Idea: we could add an API to find vulnerability classes by CVE, CWE, OSVDB, etc. That way external tools plugins could try to find the closest match to whatever the tool found, as long as the generic Vulnerability interface is used.
The tricky part would be knowing what to pass to the constructors. For that we should probably define more abstract classes like UrlVulnerability, so plugins can know which interface to use thanks to introspection. For this to work, concrete classes should never have arguments of their own, they should only follow the interfaces defined by the abstract classes.
Idea: we could add an API to find vulnerability classes by CVE, CWE, OSVDB, etc. That way external tools plugins could try to find the closest match to whatever the tool found, as long as the generic Vulnerability interface is used.
The tricky part would be knowing what to pass to the constructors. For that we should probably define more abstract classes like UrlVulnerability, so plugins can know which interface to use thanks to introspection. For this to work, concrete classes should never have arguments of their own, they should only follow the interfaces defined by the abstract classes.