SAMATE Logo NIST Logo The SAMATE Project Department of Homeland Security
Downloads:  Download this Test Case #61667

Back to the previous page... Back to the previous page

Test Case IDDeprecated61667
Bad / Good / MixedMixedMixed test case
Author
Associations
Test suite: 69  
Added bySAMATE Team Staff
LanguageJava
Type of test caseSource Code
Input string
Expected Output
Instructions
Submission date2011-04-08
DescriptionCWE: 90 LDAP Injection
BadSource: getCookiesServlet Read data from the first cookie
GoodSource: A hardcoded string
BadSink: unchecked data leads to LDAP injection
Flow Variant: 68 Data flow: data passed as a member variable in the "a" class, which is used by a method in another class in the same package
File(s)
Flaw

There is 1 comment
Have any comments on this test case? Please, . 


					
				

											
							

										

					
				

											
							

										

					
				

											
							

											

							File Contains: 
															

								CWE-090: Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
								on line(s):
																	
										
											43