CWE-234: Failure to Handle Missing Parameter

http://cwe.mitre.org/data/definitions/234.html

Example 1

(Bad Code)

Example Languages:C and C++ 

foo_funct(one, two);...

void foo_funct(int one, int two, int three) {

printf("1) %d\n2) %d\n3) %d\n", one, two, three);

}

This can be exploited to disclose information with no work whatsoever.In fact, each time this function is run, it will print out the next 4bytes on the stack after the two numbers sent to it.