View/Download Test Cases

Test Suite #6: ABM 1.0.1

Created by: Jeff Meister on 2006-06-23
Size: 112 test cases
Description: Fortify Software's Analyzer BenchMark v. 1.0.1

To view a specific test case, click on ID of the test case (second column)
To download specific test cases, select them then click on "Download selected test cases " icon at the top right of the page

Results: 112 test cases in 6 pages. Pages: 1 2 3 4 5 6
Go to page:

Select	Test Case ID	Submission Date	Language	Type of Artifact	Status	Description	Weakness	Bad Good Mixed
	1655	2006-06-22	Java	Source Code		Tainted output allows cross-site scripting attack. (fixed version 2)	CWE-079: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
	1654	2006-06-22	Java	Source Code		Tainted output allows cross-site scripting attack.	CWE-079: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
	1653	2006-06-22	Java	Source Code		Tainted output allows cross-site scripting attack.	CWE-079: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
	1652	2006-06-22	Java	Source Code		An unsafe function is used causing the entire container to exit.	None given
	1651	2006-06-22	Java	Source Code		An unsafe function is used causing the entire container to exit.	None given
	1650	2006-06-22	C	Source Code		Sensitive data from getpass is output with syslog.	None given
	1649	2006-06-22	C	Source Code		Sensitive data from getpass is output with printf.	None given
	1648	2006-06-22	C	Source Code		Execl() is called with user-provided data but only if it matches ...	CWE-020: Improper Input Validation
	1647	2006-06-22	C	Source Code		Execl() is called with user-provided data.	CWE-020: Improper Input Validation
	1646	2006-06-22	C	Source Code		System() is called with user-provided data but the data is ...	CWE-020: Improper Input Validation
	1645	2006-06-22	C	Source Code		System() is called with user-provided data.	CWE-020: Improper Input Validation
	1644	2006-06-22	Java	Source Code		Tainted data spliced into a SQL query leads to a SQL injection issue	CWE-074: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
	1643	2006-06-22	Java	Source Code		Tainted data spliced into a SQL query leads to a SQL injection issue.	CWE-089: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
	1642	2006-06-22	C	Source Code		Sprintf is used to copy a string to a stack buffer. A guard in ...	CWE-121: Stack-based Buffer Overflow
	1641	2006-06-22	C	Source Code		Sprintf is used to copy a string to a stack buffer. A guard in ...	CWE-121: Stack-based Buffer Overflow
	1640	2006-06-22	C	Source Code		Sprintf is used to copy a string to a stack buffer. A guard is usedt	CWE-121: Stack-based Buffer Overflow
	1639	2006-06-22	C	Source Code		Sprintf is used to copy a string to a stack buffer. A guard is usedt	CWE-121: Stack-based Buffer Overflow
	1638	2006-06-22	C	Source Code		Sprintf is used to copy a string to a stack buffer. The length ...	CWE-121: Stack-based Buffer Overflow
	1637	2006-06-22	C	Source Code		Sprintf is used to copy a string to a stack buffer. The length ...	CWE-121: Stack-based Buffer Overflow
	1636	2006-06-22	C	Source Code		sprintf allows a stack buffer to be overrun.	CWE-121: Stack-based Buffer Overflow

1 2 3 4 5 6
Total of selected test cases: 112