Add one more vulnerability type to BurpPro reader translate to CWE method.

Author: davewichers

src/main/java/org/owasp/benchmark/score/parsers/BurpReader.java

@@ -99,8 +99,8 @@ private TestCaseResult parseBurpVulnerability(Node issue) {
 
         return null;
     }
-    // https://portswigger.net/burp/help/scanner_issuetypes.html - This page lists all the issue types Burp 
-    // looks for, and their customer ID #'s. There are more on this page. The following primarily lists those
+    // https://portswigger.net/kb/issues - This page lists all the issue types Burp looks for, and their
+    // customer ID #'s. There are more on this page. The following primarily lists those
     // that are currently relevant in the Benchmark.
     private int translate(String id) {
         switch (id) {
@@ -116,41 +116,25 @@ private int translate(String id) {
         case "2097920": return 79;   // Reflected XSS
         case "2097936": return 79;   // DOM-Based XSS (Probably want separate ID for this in the future)
         case "2098944": return 352;  // CSRF Vulnerability
+        case "3146240": return 918;  // External service interaction (DNS)
         case "4194560": return 9999; // Referer Dependent Response
         case "4194576": return 9999; // X-Forwarded-For header dependency
+        case "4197376": return 20;   // Input returned in response (reflected)
+        case "4197632": return 20;   // Suspicious input transformation (reflected)
         case "5243392": return 614;  // SSL cookie without secure flag set
         case "5244416": return 9998; // Cookie without HttpOnly flag set - There is no CWE defined for this weakness
         case "5245344": return 8888; // Clickjacking - There is no CWE # for this.
+        case "5245360": return 16;   // Browser cross-site scripting filter disabled
+        case "5245952": return 9999; // Ajax request header manipulation (DOM-based) - Map to nothing right now.
         case "5247488": return 9999; // DOM Trust Boundary Violation - Map to nothing right now.
         case "6291968": return 200;  // Information Disclosure - Email Address Disclosed 
         case "6292736": return 200;  // Information Disclosure - Credit Card # Disclosed 
         case "7340288": return 525;  // Information Exposure Through Browser Caching-Cacheable HTTPS Response
         case "8389120": return 9999; // HTML doesn't specify character set - Don't care. Map to nothing.
         case "8389632": return 9999; // Incorrect Content Type - Don't care. Map to nothing right now.
-        case "8389888": return 16; // Content type is not specified
-        case "5245360": return 16; // Browser cross-site scripting filter disabled
-        case "4197632": return 20; // Suspicious input transformation (reflected)
-        case "4197376": return 20; // Input returned in response (reflected)
-        case "3146240": return 918; // External service interaction (DNS)
+        case "8389888": return 16;   // Content type is not specified
 
-            // case "Build Misconfiguration" : return 00;
-            // case "Cookie Security" : return 614;
-            // case "Dead Code" : return 00;
-            // case "Denial of Service" : return 00;
-            // case "Header Manipulation" : return 113;
-            // case "Insecure Randomness" : return 330;
-            // case "J2EE Bad Practices" : return 00;
-            // case "Missing Check against Null" : return 00;
-            // case "Null Dereference" : return 00;
-            // case "Password Management" : return 00;
-            // case "Poor Error Handling" : return 00;
-            // case "Poor Logging Practice" : return 00;
-            // case "Poor Style" : return 00;
-            // case "Resource Injection" : return 00;
-            // case "System Information Leak" : return 00;
             // case "Trust Boundary Violation" : return 501;
-            // case "Unreleased Resource" : return 00;
-            // case "Unsafe Reflection" : return 00;
             // case "Weak Cryptographic Hash" : return 328;
             // case "Weak Encryption" : return 327;
         } // end switch(id)