Package illustrating a test case

Test case 149173

Type: source code
Pairs: 149174-v1.0.0
State: bad
Author: NIST, Alexander Hoole, Aurelien Delaitre
Status: candidate
Language: C
Submission Date: 23 Mar 2015

Description

The test case exposes a Cross-Site Scripting (XSS) in a C/CGI program with an address alias level code complexity.

Flaws

CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Test Suites

C Test Suite for Source Code Analyzer v2 - Vulnerable

Have any comments on this test case? Please, send us an email.