CX Dynamic_SQL_Queries @ iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/YapDatabase.m [master]

[tsunez]

Dynamic_SQL_Queries issue exists @ iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/YapDatabase.m in branch master

Severity: Information

CWE:89

Vulnerability details and guidance

Checkmarx

Recommended Fix

Lines: 867 963 1011 1109

---

Code (Line #867):

    NSString *pragma = [NSString stringWithFormat:@"PRAGMA %@;", pragmaSetting];

---

Code (Line #963):

    NSString *pragma = [NSString stringWithFormat:@"PRAGMA table_info('%@');", tableName];

---

Code (Line #1011):

    NSString *pragma = [NSString stringWithFormat:@"PRAGMA table_info('%@');", tableName];

---

Code (Line #1109):

    NSString *query = [NSString stringWithFormat:@"PRAGMA user_version = %d;", user_version];

---

[tsunez]

Issue still exists.

SUMMARY

Issue has 4 vulnerability/vulnerabilities left to be fixed (Please scroll to the top for more information)

[tsunez]

Issue still exists.

SUMMARY

Issue has 4 vulnerability/vulnerabilities left to be fixed (Please scroll to the top for more information)