Test Methods ( Detailed Overview )

Here is a list of every test performed by Web Scan Service.

Logins Sent Over Query

Remediation Task

Filter out hazardous characters from user input

WASC Classification

Information Disclosure: Information Leakage

Affected Products

This issue may affect different types of products

Technical Description

The database query string is exposed to the user. The query string can be seen by looking at the URL the user has been linked to.

Fix Recommendation

Generally we would recommend to verify the user input which is made. In this special case we even recommend to send the data via POST and not via GET. Although this does not resolve the issue it is better security practice.