SAMATE Logo NIST Logo The SAMATE Project Department of Homeland Security
Downloads:  Download this Test Case #61668

Back to the previous page... Back to the previous page

Test Case IDDeprecated61668
Bad / Good / MixedMixedMixed test case
Author
Associations
Test suite: 69  
Added bySAMATE Team Staff
LanguageJava
Type of test caseSource Code
Input string
Expected Output
Instructions
Submission date2011-04-08
DescriptionCWE: 90 LDAP Injection
BadSource: getCookiesServlet Read data from the first cookie
GoodSource: A hardcoded string
Sinks:
BadSink : unchecked data leads to LDAP injection
Flow Variant: 71 Data flow: data passed as an Object reference argument from one method to another in different classes in the same package
File(s)
Flaw

There is 1 comment
Have any comments on this test case? Please, . 


					
				

											
							

										

					
				

											
							

										

					
				

											
							

											

							File Contains: 
															

								CWE-090: Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
								on line(s):
																	
										
											42