Test cases - NIST Software Assurance Reference Dataset

Displaying test cases 356601 - 356625 of 426654 in total

CWE-80

144881-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: URLConnection Read data from a web server with URLConnection GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Unsafe Valu...
CWE-80

144880-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: URLConnection Read data from a web server with URLConnection GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Unsafe Valu...
CWE-80

144879-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: URLConnection Read data from a web server with URLConnection GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Unsafe Valu...
CWE-80

144878-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: URLConnection Read data from a web server with URLConnection GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Unsafe Valu...
CWE-80

144877-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: URLConnection Read data from a web server with URLConnection GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Unsafe Valu...
CWE-80

144876-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: URLConnection Read data from a web server with URLConnection GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Unsafe Valu...
CWE-80

144875-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: URLConnection Read data from a web server with URLConnection GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Unsafe Valu...
CWE-80

144874-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: URLConnection Read data from a web server with URLConnection GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Unsafe Valu...
CWE-80

144873-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: URLConnection Read data from a web server with URLConnection GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Unsafe Valu...
CWE-80

144872-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: URLConnection Read data from a web server with URLConnection GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Unsafe Valu...
CWE-80

144871-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: URLConnection Read data from a web server with URLConnection GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Unsafe Valu...
CWE-80

144870-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: URLConnection Read data from a web server with URLConnection GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Unsafe Valu...
CWE-80

144869-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: URLConnection Read data from a web server with URLConnection GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Unsafe Valu...
CWE-80

144868-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: URLConnection Read data from a web server with URLConnection GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data into Unsafe Valu...
CWE-80

144867-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: PropertiesFile Read data from a .properties file (in property named data) GoodSource: A hardcoded string Sinks: BadSink : Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of ...
CWE-80

144866-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: PropertiesFile Read data from a .properties file (in property named data) GoodSource: A hardcoded string Sinks: BadSink : Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of ...
CWE-80

144865-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: PropertiesFile Read data from a .properties file (in property named data) GoodSource: A hardcoded string Sinks: BadSink : Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of ...
CWE-80

144864-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: PropertiesFile Read data from a .properties file (in property named data) GoodSource: A hardcoded string Sinks: BadSink : Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of ...
CWE-80

144863-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: PropertiesFile Read data from a .properties file (in property named data) GoodSource: A hardcoded string Sinks: BadSink : Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of ...
CWE-80

144862-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: PropertiesFile Read data from a .properties file (in property named data) GoodSource: A hardcoded string Sinks: BadSink : Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of ...
CWE-80

144861-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: PropertiesFile Read data from a .properties file (in property named data) GoodSource: A hardcoded string BadSink: Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of Data int...
CWE-80

144860-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: PropertiesFile Read data from a .properties file (in property named data) GoodSource: A hardcoded string Sinks: BadSink : Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of ...
CWE-80

144859-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: PropertiesFile Read data from a .properties file (in property named data) GoodSource: A hardcoded string Sinks: BadSink : Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of ...
CWE-80

144858-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: PropertiesFile Read data from a .properties file (in property named data) GoodSource: A hardcoded string Sinks: BadSink : Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of ...
CWE-80

144857-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 80 Cross Site Scripting (XSS) BadSource: PropertiesFile Read data from a .properties file (in property named data) GoodSource: A hardcoded string Sinks: BadSink : Display of data in web page after using replaceAll() to remove script tags, which will still allow XSS (CWE 182: Collapse of ...

Results per page