Test cases - NIST Software Assurance Reference Dataset

Displaying test cases 27851 - 27875 of 74755 in total

CWE-113

48815-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: sendRedirectServlet GoodSink: URLEncode input BadSink : querystring to sendRedirect() Flow Variant: 19 Control flow: Dead code after...
CWE-113

48814-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: sendRedirectServlet GoodSink: URLEncode input BadSink : querystring to sendRedirect() Flow Variant: 17 Control flow: for loops
CWE-113

48813-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: sendRedirectServlet GoodSink: URLEncode input BadSink : querystring to sendRedirect() Flow Variant: 16 Control flow: while(true) and...
CWE-113

48812-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: sendRedirectServlet GoodSink: URLEncode input BadSink : querystring to sendRedirect() Flow Variant: 15 Control flow: switch(6) and s...
CWE-113

48811-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: sendRedirectServlet GoodSink: URLEncode input BadSink : querystring to sendRedirect() Flow Variant: 14 Control flow: if(IO.static_fi...
CWE-113

48810-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: sendRedirectServlet GoodSink: URLEncode input BadSink : querystring to sendRedirect() Flow Variant: 13 Control flow: if(IO.static_fi...
CWE-113

48809-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: sendRedirectServlet GoodSink: URLEncode input BadSink : querystring to sendRedirect() Flow Variant: 12 Control flow: if(IO.static_re...
CWE-113

48808-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: sendRedirectServlet GoodSink: URLEncode input BadSink : querystring to sendRedirect() Flow Variant: 11 Control flow: if(IO.static_re...
CWE-113

48807-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: sendRedirectServlet GoodSink: URLEncode input BadSink : querystring to sendRedirect() Flow Variant: 10 Control flow: if(IO.static_t)...
CWE-113

48806-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: sendRedirectServlet GoodSink: URLEncode input BadSink : querystring to sendRedirect() Flow Variant: 09 Control flow: if(IO.static_fi...
CWE-113

48805-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: sendRedirectServlet GoodSink: URLEncode input BadSink : querystring to sendRedirect() Flow Variant: 08 Control flow: if(private_retu...
CWE-113

48804-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: sendRedirectServlet GoodSink: URLEncode input BadSink : querystring to sendRedirect() Flow Variant: 07 Control flow: if(private_five...
CWE-113

48803-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: sendRedirectServlet GoodSink: URLEncode input BadSink : querystring to sendRedirect() Flow Variant: 06 Control flow: if(private_fina...
CWE-113

48802-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: sendRedirectServlet GoodSink: URLEncode input BadSink : querystring to sendRedirect() Flow Variant: 05 Control flow: if(private_t) a...
CWE-113

48801-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: sendRedirectServlet GoodSink: URLEncode input BadSink : querystring to sendRedirect() Flow Variant: 04 Control flow: if(private_fina...
CWE-113

48800-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: sendRedirectServlet GoodSink: URLEncode input BadSink : querystring to sendRedirect() Flow Variant: 03 Control flow: if(5==5) and if...
CWE-113

48799-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: sendRedirectServlet GoodSink: URLEncode input BadSink : querystring to sendRedirect() Flow Variant: 02 Control flow: if(true) and if...
CWE-113

48798-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: sendRedirectServlet GoodSink: URLEncode input BadSink : querystring to sendRedirect() Flow Variant: 01 Baseline
CWE-113

48797-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: addHeaderServlet GoodSink: URLEncode input BadSink : querystring to addHeader() Flow Variant: 71 Data flow: data passed as an Object...
CWE-113

48796-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: addHeaderServlet GoodSink: URLEncode input BadSink : querystring to addHeader() Flow Variant: 68 Data flow: data passed as a member ...
CWE-113

48795-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: addHeaderServlet GoodSink: URLEncode input BadSink : querystring to addHeader() Flow Variant: 67 Data flow: data passed in a class f...
CWE-113

48794-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: addHeaderServlet GoodSink: URLEncode input BadSink : querystring to addHeader() Flow Variant: 66 Data flow: data passed in an array ...
CWE-113

48793-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: addHeaderServlet GoodSink: URLEncode input BadSink : querystring to addHeader() Flow Variant: 61 Data flow: data returned from one m...
CWE-113

48792-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: addHeaderServlet GoodSink: URLEncode input BadSink : querystring to addHeader() Flow Variant: 54 Data flow: data passed as an argume...
CWE-113

48791-v1.0.0

Added 15 years ago

deprecated

mixed

CWE: 113 HTTP Response Splitting BadSource: getQueryStringServlet Parse id param out of the querystring without getParam GoodSource: A hardcoded string Sinks: addHeaderServlet GoodSink: URLEncode input BadSink : querystring to addHeader() Flow Variant: 53 Data flow: data passed as an argume...

Results per page