Test cases - NIST Software Assurance Reference Dataset

Displaying test cases 356476 - 356500 of 426654 in total

CWE-80

145006-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string Sinks: BadSink : Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data...
CWE-80

145005-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string Sinks: BadSink : Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data...
CWE-80

145004-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string Sinks: BadSink : Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data...
CWE-80

145003-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string Sinks: BadSink : Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data...
CWE-80

145002-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Un...
CWE-80

145001-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string Sinks: BadSink : Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data...
CWE-80

145000-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Un...
CWE-80

144999-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Un...
CWE-80

144998-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string Sinks: BadSink : Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data...
CWE-80

144997-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string Sinks: BadSink : Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data...
CWE-80

144996-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string Sinks: BadSink : Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data...
CWE-80

144995-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Un...
CWE-80

144994-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Un...
CWE-80

144993-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Un...
CWE-80

144992-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Un...
CWE-80

144991-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Un...
CWE-80

144990-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Un...
CWE-80

144989-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Un...
CWE-80

144988-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Un...
CWE-80

144987-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Un...
CWE-80

144986-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Un...
CWE-80

144985-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Un...
CWE-80

144984-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Un...
CWE-80

144983-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Un...
CWE-80

144982-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: getCookies_Servlet Read data from the first cookie using getCookies() GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Un...

Results per page