Package illustrating a test case

Test case 149097

Type: source code
Pairs: 149098-v1.0.0
State: bad
Author: NIST, Alexander Hoole, Aurelien Delaitre
Status: candidate
Language: C
Submission Date: 23 Mar 2015

Description

The SQL Injection is possible if the arguments are not validated.

Flaws

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Have any comments on this test case? Please, send us an email.