Back to the previous page

Test Case ID	148744
Bad / Good / Mixed	Mixed
Author
Associations	Test suite: 87 109
Added by	SAMATE Team Staff
Language	Java
Type of test case	Source Code
Input string
Expected Output
Instructions
Submission date	2013-05-22
Description	CWE: 90 LDAP Injection BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter()) GoodSource: A hardcoded string BadSink: data concatenated into LDAP search, which could result in LDAP Injection Flow Variant: 15 Control flow: switch(6)
File(s)	CWE90_LDAP_Injection__getQueryString_Servlet_15.java (9.68 kB) IO.java (3.34 kB) AbstractTestCaseServlet.java (3.39 kB) AbstractTestCaseServletBase.java (3.5 kB) servlet-api.jar (86.16 kB)
Flaw	CWE-090: Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') • 2

There are no comments

Have any comments on this test case? Please, .

File Contains:
CWE-090: Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') on line(s): 42, 71