Test case 149100

Deprecated test case

This version contains mistakes, making it deprecated. Deprecated test cases should not be used for new work. However, They remain in the SARD as a reference to redo previous work. The latest version of this test case is available here.

Old Test Case ID: 1801
Type: source code
Pairs: 149099-v1.0.0
State: good
Status: deprecated
Language: C
Submission Date: 11 Jan 2007

Description

The SQL Injection is possible because the argument are not validated.
The code complexity is in the call of another function to perform the MySQL query.

Flaws

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Test Suites

C Test Suite for Source Code Analyzer - false positive

Have any comments on this test case? Please, send us an email.