search

ColinRobbins / scm-helper

Helper tool to manage data in Swim Club Manager
MIT License
3 stars 0 forks source link

(BAN-B608) Audit required: Risk of possible SQL injection vector through string-based query construction #32

Closed ColinRobbins closed 3 years ago

ColinRobbins commented 3 years ago

Description

Constructing SQL query using user provided data is insecure. It makes application vulnerable to [SQL injection](SQL injection) attacks.

Occurrences

There is 1 occurrence of this issue in the repository.

See all occurrences on DeepSource → deepsource.io/gh/ColinRobbins/scm-helper/issue/BAN-B608/occurrences/

ColinRobbins commented 3 years ago

Password is a dummy. closed.