CWE-SANS-Top-25/Insecure-interaction-between-components/CWE-78
Jump to navigation
Jump to search
CWE-78: Failure to Preserve OS Command Structure (aka 'OS Command Injection')
Description
This attack consists of injecting commands on a form input.
Risk measurement
| Weakness Prevalence | Medium |
|---|---|
| Remediation Cost | Medium |
| Attack Frequency | Often |
| Consequences | Code execution |
| Ease of Detection | Easy |
| Attacker Awareness | High |
Comments
Talk:CWE-SANS-Top-25/Insecure-interaction-between-components/CWE-78