search

jbruinaud / WebGoatNet

WebGoat .Net for demos
0 stars 0 forks source link

CX Blind_SQL_Injections @ WebGoatCoins/ProductDetails.aspx.cs [master] #101

Open jbruinaud opened 4 years ago

jbruinaud commented 4 years ago

Blind_SQL_Injections issue exists @ WebGoatCoins/ProductDetails.aspx.cs in branch master

The application's AddComment method executes an SQL query with command, at line 271 of App_Code\DB\MySqlDbProvider.cs. The application constructs this SQL query by embedding an untrusted string into the query without proper sanitization. The concatenated string is submitted to the database, where it is parsed and executed accordingly. If an exception is thrown by the database code, it is caught and handled. An attacker could still use inferential or boolean exploitation techniques to retrieve the data, by altering the user input Value. This is read in the btnSave_Click method, at line 37 of WebGoatCoins\ProductDetails.aspx.cs, and used without sanitization in the SQL query that is sent to the database server.  This may enable a Blind SQL Injection attack.

Severity: Low

CWE:89

Checkmarx

Lines: 41

Code (Line #41):

                string error_message = du.AddComment(hiddenFieldProductID.Value, txtEmail.Text, txtComment.Text);
jbruinaud commented 4 years ago

Issue still exists.

SUMMARY

Issue has total 1 vulnerabilities left to be fix (Please scroll to the top for more information)