Difference between revisions of "Missing XML Validation"

From OWASP
Jump to: navigation, search
(Reverting to last version not containing links to s1.shard.jp)
 
(5 intermediate revisions by 2 users not shown)
Line 1: Line 1:
[http://s1.shard.jp/olharder/auto-california.html autobid uk ] [http://s1.shard.jp/galeach/new2.html married asian women ] [http://s1.shard.jp/galeach/new118.html postini asia content filtering ] [http://s1.shard.jp/frhorton/ufkvsduv1.html african american patent ] [http://s1.shard.jp/galeach/new72.html north caucasian trust ] [http://s1.shard.jp/olharder/autoroll-654.html index] [http://s1.shard.jp/frhorton/y8fj1syi7.html africa astra opel south ] [http://s1.shard.jp/bireba/symantec-antivirus.html avgfreeantivirus ] [http://s1.shard.jp/olharder/autoroll-654.html links] [http://s1.shard.jp/losaul/why-do-we-have.html australian business council for sustainable energy ] [http://s1.shard.jp/olharder/autoroll-654.html sitemap] [http://s1.shard.jp/olharder/autoroll-654.html link] [http://s1.shard.jp/galeach/new165.html disney's fantasia ] [http://s1.shard.jp/olharder/autoroll-654.html domain] [http://s1.shard.jp/frhorton/bnd824p72.html africa formulation housing in policy south] [http://s1.shard.jp/bireba/antivirus-avg7.html ez antivirus 2005 reviews ] [http://s1.shard.jp/olharder/autoroll-654.html top] [http://s1.shard.jp/bireba/norton-antivirus.html nod32 antivirus software ] [http://s1.shard.jp/olharder/automatic-gate.html autoexpect linux ] [http://s1.shard.jp/frhorton/eob9cf6xd.html us aid to africa ] [http://s1.shard.jp/bireba/the-symantec-antivirus.html the symantec antivirus service terminated unexpectedly] [http://s1.shard.jp/losaul/australia-stables.html australian miniature bulldog puppies ] [http://s1.shard.jp/losaul/1999-australian.html air australia conditioning policy refrigeration ] [http://s1.shard.jp/olharder/autores-romanticos.html autoftp crack ] [http://s1.shard.jp/olharder/jl-french-automotive.html jl french automotive castings] [http://s1.shard.jp/olharder/automatic-direction.html auto forumi ] [http://s1.shard.jp/bireba/avast-antivirus.html symantec norton internet security firewall and antivirus ] [http://s1.shard.jp/galeach/new102.html asian movie samples] [http://s1.shard.jp/frhorton/77iqsoujy.html south africa tourist office london ] [http://s1.shard.jp/galeach/new38.html airline consolidators asia] [http://s1.shard.jp/olharder/autoroll-654.html top] [http://s1.shard.jp/olharder/aaa-auto-sales.html reynolds and reynolds automotive software ] [http://s1.shard.jp/frhorton/1aei449pv.html map of the africa and australia ] [http://s1.shard.jp/galeach/new82.html asian food grocer] [http://s1.shard.jp/galeach/new180.html asia bookie.com ] [http://s1.shard.jp/losaul/australian-capital.html permanent residency australia ] [http://s1.shard.jp/frhorton/556tpvdn6.html africa art craft history in south ] [http://s1.shard.jp/galeach/new143.html women in southeast asia in the 1800s ] [http://s1.shard.jp/olharder/cheap-auto-insurance.html springfield armory 45 auto ] [http://s1.shard.jp/frhorton/y9my6dqry.html african goddess names ] [http://s1.shard.jp/bireba/panda-antivirus.html avgfreeantivirus ] [http://s1.shard.jp/galeach/new196.html tales of phantasia ova fansub ] [http://s1.shard.jp/olharder/dacoma-automotive.html dacoma automotive] [http://s1.shard.jp/galeach/new177.html asians jpg ] [http://s1.shard.jp/galeach/new31.html anastasia fox animation movie download ] [http://s1.shard.jp/bireba/eztrust-antivirus.html antivirus 2004 free download ] [http://s1.shard.jp/frhorton/1jv14ya7f.html us embassy south africa pretoria ] [http://s1.shard.jp/bireba/antivirus-free-download.html download pc cillin antivirus ] 
 
[http://s1.shard.jp/galeach/new77.html kitty asian movies
 
] [http://s1.shard.jp/olharder/agencias-auto.html autonetusa.com carfinder
 
] [http://s1.shard.jp/olharder/automatic-watch.html automotive supply chain
 
] [http://s1.shard.jp/galeach/new100.html tsunami diaster in asia
 
] [http://s1.shard.jp/losaul/business-services.html australia sydney tours
 
] [http://s1.shard.jp/galeach/new194.html adventure asia international
 
] [http://s1.shard.jp/losaul/australian-residency.html sydney australia apartments for rent
 
] [http://s1.shard.jp/losaul/car-hire-brisbane.html australian animal habitats
 
] [http://s1.shard.jp/frhorton/y8fj1syi7.html 2006 african cup nation
 
] [http://s1.shard.jp/losaul/how-to-train.html barrick gold australia
 
] [http://s1.shard.jp/losaul/australian-music.html australian music charts archives] [http://s1.shard.jp/losaul/australia-cost.html 2004 cpi australia
 
] [http://s1.shard.jp/galeach/new80.html europe asia border map
 
] [http://s1.shard.jp/bireba/ dod antivirus download
 
] [http://s1.shard.jp/olharder/wes-finch-auto-plaza.html auto sketch 9
 
] [http://s1.shard.jp/olharder/autobiography.html best auto body san francisco
 
] [http://s1.shard.jp/olharder/auto-benz-dealer.html download autodesk architectural desktop
 
] [http://s1.shard.jp/olharder/buy-and-sell-autos.html auction auto charlotte
 
] [http://s1.shard.jp/frhorton/eob9cf6xd.html jojoba cultivation south africa
 
] [http://s1.shard.jp/losaul/lawn-bowls-clubs.html cheap auto parts australia buy online
 
] [http://s1.shard.jp/galeach/new109.html dynasties in asia
 
] [http://s1.shard.jp/bireba/symantec-antivirus.html dod antivirus download
 
] [http://s1.shard.jp/bireba/avg-antivirus-linux.html serial for avg antivirus 7.1
 
] [http://s1.shard.jp/losaul/australian-laws.html home and away australian soap opera
 
] [http://s1.shard.jp/losaul/australian-hotel.html tikatec australia
 
] [http://s1.shard.jp/frhorton/2wh6r9nyq.html african quenn screenwriter
 
] [http://s1.shard.jp/galeach/new116.html asian cute girl myspace.com site
 
] [http://s1.shard.jp/olharder/colorado-auto.html new zealand automobile club
 
] [http://s1.shard.jp/bireba/panda-titanium.html antivirus avg7.0
 
] [http://s1.shard.jp/olharder/auto-calculator.html auto turret
 
] [http://s1.shard.jp/olharder/autonomy-principal.html lakeland auto mall lakeland fl
 
] [http://s1.shard.jp/galeach/new135.html asian massage chicago illinois
 
] [http://s1.shard.jp/galeach/new5.html walt disneys fantasia pictures
 
] [http://s1.shard.jp/losaul/australian-census.html virgin air lines australia
 
] [http://s1.shard.jp/bireba/mcafee-free-antivirus.html mcafee free antivirus software] [http://s1.shard.jp/frhorton/h4xwn2n8q.html africa corps peace south] [http://s1.shard.jp/galeach/new137.html asian asses
 
] [http://s1.shard.jp/frhorton/41nbv47ei.html africa book centre london] [http://s1.shard.jp/bireba/escan-antivirus.html kasperski antivirus program
 
] [http://s1.shard.jp/frhorton/jp87fttqi.html african american inventor modern
 
] [http://s1.shard.jp/losaul/emmigrating-australia.html import goods to australia
 
] [http://s1.shard.jp/galeach/new138.html edge x asians
 
] [http://s1.shard.jp/frhorton/y9my6dqry.html african cosmology metaphysics
 
] [http://s1.shard.jp/olharder/autoroll-654.html top] [http://s1.shard.jp/frhorton/3l77ipk2f.html occupational health and safety government agencies africa
 
] [http://s1.shard.jp/bireba/symantec-antivirus.html update antivirus software
 
] [http://s1.shard.jp/galeach/new112.html paper rose boxes from asia
 
] [http://s1.shard.jp/losaul/australia-transcriber.html asian study association australia
 
 
http://www.textdarvarliace.com
 
 
{{Template:Vulnerability}}
 
{{Template:Vulnerability}}
 
{{Template:Fortify}}
 
{{Template:Fortify}}

Latest revision as of 07:50, 3 June 2009

This is a Vulnerability. To view all vulnerabilities, please see the Vulnerability Category page.


This article includes content generously donated to OWASP by Fortify.JPG.

Last revision (mm/dd/yy): 06/3/2009

Vulnerabilities Table of Contents

Description

Failure to enable validation when parsing XML gives an attacker the opportunity to supply malicious input.

Most successful attacks begin with a violation of the programmer's assumptions. By accepting an XML document without validating it against a DTD or XML schema, the programmer leaves a door open for attackers to provide unexpected, unreasonable, or malicious input. It is not possible for an XML parser to validate all aspects of a document's content; a parser cannot understand the complete semantics of the data. However, a parser can do a complete and thorough job of checking the document's structure and therefore guarantee to the code that processes the document that the content is well-formed.


Risk Factors

  • Talk about the factors that make this vulnerability likely or unlikely to actually happen
  • Discuss the technical impact of a successful exploit of this vulnerability
  • Consider the likely [business impacts] of a successful attack


Examples

Short example name

A short example description, small picture, or sample code with links

Short example name

A short example description, small picture, or sample code with links


Related Attacks


Related Vulnerabilities

Related Controls


Related Technical Impacts


References

Note: A reference to related CWE or CAPEC article should be added when exists. Eg: