CWE-621 – Variable Extraction Error
Description The product uses external input to determine the names of variables into which information is extracted, without verifying that the names of the specified...
CWE-914 – Improper Control of Dynamically-Identified Variables
Description The software does not properly restrict reading from or writing to dynamically-identified variables. Many languages offer powerful features that allow the programmer to access...