Improper input validation

Improper input validation or unchecked user input is a type of vulnerability in computer software that may be used for security exploits. This vulnerability is caused when "[t]he product does not validate or incorrectly validates input that can affect the control flow or data flow of a program."

Examples include:

• Buffer overflow
• Cross-site scripting
• Directory traversal
• Null byte injection
• SQL injection
• Uncontrolled format string

References

1. Heartbleed
2. String interpolation
3. Uncontrolled format string
4. Negative testing
5. Browser security
6. PeaZip
7. File inclusion vulnerability
8. SQL injection
9. Extract, transform, load
10. Web shell
11. Node.js
12. XML external entity attack
13. Surrogate model
14. Synkinesis
15. Calculus
16. Vector calculus
17. Big Thunder Mountain Railroad
18. XHTML
19. Temporal light artefacts
20. Conceptual model