Kriti Gupta created OPENMEETINGS-948:
----------------------------------------
Summary: SQL Injection: Hibernate
Key: OPENMEETINGS-948
URL: https://issues.apache.org/jira/browse/OPENMEETINGS-948
Project: Openmeetings
Issue Type: Test
Affects Versions: 3.0.0, 3.1.0
Environment: Windows 8
Reporter: Kriti Gupta
Priority: Critical
On line 69 of LocationService.java, findAtmByZip() uses Hibernate to execute a
dynamic SQL statement built with input coming from an
untrusted source. An attacker could modify the statement's meaning or execute
arbitrary SQL commands. Using Hibernate to execute a dynamic
SQL statement built with input coming from an untrusted source can allow an
attacker to modify the statement's meaning or to execute arbitrary
SQL commands.
SQL Injection errors occur when:
1. Data enters a program from an untrusted source.
In this case the data enters at in FindLocations.java at line 86.
2. The data is used to dynamically construct a SQL query.
In this case the data is passed to in LocationService.java at line 69.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
