| Improper Input Validation | |
| Allocation of Resources Without Limits or Throttling | |
| SQL Injection | |
| Cross-site Scripting (XSS) | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Unrestricted Upload of File with Dangerous Type | |
| Directory Traversal | |
| Cross-site Scripting (XSS) | |
| Improper Certificate Validation | |
| Weak Password Recovery Mechanism for Forgotten Password | |
| Improper Input Validation | |
| Incorrect Regular Expression | |
| Incorrect Regular Expression | |
| Open Redirect | |
| Open Redirect | |
| Use of Hard-coded Credentials | |
| Access Restriction Bypass | |
| Security Features | |
| Cross-site Scripting (XSS) | |
| Information Exposure | |
| Information Exposure | |
| Resource Management Errors | |
| Resource Management Errors | |
| Resource Management Errors | |
| Improper Input Validation | |
| Cross-site Scripting (XSS) | |
| Resource Management Errors | |
| Resource Management Errors | |
| Cross-site Scripting (XSS) | |
| Code | |
| Code | |
| Improper Authentication | |
| Improper Input Validation | |
| Resource Management Errors | |
| Access Restriction Bypass | |
| Improper Input Validation | |
| CVE-2014-1418 | |
| Access Restriction Bypass | |
| Arbitrary Code Injection | |
| Resource Management Errors | |