You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The below list presents the 10 most relevant findings that need your attention. To view information on the remaining findings, navigate to the Mend Application.
statement.execute("INSERT INTO PEOPLE (USER_ID,PASSWORD,FIRST_NAME,LAST_NAME,ROLE) VALUES ('"+username+"','"+password+"', '"+firstname+"', '"+lastname+"','user')");
statement.execute("INSERT INTO PEOPLE (USER_ID,PASSWORD,FIRST_NAME,LAST_NAME,ROLE) VALUES ('"+username+"','"+password+"', '"+firstname+"', '"+lastname+"','user')");
statement.execute("INSERT INTO PEOPLE (USER_ID,PASSWORD,FIRST_NAME,LAST_NAME,ROLE) VALUES ('"+username+"','"+password+"', '"+firstname+"', '"+lastname+"','user')");
statement.execute("INSERT INTO PEOPLE (USER_ID,PASSWORD,FIRST_NAME,LAST_NAME,ROLE) VALUES ('"+username+"','"+password+"', '"+firstname+"', '"+lastname+"','user')");
statement.execute("INSERT INTO PEOPLE (USER_ID,PASSWORD,FIRST_NAME,LAST_NAME,ROLE) VALUES ('"+username+"','"+password+"', '"+firstname+"', '"+lastname+"','user')");
ResultSetresultSet =statement.executeQuery("SELECT COUNT(*)FROM PEOPLE WHERE USER_ID = '"+ user +"' AND PASSWORD='" + password + "'"); /* BAD - user input should always be sanitized */
ResultSetresultSet =statement.executeQuery("SELECT COUNT(*)FROM PEOPLE WHERE USER_ID = '"+ user +"' AND PASSWORD='" + password + "'"); /* BAD - user input should always be sanitized */
ResultSetresultSet =statement.executeQuery("SELECT COUNT(*)FROM PEOPLE WHERE USER_ID = '"+ user +"' AND PASSWORD='" + password + "'"); /* BAD - user input should always be sanitized */
ResultSetresultSet =statement.executeQuery("SELECT COUNT(*)FROM PEOPLE WHERE USER_ID = '"+ user +"' AND PASSWORD='" + password + "'"); /* BAD - user input should always be sanitized */
ResultSetresultSet =statement.executeQuery("SELECT COUNT(*)FROM PEOPLE WHERE USER_ID = '"+ user +"' AND PASSWORD='" + password + "'"); /* BAD - user input should always be sanitized */
ResultSetresultSet =statement.executeQuery("SELECT COUNT(*)FROM PEOPLE WHERE USER_ID = '"+ user +"' AND PASSWORD='" + password + "'"); /* BAD - user input should always be sanitized */
ResultSetresultSet =statement.executeQuery("SELECT COUNT(*)FROM PEOPLE WHERE USER_ID = '"+ user +"' AND PASSWORD='" + password + "'"); /* BAD - user input should always be sanitized */
ResultSetresultSet =statement.executeQuery("SELECT FIRST_NAME,LAST_NAME,ROLE FROM PEOPLE WHERE USER_ID = '"+ username +"' "); /* BAD - user input should always be sanitized */
ResultSetresultSet =statement.executeQuery("SELECT FIRST_NAME,LAST_NAME,ROLE FROM PEOPLE WHERE USER_ID = '"+ username +"' "); /* BAD - user input should always be sanitized */
ResultSetresultSet =statement.executeQuery("SELECT FIRST_NAME,LAST_NAME,ROLE FROM PEOPLE WHERE USER_ID = '"+ username +"' "); /* BAD - user input should always be sanitized */
ResultSetresultSet =statement.executeQuery("SELECT FIRST_NAME,LAST_NAME,ROLE FROM PEOPLE WHERE USER_ID = '"+ username +"' "); /* BAD - user input should always be sanitized */
ResultSetresultSet =statement.executeQuery("SELECT FIRST_NAME,LAST_NAME,ROLE FROM PEOPLE WHERE USER_ID = '"+ username +"' "); /* BAD - user input should always be sanitized */
ResultSetresultSet =statement.executeQuery("SELECT ACCOUNT_ID, ACCOUNT_NAME, BALANCE FROM ACCOUNTS WHERE USERID = '"+ username +"' "); /* BAD - user input should always be sanitized */
ResultSetresultSet =statement.executeQuery("SELECT ACCOUNT_ID, ACCOUNT_NAME, BALANCE FROM ACCOUNTS WHERE USERID = '"+ username +"' "); /* BAD - user input should always be sanitized */
ResultSetresultSet =statement.executeQuery("SELECT ACCOUNT_ID, ACCOUNT_NAME, BALANCE FROM ACCOUNTS WHERE USERID = '"+ username +"' "); /* BAD - user input should always be sanitized */
ResultSetresultSet =statement.executeQuery("SELECT ACCOUNT_ID, ACCOUNT_NAME, BALANCE FROM ACCOUNTS WHERE USERID = '"+ username +"' "); /* BAD - user input should always be sanitized */
ResultSetresultSet =statement.executeQuery("SELECT ACCOUNT_ID, ACCOUNT_NAME, BALANCE FROM ACCOUNTS WHERE USERID = '"+ username +"' "); /* BAD - user input should always be sanitized */
mend-for-github-combot
changed the title
Code Security Report: 24 high severity findings, 41 total findings
Code Security Report: 20 high severity findings, 32 total findings
Nov 19, 2023
mend-for-github-combot
changed the title
Code Security Report: 20 high severity findings, 32 total findings
Code Security Report: 24 high severity findings, 41 total findings
Nov 20, 2023
Code Security Report
Scan Metadata
Latest Scan: 2023-11-20 07:14pm
Total Findings: 41 | New Findings: 0 | Resolved Findings: 0
Tested Project Files: 135
Detected Programming Languages: 2 (JavaScript / Node.js, Java*)
Most Relevant Findings
CWE-78
index.jsp:65
AltoroJ/WebContent/index.jsp
Lines 60 to 65 in 8993e54
2 Data Flow/s detected
View Data Flow 1
AltoroJ/WebContent/index.jsp
Line 38 in 8993e54
AltoroJ/WebContent/index.jsp
Line 62 in 8993e54
AltoroJ/WebContent/index.jsp
Line 65 in 8993e54
AltoroJ/WebContent/index.jsp
Line 65 in 8993e54
View Data Flow 2
AltoroJ/WebContent/index.jsp
Line 38 in 8993e54
AltoroJ/WebContent/index.jsp
Line 62 in 8993e54
AltoroJ/WebContent/index.jsp
Line 65 in 8993e54
AltoroJ/WebContent/index.jsp
Line 65 in 8993e54
● Training
▪ Secure Code Warrior Command Injection Training
● Videos
▪ Secure Code Warrior Command Injection Video
● Further Reading
▪ OWASP testing for Command Injection
▪ OWASP Command Injection
CWE-89
DBUtil.java:494
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Lines 489 to 494 in 8993e54
2 Data Flow/s detected
View Data Flow 1
AltoroJ/src/com/ibm/security/appscan/altoromutual/servlet/AdminServlet.java
Line 59 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/servlet/AdminServlet.java
Line 80 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 490 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 494 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 494 in 8993e54
View Data Flow 2
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/AdminAPI.java
Line 67 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/AdminAPI.java
Line 80 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/AdminAPI.java
Line 80 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/AdminAPI.java
Line 83 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/AdminAPI.java
Line 83 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/AdminAPI.java
Line 83 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/AdminAPI.java
Line 83 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/AdminAPI.java
Line 103 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 490 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 494 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 494 in 8993e54
● Training
▪ Secure Code Warrior SQL Injection Training
● Videos
▪ Secure Code Warrior SQL Injection Video
● Further Reading
▪ OWASP SQL Injection Prevention Cheat Sheet
▪ OWASP SQL Injection
▪ OWASP Query Parameterization Cheat Sheet
CWE-89
DBUtil.java:471
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Lines 466 to 471 in 8993e54
1 Data Flow/s detected
AltoroJ/src/com/ibm/security/appscan/altoromutual/servlet/AdminServlet.java
Line 44 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/servlet/AdminServlet.java
Line 49 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 467 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 471 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 471 in 8993e54
● Training
▪ Secure Code Warrior SQL Injection Training
● Videos
▪ Secure Code Warrior SQL Injection Video
● Further Reading
▪ OWASP SQL Injection Prevention Cheat Sheet
▪ OWASP SQL Injection
▪ OWASP Query Parameterization Cheat Sheet
CWE-94
serverStatusCheck.html:41
AltoroJ/WebContent/util/serverStatusCheck.html
Lines 36 to 41 in 8993e54
1 Data Flow/s detected
AltoroJ/WebContent/util/serverStatusCheck.html
Line 41 in 8993e54
● Training
▪ Secure Code Warrior Code Injection Training
● Videos
▪ Secure Code Warrior Code Injection Video
● Further Reading
▪ OWASP Command Injection
CWE-89
DBUtil.java:219
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Lines 214 to 219 in 8993e54
3 Data Flow/s detected
View Data Flow 1
AltoroJ/src/com/ibm/security/appscan/altoromutual/servlet/CCApplyServlet.java
Line 47 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/servlet/CCApplyServlet.java
Line 51 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/servlet/CCApplyServlet.java
Line 51 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/servlet/CCApplyServlet.java
Line 51 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 212 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 219 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 219 in 8993e54
View Data Flow 2
AltoroJ/src/com/ibm/security/appscan/altoromutual/servlet/LoginServlet.java
Line 79 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/servlet/LoginServlet.java
Line 80 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/servlet/LoginServlet.java
Line 80 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/servlet/LoginServlet.java
Line 80 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/servlet/LoginServlet.java
Line 80 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/servlet/LoginServlet.java
Line 82 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 212 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 219 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 219 in 8993e54
View Data Flow 3
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/LoginAPI.java
Line 31 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/LoginAPI.java
Line 35 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/LoginAPI.java
Line 35 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/LoginAPI.java
Line 52 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/LoginAPI.java
Line 52 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/LoginAPI.java
Line 52 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/LoginAPI.java
Line 52 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/LoginAPI.java
Line 52 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/LoginAPI.java
Line 52 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/LoginAPI.java
Line 57 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 212 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 219 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 219 in 8993e54
● Training
▪ Secure Code Warrior SQL Injection Training
● Videos
▪ Secure Code Warrior SQL Injection Video
● Further Reading
▪ OWASP SQL Injection Prevention Cheat Sheet
▪ OWASP SQL Injection
▪ OWASP Query Parameterization Cheat Sheet
CWE-89
DBUtil.java:506
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Lines 501 to 506 in 8993e54
2 Data Flow/s detected
View Data Flow 1
AltoroJ/src/com/ibm/security/appscan/altoromutual/servlet/AdminServlet.java
Line 91 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/servlet/AdminServlet.java
Line 103 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 502 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 506 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 506 in 8993e54
View Data Flow 2
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/AdminAPI.java
Line 22 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/AdminAPI.java
Line 32 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/AdminAPI.java
Line 32 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/AdminAPI.java
Line 35 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/AdminAPI.java
Line 35 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/AdminAPI.java
Line 35 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/AdminAPI.java
Line 35 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/AdminAPI.java
Line 56 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 502 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 506 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 506 in 8993e54
● Training
▪ Secure Code Warrior SQL Injection Training
● Videos
▪ Secure Code Warrior SQL Injection Video
● Further Reading
▪ OWASP SQL Injection Prevention Cheat Sheet
▪ OWASP SQL Injection
▪ OWASP Query Parameterization Cheat Sheet
CWE-89
DBUtil.java:242
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Lines 237 to 242 in 8993e54
2 Data Flow/s detected
View Data Flow 1
AltoroJ/src/com/ibm/security/appscan/altoromutual/servlet/LoginServlet.java
Line 75 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/servlet/LoginServlet.java
Line 94 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/ServletUtil.java
Line 340 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/ServletUtil.java
Line 342 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 236 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 242 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 242 in 8993e54
View Data Flow 2
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 136 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 136 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 136 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 139 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 139 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 139 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 139 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 140 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 140 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 141 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 141 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 141 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 141 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 141 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 141 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 142 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 236 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 242 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 242 in 8993e54
● Training
▪ Secure Code Warrior SQL Injection Training
● Videos
▪ Secure Code Warrior SQL Injection Video
● Further Reading
▪ OWASP SQL Injection Prevention Cheat Sheet
▪ OWASP SQL Injection
▪ OWASP Query Parameterization Cheat Sheet
CWE-89
DBUtil.java:519
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Lines 514 to 519 in 8993e54
1 Data Flow/s detected
AltoroJ/src/com/ibm/security/appscan/altoromutual/servlet/FeedbackServlet.java
Line 49 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/servlet/FeedbackServlet.java
Line 57 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 119 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 127 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 515 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 519 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 519 in 8993e54
● Training
▪ Secure Code Warrior SQL Injection Training
● Videos
▪ Secure Code Warrior SQL Injection Video
● Further Reading
▪ OWASP SQL Injection Prevention Cheat Sheet
▪ OWASP SQL Injection
▪ OWASP Query Parameterization Cheat Sheet
CWE-89
DBUtil.java:403
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Lines 398 to 403 in 8993e54
1 Data Flow/s detected
AltoroJ/WebContent/bank/transaction.jsp
Line 41 in 8993e54
AltoroJ/WebContent/bank/transaction.jsp
Line 47 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/model/User.java
Line 101 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/model/User.java
Line 104 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 370 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 396 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 399 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 399 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 403 in 8993e54
● Training
▪ Secure Code Warrior SQL Injection Training
● Videos
▪ Secure Code Warrior SQL Injection Video
● Further Reading
▪ OWASP SQL Injection Prevention Cheat Sheet
▪ OWASP SQL Injection
▪ OWASP Query Parameterization Cheat Sheet
CWE-89
DBUtil.java:276
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Lines 271 to 276 in 8993e54
2 Data Flow/s detected
View Data Flow 1
AltoroJ/src/com/ibm/security/appscan/altoromutual/servlet/LoginServlet.java
Line 75 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/servlet/LoginServlet.java
Line 94 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/ServletUtil.java
Line 340 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/ServletUtil.java
Line 342 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 236 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 256 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/model/User.java
Line 41 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/model/User.java
Line 42 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 256 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/ServletUtil.java
Line 342 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/ServletUtil.java
Line 343 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/model/User.java
Line 76 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/model/User.java
Line 78 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 270 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 276 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 276 in 8993e54
View Data Flow 2
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 136 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 136 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 136 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 139 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 139 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 139 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 139 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 140 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 140 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 141 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 141 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 141 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 141 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 141 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 141 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 142 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 236 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 256 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/model/User.java
Line 41 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/model/User.java
Line 42 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 256 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/OperationsUtil.java
Line 142 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/AccountAPI.java
Line 35 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/api/AccountAPI.java
Line 35 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/model/User.java
Line 76 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/model/User.java
Line 78 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 270 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 276 in 8993e54
AltoroJ/src/com/ibm/security/appscan/altoromutual/util/DBUtil.java
Line 276 in 8993e54
● Training
▪ Secure Code Warrior SQL Injection Training
● Videos
▪ Secure Code Warrior SQL Injection Video
● Further Reading
▪ OWASP SQL Injection Prevention Cheat Sheet
▪ OWASP SQL Injection
▪ OWASP Query Parameterization Cheat Sheet
Findings Overview
The text was updated successfully, but these errors were encountered: