Test cases - NIST Software Assurance Reference Dataset

Displaying test cases 354751 - 354775 of 426654 in total

CWE-89

146731-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146730-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146729-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146728-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146727-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146726-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146725-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146724-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146723-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146722-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146721-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146720-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146719-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146718-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146717-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146716-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146715-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146714-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146713-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146712-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146711-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146710-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146709-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146708-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...
CWE-89

146707-v1.0.0

Added 13 years ago

candidate

mixed

CWE: 89 SQL Injection BadSource: database Read data from a database GoodSource: A hardcoded string Sinks: prepareStatement GoodSink: Use prepared statement and execute (properly) BadSink : data concatenated into SQL statement used in prepareStatement() call, which could result in SQL Injecti...

Results per page