Tag

cwe-97

Safeguard articles tagged "cwe-97" — guides, analysis, and best practices for software supply chain and application security.

1 article

Server-side includes (SSI) injection explained

SSI injection lets attackers run shell commands via directives like #exec cmd. Learn how CWE-97 works, real attack vectors, detection, and fixes.