CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: Set data to a hardcoded class name BadSink: Instantiate class named in data Flow V...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: Set data to a hardcoded class name BadSink: Instantiate class named in data Flow V...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: Set data to a hardcoded class name Sinks: BadSink : Instantiate class named in data...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: Set data to a hardcoded class name Sinks: BadSink : Instantiate class named in data...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: Set data to a hardcoded class name Sinks: BadSink : Instantiate class named in data...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: Set data to a hardcoded class name BadSink: Instantiate class named in data Flow V...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: Set data to a hardcoded class name BadSink: Instantiate class named in data Flow V...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: Set data to a hardcoded class name BadSink: Instantiate class named in data Flow V...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: Set data to a hardcoded class name BadSink: Instantiate class named in data Flow V...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: Set data to a hardcoded class name BadSink: Instantiate class named in data Flow V...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: Set data to a hardcoded class name BadSink: Instantiate class named in data Flow V...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: Set data to a hardcoded class name BadSink: Instantiate class named in data Flow V...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: Set data to a hardcoded class name BadSink: Instantiate class named in data Flow V...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: Set data to a hardcoded class name BadSink: Instantiate class named in data Flow V...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: Set data to a hardcoded class name BadSink: Instantiate class named in data Flow V...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: Set data to a hardcoded class name BadSink: Instantiate class named in data Flow V...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: Set data to a hardcoded class name BadSink: Instantiate class named in data Flow V...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: Set data to a hardcoded class name BadSink: Instantiate class named in data Flow V...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: Set data to a hardcoded class name BadSink: Instantiate class named in data Flow V...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: Set data to a hardcoded class name BadSink: Instantiate class named in data Flow V...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: Set data to a hardcoded class name BadSink: Instantiate class named in data Flow V...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: Set data to a hardcoded class name BadSink: Instantiate class named in data Flow V...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getParameter_Servlet Read data from a querystring using getParameter() GoodSource: Set data to a hardcoded class name Sinks: BadSink : Instantiate class named in data Flow Variant: 81 Data fl...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getParameter_Servlet Read data from a querystring using getParameter() GoodSource: Set data to a hardcoded class name Sinks: BadSink : Instantiate class named in data Flow Variant: 75 Data fl...

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection) BadSource: getParameter_Servlet Read data from a querystring using getParameter() GoodSource: Set data to a hardcoded class name Sinks: BadSink : Instantiate class named in data Flow Variant: 74 Data fl...