tracker issue : CF-4126656

select a category, or use search below
(searches all categories and all time range)
Title:

SQLi allowed inside any cfif

| View in Tracker

Status/Resolution/Reason: Closed/Withdrawn/Duplicate

Reporter/Name(from Bugbase): Peter Freitag / Peter Freitag (Peter Freitag)

Created: 03/09/2016

Components: Security Analyzer

Versions: 2016

Failure Type: Unspecified

Found In Build/Fixed In Build: Alpha_v31 /

Priority/Frequency: Trivial / Unknown

Locale/System: English / Mac All

Vote Count: 0

Duplicate ID:	CF-4026201

Problem Description: If you wrap a variable with a <cfif> it will not flag SQLi

Steps to Reproduce: 

<cfquery>
    SELECT * FROM table
    <cfif Len(url.sort)>    
       ORDER BY #url.sort#
    </cfif>
</cfquery> 

Actual Result: Nothing flagged

Expected Result: SQLi Flag

Any Workarounds: nope

----------------------------- Additional Watson Details -----------------------------

Watson Bug ID:	4126656

External Customer Info:
External Company: Foundeo Inc.
External Customer Name: Peter Freitag
External Customer Email: PETE@FOUNDEO.COM
External Test Config:  


Bug File Paths:
\\sjshare.corp.adobe.com\Prereleasebugfiles\ColdFusion Builder\3.1\Alpha_v31\4026626\cfquery-cfif.cfm

Attachments:

Comments:

Adding BUG AUDIT TRAIL ********action: updated fieldName: Reason newValue: Duplicate oldValue: Blank oprid: preethi recordName: RQ_DEFECT timpestamp: 2015-07-30 06:13:08.0 action: updated fieldName: Closed By newValue: preethi oldValue: Blank oprid: preethi recordName: RQ_DEFECT timpestamp: 2015-07-30 06:13:08.0 action: updated fieldName: Owner newValue: Blank oldValue: preethi oprid: preethi recordName: RQ_DEFECT timpestamp: 2015-07-30 06:13:08.0 action: updated fieldName: Status newValue: Withdrawn oldValue: Unverified oprid: preethi recordName: RQ_DEFECT timpestamp: 2015-07-30 06:13:08.0 action: updated fieldName: Duplicate Bug ID newValue: CF-4026201 oldValue: Blank oprid: preethi recordName: RQ_DEFECT timpestamp: 2015-07-30 06:13:08.0 action: updated fieldName: State newValue: Closed oldValue: Open oprid: preethi recordName: RQ_DEFECT timpestamp: 2015-07-30 06:13:08.0 action: updated fieldName: Date Closed newValue: 2015-07-29 23:13:08.0 oldValue: Blank oprid: preethi recordName: RQ_DEFECT timpestamp: 2015-07-30 06:13:08.0 action: updated fieldName: Fix By Product Milestone newValue: Blank oldValue: Blank oprid: prk recordName: RQ_DEFECT timpestamp: 2015-07-28 05:38:21.0 action: updated fieldName: Version newValue: 12.0 oldValue: 3.1 oprid: prk recordName: RQ_DEFECT timpestamp: 2015-07-28 05:38:21.0 action: updated fieldName: Product newValue: ColdFusion oldValue: ColdFusion Builder oprid: prk recordName: RQ_DEFECT timpestamp: 2015-07-28 05:38:21.0 action: updated fieldName: Owner newValue: preethi oldValue: prk oprid: prk recordName: RQ_DEFECT timpestamp: 2015-07-28 05:34:29.0 action: updated fieldName: QE Assigned newValue: preethi oldValue: prk oprid: prk recordName: RQ_DEFECT timpestamp: 2015-07-28 05:34:29.0 action: updated fieldName: Dev Assigned newValue: uogra oldValue: bukkittu oprid: prk recordName: RQ_DEFECT timpestamp: 2015-07-28 05:34:29.0
Comment by CFwatson U.
3583 | March 09, 2016 04:28:06 AM GMT
Added By:preethi Note Added: Hi Peter, The above scenario has already been logged as a bug. Hence closing the bug. Thanks! Date Added :2015-07-30 06:13:10.0 Added By: PreRelease User User Name:Peter Freitag Note Added: Entered Bug. Date Added :2015-07-27 20:24:48.0
Comment by CFwatson U.
3584 | March 09, 2016 04:28:07 AM GMT
Duplicate ID CF-4026201 isn't viewable/trackable. It should be. Thanks!, -Aaron
Comment by External U.
3585 | May 11, 2016 02:14:52 AM GMT