Package illustrating a test case

Test case 149215

Old Test Case ID: 149215
Type: source code
Pairs: 149216-v2.0.0
State: bad
Author: NIST, Romain Gaucher, Alexander Hoole, Aurelien Delaitre
Status: candidate
Language: C
Submission Date: 23 Mar 2015

Description

This is a CGI program which take some parameters values then print it. It shows Cross-Site Scripting in C within a looping complexity.

Flaws

CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Test Suites

C Test Suite for Source Code Analyzer v2 - Vulnerable

Have any comments on this test case? Please, send us an email.