CX SQL_Injection @ riches/WEB-INF/src/java/com/checkmarx/samples/riches/restful/TransactionResources.java [master]

[kmcdon83]

SQL_Injection issue exists @ riches/WEB-INF/src/java/com/checkmarx/samples/riches/restful/TransactionResources.java in branch master

Severity: High
CWE:89
Vulnerability details and guidance
Checkmarx
Lines: 84 101 102 104 105 106 107 63

---

Code (Line #84):

    public String Deposit(String representation) {

---

Code (Line #101):

    public String GetTransactions(@PathParam("username") String username,

---

Code (Line #102):

                           @PathParam("acctno") @DefaultValue("0422328325") String acctno,

---

Code (Line #104):

                           @MatrixParam("payee") String payee,

---

Code (Line #105):

                           @MatrixParam("amount") String amount,

---

Code (Line #106):

                           @QueryParam("memo") String memo,

---

Code (Line #107):

                           @QueryParam("id") String id){

---

Code (Line #63):

    public String PayBill(String representation)

---

[kmcdon83]

Issue still exists.

[kmcdon83]

Issue still exists.

[kmcdon83]

Issue still exists.