CAPEC-6 Argument Injection

abstraction: standardstatus: active

An attacker changes the behavior or state of a targeted application through injecting data or command syntax through the targets use of non-validated and non-filtered arguments of exposed services or methods.

likelihood: Highseverity: High
01

weaknesses (6)

The CWE weakness classes this flaw belongs to.

02

related attack patterns (1)

Related entries.

03

source

Where this definition is published.