The product does not handle or incorrectly handles when a value is not defined or supported for the associated parameter, field, or argument name.
N/A
Threat Mapped score: 0.0
Industry: Finiancial
Threat priority: Unclassified
CVE: CVE-2000-1003
Client crash when server returns unknown driver type.
N/A
N/A
| Phase | Note |
|---|---|
| Implementation | N/A |
Intro: In this example, an address parameter is read and trimmed of whitespace.
Body: If the value of the address parameter is null (undefined), the servlet will throw a NullPointerException when the trim() is attempted.
String address = request.getParameter("address"); address = address.trim(); String updateString = "UPDATE shippingInfo SET address='?' WHERE email='[email protected]'"; emailAddress = con.prepareStatement(updateString); emailAddress.setString(1, address);