Improper input validation

Improper input validation or unchecked user input is a type of vulnerability in computer software that may be used for security exploits.

(TO DO: expand, organize, cross-reference, illustrate.)

Examples

Examples include:

• Buffer overflow
• Cross-site scripting
• Directory traversal
• Null byte injection
• SQL injection
• Uncontrolled format string

See also

• Common Weakness Enumeration
• Exploit (computer security)
• Security exploit

External links

• Improper input validation @ Wikipedia