DerScanner
Home / Vulnerability Database / 1C : Obsolete or unsafe function
1C

1C : Obsolete or unsafe function

Classification

OWASP Top 10 2013
A9-Using Components with Known Vulnerabilities
OWASP Top 10 2017
A9-Using Components with Known Vulnerabilities
OWASP Top 10 2021
A6-Vulnerable and Outdated Components
PCI DSS 4.0
6.3
CWE
CWE-242CWE-477CWE-676CWE-1035
CWE/SANS Top 25 2011
CWE-676

Overview

The function used is deprecated or unsafe (regardless of how it is used). It is recommended to replace it with a secure analog.

Examples of deprecated and unsafe functions and their alternatives:

Old\Unsafe Good Alternative
CurrentDate CurrentSessionDate
Find StrFind
ThisForm ThisObject

References

  1. CWE-676: Use of Potentially Dangerous Function
  2. CWE-242: Use of Inherently Dangerous Function
  3. OWASP Top 10 2017-A9-Using Components with Known Vulnerabilities
  4. CWE-1035
  5. CWE-477
MEDIUM

DerScanner Severity Score

Do you want to fix 1C : Obsolete or unsafe function in your application?

See also

1C

1C : Null encryption key

1C

1C : Memory leak

1C

1C : Empty encryption key