Update myprofile.jsp - #24
Conversation
⛔ Snyk checks have failed. 8 issues have been found so far.
✅ security/snyk check is complete. No issues have been found. (View Details) ✅ license/snyk check is complete. No issues have been found. (View Details) ⛔ code/snyk check is complete. 8 issues have been found. (View Details) 💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
| { | ||
| Connection con=new DBConnect().connect(getServletContext().getRealPath("/WEB-INF/config.properties")); | ||
|
|
||
| String id=request.getParameter("id"); |
There was a problem hiding this comment.
SQL Injection
Unsanitized input from an HTTP parameter flows into executeQuery, where it is used in an SQL query. This may result in an SQL Injection vulnerability.
Line 16 | CWE-89 | Priority score 825 | Learn more about this vulnerability
Data flow: 6 steps
Step 1 - 3
Step 4 - 6
⚡ Fix this issue by replying with the following command: @snyk /fix
There was a problem hiding this comment.
There were no fixes found for the request
| { | ||
| Connection con=new DBConnect().connect(getServletContext().getRealPath("/WEB-INF/config.properties")); | ||
|
|
||
| String id=request.getParameter("id"); |
There was a problem hiding this comment.
SQL Injection
Unsanitized input from an HTTP parameter flows into executeQuery, where it is used in an SQL query. This may result in an SQL Injection vulnerability.
Line 16 | CWE-89 | Priority score 825 | Learn more about this vulnerability
⚡ Fix this issue by replying with the following command: @snyk /fix
There was a problem hiding this comment.
There were no fixes found for the request
| { | ||
| Connection con=new DBConnect().connect(getServletContext().getRealPath("/WEB-INF/config.properties")); | ||
|
|
||
| String id=request.getParameter("id"); |
There was a problem hiding this comment.
Cross-site Scripting (XSS)
Unsanitized input from an HTTP parameter flows into print, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack (XSS).
Line 16 | CWE-79 | Priority score 875 | Learn more about this vulnerability
⚡ Fix this issue by replying with the following command: @snyk /fix
| { | ||
| Connection con=new DBConnect().connect(getServletContext().getRealPath("/WEB-INF/config.properties")); | ||
|
|
||
| String id=request.getParameter("id"); |
There was a problem hiding this comment.
Cross-site Scripting (XSS)
Unsanitized input from an HTTP parameter flows into print, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack (XSS).
Line 16 | CWE-79 | Priority score 875 | Learn more about this vulnerability
⚡ Fix this issue by replying with the following command: @snyk /fix
| { | ||
| Connection con=new DBConnect().connect(getServletContext().getRealPath("/WEB-INF/config.properties")); | ||
|
|
||
| String id=request.getParameter("id"); |
There was a problem hiding this comment.
Cross-site Scripting (XSS)
Unsanitized input from an HTTP parameter flows into print, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack (XSS).
Line 16 | CWE-79 | Priority score 875 | Learn more about this vulnerability
⚡ Fix this issue by replying with the following command: @snyk /fix
| { | ||
| Connection con=new DBConnect().connect(getServletContext().getRealPath("/WEB-INF/config.properties")); | ||
|
|
||
| String id=request.getParameter("id"); |
There was a problem hiding this comment.
Cross-site Scripting (XSS)
Unsanitized input from an HTTP parameter flows into print, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack (XSS).
Line 16 | CWE-79 | Priority score 875 | Learn more about this vulnerability
Data flow: 13 steps
Step 1 - 3
Step 4 src/main/webapp/myprofile.jsp#L55
Step 5 - 8 src/main/webapp/myprofile.jsp#L63
Step 9 - 13
⚡ Fix this issue by replying with the following command: @snyk /fix
| { | ||
| Connection con=new DBConnect().connect(getServletContext().getRealPath("/WEB-INF/config.properties")); | ||
|
|
||
| String id=request.getParameter("id"); |
There was a problem hiding this comment.
Cross-site Scripting (XSS)
Unsanitized input from an HTTP parameter flows into print, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack (XSS).
Line 16 | CWE-79 | Priority score 875 | Learn more about this vulnerability
Data flow: 13 steps
Step 1 - 3
Step 4 src/main/webapp/myprofile.jsp#L55
Step 5 - 8 src/main/webapp/myprofile.jsp#L63
Step 9 - 13
⚡ Fix this issue by replying with the following command: @snyk /fix
| { | ||
| Connection con=new DBConnect().connect(getServletContext().getRealPath("/WEB-INF/config.properties")); | ||
|
|
||
| String id=request.getParameter("id"); |
There was a problem hiding this comment.
Cross-site Scripting (XSS)
Unsanitized input from an HTTP parameter flows into print, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack (XSS).
Line 16 | CWE-79 | Priority score 875 | Learn more about this vulnerability
Data flow: 13 steps
Step 1 - 3
Step 4 src/main/webapp/myprofile.jsp#L55
Step 5 - 8 src/main/webapp/myprofile.jsp#L63
Step 9 - 13
⚡ Fix this issue by replying with the following command: @snyk /fix
1 participant
No description provided.