| 
                                                CWE-59
                                             | 
                                            
                                                Improper Link Resolution Before File Access ('Link Following')
                                             | 
                                        
                                    
                                        
                                            | 
                                                CWE-94
                                             | 
                                            
                                                Improper Control of Generation of Code ('Code Injection')
                                             | 
                                        
                                    
                                        
                                            | 
                                                CWE-95
                                             | 
                                            
                                                Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
                                             | 
                                        
                                    
                                        
                                            | 
                                                CWE-96
                                             | 
                                            
                                                Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
                                             | 
                                        
                                    
                                        
                                            | 
                                                CWE-97
                                             | 
                                            
                                                Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
                                             | 
                                        
                                    
                                        
                                            | 
                                                CWE-270
                                             | 
                                            
                                                Privilege Context Switching Error
                                             | 
                                        
                                    
                                        
                                            | 
                                                CWE-272
                                             | 
                                            
                                                Least Privilege Violation
                                             | 
                                        
                                    
                                        
                                            | 
                                                CWE-282
                                             | 
                                            
                                                Improper Ownership Management
                                             |