Test case 149095

Deprecated test case

This version contains mistakes, making it deprecated. Deprecated test cases should not be used for new work. However, They remain in the SARD as a reference to redo previous work. The latest version of this test case is available here.

Old Test Case ID: 1796
Type: source code
Pairs: 149096-v1.0.0
State: bad
Status: deprecated
Language: C
Submission Date: 11 Jan 2007

Description

The SQL Injection is possible because the arguments are not validated before the MySQL query.

Flaws

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Test Suites

C Test Suite for Source Code Analyzer - weakness suppresion
C Test Suite for Source Code Analyzer - weakness
C Test Suite for Source Code Analyzer v2 - Vulnerable

Have any comments on this test case? Please, send us an email.