GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Main page
  • Contents
  • Current events
  • Random article
  • About Wikipedia
  • Contact us
  • Help
  • Learn to edit
  • Community portal
  • Recent changes
  • Upload file
  • Special pages
  • Search
  • Donate

This view

  • Original page
  • New address

GeezerVison is showing en.wikipedia.org — Improper input validation - Wikipedia

(Redirected from Unchecked user input)

Improper input validation[1] or unchecked user input is a type of vulnerability in computer software that may be used for security exploits.[2] This vulnerability is caused when "[t]he product does not validate or incorrectly validates input that can affect the control flow or data flow of a program."[1]

Examples

Examples include:

  • Buffer overflow
  • Cross-site scripting
  • Directory traversal
  • Null byte injection
  • SQL injection
  • Uncontrolled format string

See also

  • Input validation – Process of ensuring computer data is both correct and usefulPages displaying short descriptions of redirect targets
  • Common Weakness Enumeration – Catalog of software weaknesses and vulnerabilities (CWE)

References

  1. 1 2 "CWE-20: Improper Input Validation". Common Weakness Enumeration. MITRE. December 13, 2010. Retrieved February 22, 2011.
  2. ↑ Erickson, Jon (2008). Hacking: the art of exploitation. No Starch Press Series (2, illustrated ed.). Safari Books Online. ISBN 978-1-59327-144-2.

External links

  • "Input Validation". OWASP Cheat Sheet Series. Retrieved 2026-02-09.
  • "Improper Data Validation". OWASP Foundation. Retrieved 2026-02-09.
Stub icon

This security software article is a stub. You can help Wikipedia by adding missing information.

  • v
  • t
  • e
Retrieved from "https://en.wikipedia.org/w/index.php?title=Improper_input_validation&oldid=1337433148"
Categories:
  • Computer security software stubs
  • Computer security exploits
Hidden categories:
  • Pages displaying short descriptions of redirect targets via Module:Annotated link
  • All stub articles
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.