jbruinaud / WebGoatNet

WebGoat .Net for demos
0 stars 0 forks source link

CX Value_Shadowing @ WebGoatCoins/ProductDetails.aspx.cs [master] #178

Open jbruinaud opened 4 years ago

jbruinaud commented 4 years ago

Value_Shadowing issue exists @ WebGoatCoins/ProductDetails.aspx.cs in branch master

The "productNumber" invoked in LoadComments in WebGoatCoins\ProductDetails.aspx.cs at line 53 is called ambiguously, causing value shadowing.

Severity: Medium

CWE:233

Checkmarx

Lines: 55


Code (Line #55):

            string id = Request["productNumber"];