CWE
Home > CWE List > VIEW LIST: CWE-678: Composites (Draft 9)   View the CWE List

VIEW LIST: CWE-678: Composites (Draft 9)

Composites
View ID
Status: Draft

678 (View)

ObjectiveThis view (slice) displays only composite weaknesses.
View Data

Filter Used: .//@Compound_Element_Structure='Composite'

CWEs in this viewTotal CWEs
Total9out of695
Views0out of14
Categories0out of64
Weaknesses0out of605
Compound_Elements9out of12
Back to top
Compound Element: Composite Cross-Site Request Forgery (CSRF) - (352)
Compound Element: Composite Insufficient Control of Filename for Include/Require Statement in PHP Program (aka 'PHP File Inclusion') - (98)
Compound Element: Composite Permission Race Condition During Resource Copy - (689)
Compound Element: Composite Session Fixation - (384)
Compound Element: Composite Trusting Self-reported IP Address - (291)
Compound Element: Composite Unbounded Transfer ('Classic Buffer Overflow') - (120)
Compound Element: Composite UNIX Symbolic Link (Symlink) Following - (61)
Compound Element: Composite Unrestricted File Upload - (434)
Compound Element: Composite Untrusted Search Path - (426)
Page Last Updated: April 11, 2008
 

CWE is sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security.

This Web site is hosted by The MITRE Corporation.
Copyright 2008, The MITRE Corporation. CWE and the CWE logo are trademarks of The MITRE Corporation.

Contact cwe@mitre.org for more information.
Privacy policy
Terms of use
Contact us