SAMATE Logo NIST Logo The SAMATE Project Department of Homeland Security
Downloads:  Download this Test Case #61680

Back to the previous page... Back to the previous page

Test Case IDDeprecated61680
Bad / Good / MixedMixedMixed test case
Author
Associations
Test suite: 69  
Added bySAMATE Team Staff
LanguageJava
Type of test caseSource Code
Input string
Expected Output
Instructions
Submission date2011-04-08
DescriptionCWE: 90 LDAP Injection
BadSource: getParameterServlet Read data from a querystring using getParameter
GoodSource: A hardcoded string
BadSink: unchecked data leads to LDAP injection
Flow Variant: 12 Control flow: if(IO.static_returns_t_or_f())
File(s)
Flaw

There is 1 comment
Have any comments on this test case? Please, . 


					
				

											
							

										

					
				

											
							

											

							File Contains: 
															

								CWE-090: Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
								on line(s):
																	
										
											58