Test case 149096

Deprecated test case

This version contains mistakes, making it deprecated. Deprecated test cases should not be used for new work. However, They remain in the SARD as a reference to redo previous work. The latest version of this test case is available here.

Old Test Case ID: 1797
Type: source code
Pairs: 149095-v1.0.0
State: good
Status: deprecated
Language: C
Submission Date: 11 Jan 2007

Description

The SQL Injection is possible because the arguments are not validated before the MySQL query.

Flaws

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Test Suites

C Test Suite for Source Code Analyzer - false positive

Have any comments on this test case? Please, send us an email.