1282
Nature Type ID Name Page
MemberOf 1186 SEI CERT Perl Coding Standard - Guidelines 50.
Miscellaneous (MSC)
1178 2468
MemberOf 1412 Comprehensive Categorization: Poor Coding Practices 1400 2538
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
CERT C Secure Coding MSC00-
C
Compile cleanly at high warning levels
SEI CERT Perl Coding
Standard
MSC01-
PL
Imprecise Detect and remove unused variables
Software Fault Patterns SFP2 Unused Entities
CWE-564: SQL Injection: Hibernate
Weakness ID : 564
Structure : Simple
Abstraction : Variant
Description
Using Hibernate to execute a dynamic SQL statement built with user-controlled input can allow an
attacker to modify the statement's meaning or to execute arbitrary SQL commands.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 89 Improper Neutralization of Special Elements used in an SQL
Command ('SQL Injection')