SAMATE Logo NIST Logo The SAMATE Project Department of Homeland Security

View/Download Test Cases

Downloads:  Download the selected Test Cases Download these 12 test cases Download all the test cases on the page  Download the manifest  Download all the test cases in the SARD

Test Suite #98: openfire-3.6.0

Results: 12 test cases.

Select Test Case ID(up) Submission Date Language Type of Artifact Status Description Weakness Bad
Good
Mixed
1490242014-08-01JavaSource CodeDeprecated openfire-3.6.0CWE-022: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-079: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-089: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-862: Missing Authorization
Bad test case
1490232014-08-01JavaSource CodeCandidate CVE-2008-6508CWE-022: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Bad test case
1490222014-08-01JavaSource CodeCandidate CVE-2009-0496 (6)CWE-079: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Bad test case
1490212014-08-01JavaSource CodeCandidate CVE-2009-0496 (5)CWE-079: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Bad test case
1490202014-08-01JavaSource CodeCandidate CVE-2009-0496 (4)CWE-079: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Bad test case
1490192014-08-01JavaSource CodeCandidate CVE-2009-0496 (3)CWE-079: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Bad test case
1490182014-08-01JavaSource CodeCandidate CVE-2009-0496 (2)CWE-079: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Bad test case
1490172014-08-01JavaSource CodeCandidate CVE-2009-0496 (1)CWE-079: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Bad test case
1490162014-08-01JavaSource CodeDeprecated CVE-2006-7233CWE-079: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Bad test case
1490152014-08-01JavaSource CodeCandidate CVE-2009-0497CWE-022: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Bad test case
1490142014-08-01JavaSource CodeCandidate CVE-2008-6509CWE-089: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Bad test case
1490132014-08-01JavaSource CodeCandidate CVE-2009-1596CWE-862: Missing Authorization
Bad test case