Improper input validation
From Wikipedia, the free encyclopedia
(Redirected from Unchecked user input)
Improper input validation[1] or unchecked user input is a type of vulnerability in computer software that may be used for security exploits.[2] This vulnerability is caused when "[t]he product does not validate or incorrectly validates input that can affect the control flow or data flow of a program."[1]
Examples
Examples include:
- Buffer overflow
- Cross-site scripting
- Directory traversal
- Null byte injection
- SQL injection
- Uncontrolled format string
See also
- Template:Anl
- Template:Anl (CWE)
References
Page Template:Reflist/styles.css has no content.
- ^ a b Page Module:Citation/CS1/styles.css has no content."CWE-20: Improper Input Validation". Common Weakness Enumeration. MITRE. December 13, 2010. Retrieved February 22, 2011.
- ^ Page Module:Citation/CS1/styles.css has no content.Erickson, Jon (2008). Hacking: the art of exploitation. No Starch Press Series (2, illustrated ed.). Safari Books Online. ISBN 978-1-59327-144-2.
External links
- Page Module:Citation/CS1/styles.css has no content."Input Validation". OWASP Cheat Sheet Series. Retrieved 2026-02-09.
- Page Module:Citation/CS1/styles.css has no content."Improper Data Validation". OWASP Foundation. Retrieved 2026-02-09.
