| CWE-20 | Improper Input Validation |
| CWE-74 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') |
| CWE-91 | XML Injection (aka Blind XPath Injection) |
| CWE-707 | Improper Neutralization |
| CWE-713 | OWASP Top Ten 2007 Category A2 - Injection Flaws |
