| Incorrect Behavior Order: Authorization Before Parsing and Canonicalization | |
| Information Exposure | |
| Information Exposure | |
| CRLF Injection | |
| CRLF Injection | |
| Improper Resource Shutdown or Release | |
| Cross-site Scripting (XSS) | |
| Information Exposure | |
| Cross-site Scripting (XSS) | |
| Information Exposure | |
| Cross-site Scripting (XSS) | |
| Information Exposure | |
| Cross-site Scripting (XSS) | |
| Information Exposure | |
| Incorrect Authorization | |
| Incorrect Authorization | |
| Incorrect Authorization | |
| Incorrect Authorization | |
| Session Fixation | |
| Cross-site Scripting (XSS) | |
| Information Exposure | |
| Cross-site Scripting (XSS) | |
| Information Exposure | |
| Cross-site Scripting (XSS) | |
| Information Exposure | |
| Incorrect Authorization | |
| Incorrect Authorization | |
| Incorrect Authorization | |
| Authentication Bypass | |
| Allocation of Resources Without Limits or Throttling | |
| Incorrect Authorization | |
| Incorrect Authorization | |
| Incorrect Authorization | |
| Cross-site Scripting (XSS) | |
| Information Exposure | |
| Information Exposure | |
| Cross-site Scripting (XSS) | |