Kriti Gupta created OPENMEETINGS-945:
----------------------------------------
Summary: On line 139 of LocationService.java, the method
findAtmByAddress() invokes a SQL query built using input coming from an
untrusted source.
Key: OPENMEETINGS-945
URL: https://issues.apache.org/jira/browse/OPENMEETINGS-945
Project: Openmeetings
Issue Type: Test
Affects Versions: 3.0.0, 3.1.0
Environment: Windows 8
Reporter: Kriti Gupta
SQL injection errors occur when:
1. Data enters a program from an untrusted source.
In this case the data enters at in FindLocations.java at line 56.
2. The data is used to dynamically construct a SQL query.
In this case the data is passed to in LocationService.java at line 139.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
