This page is experimental and may change significantly in future releases.
SQL Injection: Hibernate
Properties
id: d3f:CWE-564
- name
- SQL Injection: Hibernate
- definition
- Using Hibernate to execute a dynamic SQL statement built with user-controlled input can allow an attacker to modify the statement's meaning or to execute arbitrary SQL commands.
Neighbors
CWE-564 has no direct neighbors in this release.Inferred Relationships
Related Countermeasure Techniques
Related Weaknesses
CWE-564 has no related weaknesses in this release.