+CON.10.A9 Protection Against SQL Injections (B)

CON.10.A9 Protection Against SQL Injections (B)

If data is passed to a database management system (DBMS), Developers MUST use stored procedures or prepared SQL statements. If data is passed to a DBMS and neither stored procedures nor prepared SQL statements are supported by the operational environment, SQL queries MUST be secured separately.

1. Resumen

Título	Estándar

1.1 Referencias

1.2 Requisitos identificados

1.3 Regulaciones relacionadas

2. Requisitos identificados

Requisitos
Fuente	Requisito

3. Regulaciones relacionadas

Regulaciones
Fuente	Regulación

Incidencias vinculadas

Vínculos
Tipo de vínculo	Incidencia
blocks	G 0.28 Software Vulnerabilities or Errors

BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)