Test cases - NIST Software Assurance Reference Dataset

Displaying test cases 1976 - 2000 of 113211 in total

CWE-89

146398-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146397-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146396-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146395-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146394-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146393-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146392-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146391-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146390-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146389-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146388-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146387-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146386-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146385-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146384-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146383-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146382-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146381-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146380-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146379-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146378-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146377-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146376-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146375-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...
CWE-89

146374-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: console_readLine Read data from the console using readLine() GoodSource: A hardcoded string Sinks: executeBatch GoodSink: Use prepared statement and executeBatch (properly) BadSink : data concatenated into SQL statement used in executeBatch(), which could res...

Results per page