Jump to content

Improper input validation

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by Lambiam (talk | contribs) at 13:11, 22 February 2011 (singular topic; aka). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

A string exploit is a security exploit involving handling of string data in computer software.[1] This type of exploit is also known as Unchecked user input or Improper input validation.[2]

Examples include:

References

  1. ^ Erickson, Jon (2008). Hacking: the art of exploitation. No Starch Press Series. Safari Books Online. ISBN 9781593271442. {{cite book}}: Unknown parameter |Edition= ignored (|edition= suggested) (help)
  2. ^ "CWE-20: Improper Input Validation". Common Weakness Enumeration. MITRE. December 13, 2010. {{cite web}}: |access-date= requires |url= (help); Missing or empty |url= (help)