This repository was archived by the owner on Feb 12, 2021. It is now read-only.
This repository was archived by the owner on Feb 12, 2021. It is now read-only.
SQL Injection #3
Description
Stacktrace:
DocDbDao::getDocumentById
DocDbDao::readTodoItem
TodoItemController::getTodoItemById
The getDocumentById method uses string concatenation instead of parameterized queries using SqlQuerySpec.
Exploitable via the getTodoItemById API.
The getTodoCollection and getTodoDatabase also uses string concatenation but using constant values.
While this is not exploitable as-is, It sets a bad example in showing developers "how to use cosmos".