+APP.4.6.A18 Avoiding Open SQL Injection Vulnerabilities (S)

APP.4.6.A18 Avoiding Open SQL Injection Vulnerabilities (S)

Dynamic Open SQL SHOULD NOT be used. If database access with dynamic SQL conditions is necessary, user input SHOULD NOT be transferred in the respective query. If this is nevertheless the case, the user input MUST be checked (output encoding).

1. Overzicht

1.1 Referenties

1.2 Geïdentificeerde eisen

1.3 Gerelateerde regelingen

2. Geïdentificeerde eisen

Eisen

3. Gerelateerde regelingen

Regelingen

Gekoppelde issues

Koppelingen
blocks G 0.14 Interception of Information / Espionage
blocks G 0.16 Theft of Devices, Storage Media and Documents
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information