Check catalog
158 checks. Every one explained.
Each check has a permanent ID, the attack it models, why it matters and how to fix it.
13 checks
- ERT-INJECT-001SQL injectionActiveCritical
- ERT-INJECT-002Reflected XSSActiveHigh
- ERT-INJECT-003Stored XSSWriteHigh
- ERT-INJECT-004DOM XSS sinks fed from the URLActiveHigh
- ERT-INJECT-005NoSQL injectionActiveCritical
- ERT-INJECT-006Server-side template injectionActiveCritical
- ERT-INJECT-007OS command injectionActiveCritical
- ERT-INJECT-008Path traversal / local file readActiveHigh
- ERT-INJECT-009Server-side request forgery (SSRF)ActiveCritical
- ERT-INJECT-010Open redirectActiveMedium
- ERT-INJECT-011CRLF / header injectionActiveMedium
- ERT-INJECT-012Unrestricted file uploadWriteHigh
- ERT-INJECT-013Prototype pollutionActiveMedium
