books Online. 2008. ISBN 9781593271442. {{cite book}}
: Unknown parameter |Author=
ignored (|author=
suggested) (help); Unknown parameter |Edition=
ignored (|edition=
suggested) (help)
- Format string attack - unchecked
*printf
format strings are dangerous - Buffer overflow - Buffer overflows often occurs in unsafe string functions
- Cross-site scripting - unsafe output of input strings
- Directory traversal - concatenating strings to create a filename is not a good idea
- SQL injection - concatenating strings to create a SQL statement is not a good idea