| CAPEC-ID | Attack Pattern Name | (CAPEC Version: 1.4) |
|---|
| 3 | Using Leading 'Ghost' Character Sequences to Bypass Input Filters |
| 4 | Using Alternative IP Address Encodings |
| 7 | Blind SQL Injection |
| 8 | Buffer Overflow in an API Call |
| 9 | Buffer Overflow in Local Command-Line Utilities |
| 10 | Buffer Overflow via Environment Variables |
| 14 | Client-side Injection-induced Buffer Overflow |
| 15 | Command Delimiters |
| 24 | Filter Failure through Buffer Overflow |
| 92 | Forced Integer Overflow |
| 43 | Exploiting Multiple Input Interpretation Layers |
| 88 | OS Command Injection |
| 44 | Overflow Binary Resource File |
| 45 | Buffer Overflow via Symbolic Links |
| 46 | Overflow Variables and Tags |
| 47 | Buffer Overflow via Parameter Expansion |
| 52 | Embedding NULL Bytes |
| 53 | Postfix, Null Terminate, and Backslash |
| 64 | Using Slashes and URL Encoding Combined to Bypass Validation Logic |
| 66 | SQL Injection |
| 67 | String Format Overflow in syslog() |
| 73 | User-Controlled Filename |
| 78 | Using Escaped Slashes in Alternate Encoding |
| 79 | Using Slashes in Alternate Encoding |
| 6 | Argument Injection |
| 86 | Embedding Script (XSS ) in HTTP Headers |
| 32 | Embedding Scripts in HTTP Query Strings |
| 18 | Embedding Scripts in Nonscript Elements |
| 19 | Embedding Scripts within Scripts |
| 34 | HTTP Response Splitting |
| 63 | Simple Script Injection |
| 41 | Using Meta-characters in E-mail Headers to Inject Malicious Payloads |
| 71 | Using Unicode Encoding to Bypass Validation Logic |
| 80 | Using UTF-8 Encoding to Bypass Validation Logic |
| 91 | XSS in IMG Tags |
Description
