Apcxtest patch 2

[apcxtest]

No description provided.

[apcxtest]

Checkmarx One – Scan Summary & Details – 346a8a12-eca5-4554-b71c-d7bc68d27d06

Policy Management Violations

Policy Name	Rule(s)	Break Build
aptest policy	testrepopub rule	false

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	Missing_HSTS_Header	/CCPager.ascx: 1	Attack Vector
	Unpinned Actions Full Length Commit SHA	/cxaction.yml: 24	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Blind_SQL_Injections	/submodtest/src/Login.java: 23	Attack Vector
	Blind_SQL_Injections	/submodtest/src/Login.java: 22	Attack Vector
	Improper_Resource_Shutdown_or_Release	/submodtest/src/Login.java: 27	Attack Vector
	Potential_Clickjacking_on_Legacy_Browsers	/CCPager.ascx: 1	Attack Vector

Fixed Issues

Severity	Issue	Source File / Package
	ALB Listening on HTTP	/positive2.tf: 70
	ALB Listening on HTTP	/positive1.tf: 9
	EC2 Instance Has Public IP	/negative2.tf: 83
	EC2 Instance Has Public IP	/positive2.tf: 95
	EC2 Instance Has Public IP	/positive2.tf: 108
	EC2 Instance Has Public IP	/negative2.tf: 109
	EC2 Instance Has Public IP	/positive2.tf: 82
	EC2 Instance Has Public IP	/negative2.tf: 96
	HttpOnlyCookies_XSS	/Web.config: 17
	HttpOnlyCookies_XSS	/Web.config: 17
	Missing User Instruction	/Dockerfile: 1
	SQL_Injection	/OrdersGrid.cs: 229
	SQL_Injection	/OrdersGrid.cs: 229
	SQL_Injection	/MembersGrid.cs: 219
	SQL_Injection	/MembersGrid.cs: 219
	SQL_Injection	/EditorialsGrid.cs: 171
	SQL_Injection	/EditorialsGrid.cs: 171
	SQL_Injection	/EditorialCatGrid.cs: 171
	SQL_Injection	/EditorialCatGrid.cs: 171
	SQL_Injection	/CategoriesGrid.cs: 171
	SQL_Injection	/CategoriesGrid.cs: 171
	SQL_Injection	/BookDetail.cs: 468
	SQL_Injection	/MembersRecord.cs: 392
	SQL_Injection	/OrdersRecord.cs: 346
	SQL_Injection	/EditorialsRecord.cs: 341
	SQL_Injection	/MembersRecord.cs: 337
	SQL_Injection	/Registration.cs: 327
	SQL_Injection	/BookDetail.cs: 314
	SQL_Injection	/MembersInfo.cs: 311
	SQL_Injection	/MembersInfo.cs: 311
	SQL_Injection	/EditorialCatRecord.cs: 310
	SQL_Injection	/CardTypesRecord.cs: 310
	SQL_Injection	/CategoriesRecord.cs: 310
	SQL_Injection	/OrdersRecord.cs: 305
	SQL_Injection	/EditorialsRecord.cs: 299
	SQL_Injection	/ShoppingCartRecord.cs: 285
	SQL_Injection	/EditorialCatRecord.cs: 271
	SQL_Injection	/CardTypesRecord.cs: 271
	SQL_Injection	/CategoriesRecord.cs: 271
	SQL_Injection	/MyInfo.cs: 262
	SQL_Injection	/ShoppingCartRecord.cs: 245
	SQL_Injection	/OrdersGrid.cs: 229
	SQL_Injection	/OrdersGrid.cs: 229
	SQL_Injection	/MembersGrid.cs: 219
	SQL_Injection	/MembersGrid.cs: 219
	SQL_Injection	/BookDetail.cs: 179
	SQL_Injection	/MembersInfo.cs: 173
	SQL_Injection	/EditorialsGrid.cs: 171
	SQL_Injection	/EditorialsGrid.cs: 171
	SQL_Injection	/EditorialCatGrid.cs: 171
	SQL_Injection	/EditorialCatGrid.cs: 171
	SQL_Injection	/CategoriesGrid.cs: 171
	SQL_Injection	/CategoriesGrid.cs: 171
	SQL_Injection	/CardTypesGrid.cs: 169
	SQL_Injection	/CardTypesGrid.cs: 169
	SQL_Injection	/MembersRecord.cs: 168
	SQL_Injection	/EditorialsRecord.cs: 167
	SQL_Injection	/OrdersRecord.cs: 167
	SQL_Injection	/EditorialCatRecord.cs: 165
	SQL_Injection	/CardTypesRecord.cs: 165
	SQL_Injection	/CategoriesRecord.cs: 165
	SQL_Injection	/ShoppingCartRecord.cs: 164
	SQL_Injection	/BookDetail.cs: 579
	SQL_Injection	/BookDetail.cs: 579
	SQL_Injection	/BookDetail.cs: 468
	SQL_Injection	/BookDetail.cs: 314
	SQL_Injection	/MembersInfo.cs: 311
	SQL_Injection	/MembersInfo.cs: 311
	SQL_Injection	/OrdersGrid.cs: 229
	SQL_Injection	/OrdersGrid.cs: 229
	SQL_Injection	/MembersGrid.cs: 219
	SQL_Injection	/MembersGrid.cs: 219
	SQL_Injection	/BookDetail.cs: 179
	SQL_Injection	/MembersInfo.cs: 173
	SQL_Injection	/EditorialsGrid.cs: 171
	SQL_Injection	/EditorialsGrid.cs: 171
	SQL_Injection	/EditorialCatGrid.cs: 171
	SQL_Injection	/EditorialCatGrid.cs: 171
	SQL_Injection	/CategoriesGrid.cs: 171
	SQL_Injection	/CategoriesGrid.cs: 171
	SQL_Injection	/CardTypesGrid.cs: 169
	SQL_Injection	/CardTypesGrid.cs: 169
	SQL_Injection	/MembersRecord.cs: 168
	SQL_Injection	/EditorialsRecord.cs: 167
	SQL_Injection	/OrdersRecord.cs: 167
	SQL_Injection	/EditorialCatRecord.cs: 165
	SQL_Injection	/CardTypesRecord.cs: 165
	SQL_Injection	/CategoriesRecord.cs: 165
	SQL_Injection	/ShoppingCartRecord.cs: 164
	SQL_Injection	/OrdersGrid.cs: 229
	SQL_Injection	/OrdersGrid.cs: 229
	SQL_Injection	/MembersGrid.cs: 219
	SQL_Injection	/MembersGrid.cs: 219
	SQL_Injection	/EditorialsGrid.cs: 171
	SQL_Injection	/EditorialsGrid.cs: 171
	SQL_Injection	/EditorialCatGrid.cs: 171
	SQL_Injection	/EditorialCatGrid.cs: 171
	SQL_Injection	/CategoriesGrid.cs: 171
	SQL_Injection	/CategoriesGrid.cs: 171
	SQL_Injection	/CardTypesGrid.cs: 169
	SQL_Injection	/CardTypesGrid.cs: 169
	SQL_Injection	/BookDetail.cs: 468
	SQL_Injection	/BookDetail.cs: 314
	SQL_Injection	/MembersInfo.cs: 311
	SQL_Injection	/MembersInfo.cs: 311
	SQL_Injection	/OrdersGrid.cs: 229
	SQL_Injection	/OrdersGrid.cs: 229
	SQL_Injection	/MembersGrid.cs: 219
	SQL_Injection	/MembersGrid.cs: 219
	SQL_Injection	/BookDetail.cs: 179
	SQL_Injection	/MembersInfo.cs: 173
	SQL_Injection	/EditorialsGrid.cs: 171
	SQL_Injection	/EditorialsGrid.cs: 171
	SQL_Injection	/EditorialCatGrid.cs: 171
	SQL_Injection	/EditorialCatGrid.cs: 171
	SQL_Injection	/CategoriesGrid.cs: 171
	SQL_Injection	/CategoriesGrid.cs: 171
	SQL_Injection	/CardTypesGrid.cs: 169
	SQL_Injection	/CardTypesGrid.cs: 169
	SQL_Injection	/MembersRecord.cs: 168
	SQL_Injection	/EditorialsRecord.cs: 167
	SQL_Injection	/OrdersRecord.cs: 167
	SQL_Injection	/EditorialCatRecord.cs: 165
	SQL_Injection	/CardTypesRecord.cs: 165
	SQL_Injection	/CategoriesRecord.cs: 165
	SQL_Injection	/ShoppingCartRecord.cs: 164
	SQL_Injection	/BookDetail.cs: 468
	SQL_Injection	/BookDetail.cs: 314
	SQL_Injection	/MembersInfo.cs: 311
	SQL_Injection	/MembersInfo.cs: 311
	SQL_Injection	/test1folder/AdminBooks.cs: 232
	SQL_Injection	/test1folder/AdminBooks.cs: 232
	SQL_Injection	/OrdersGrid.cs: 229
	SQL_Injection	/OrdersGrid.cs: 229
	SQL_Injection	/MembersGrid.cs: 219
	SQL_Injection	/MembersGrid.cs: 219
	SQL_Injection	/BookDetail.cs: 179
	SQL_Injection	/MembersInfo.cs: 173
	SQL_Injection	/EditorialsGrid.cs: 171
	SQL_Injection	/EditorialsGrid.cs: 171
	SQL_Injection	/EditorialCatGrid.cs: 171
	SQL_Injection	/EditorialCatGrid.cs: 171
	SQL_Injection	/CategoriesGrid.cs: 171
	SQL_Injection	/CategoriesGrid.cs: 171
	SQL_Injection	/CardTypesGrid.cs: 169
	SQL_Injection	/CardTypesGrid.cs: 169
	SQL_Injection	/MembersRecord.cs: 168
	SQL_Injection	/EditorialsRecord.cs: 167
	SQL_Injection	/OrdersRecord.cs: 167
	SQL_Injection	/test3folder/BookMaint.cs: 166
	SQL_Injection	/EditorialCatRecord.cs: 165
	SQL_Injection	/CardTypesRecord.cs: 165
	SQL_Injection	/CategoriesRecord.cs: 165
	SQL_Injection	/ShoppingCartRecord.cs: 164
	SQL_Injection	/EditorialsRecord.cs: 299
	SQL_Injection	/MembersRecord.cs: 392
	SQL_Injection	/OrdersRecord.cs: 305
	SQL_Injection	/ShoppingCartRecord.cs: 245
	SQL_Injection	/CardTypesRecord.cs: 271
	SQL_Injection	/Registration.cs: 327
	SQL_Injection	/OrdersRecord.cs: 346
	SQL_Injection	/MembersRecord.cs: 337
	SQL_Injection	/CardTypesRecord.cs: 310
	SQL_Injection	/MyInfo.cs: 262
	SQL_Injection	/CategoriesRecord.cs: 310
	SQL_Injection	/EditorialCatRecord.cs: 271
	SQL_Injection	/EditorialsRecord.cs: 341
	SQL_Injection	/ShoppingCartRecord.cs: 285
	SQL_Injection	/EditorialCatRecord.cs: 310
	SQL_Injection	/CategoriesRecord.cs: 271
	SQL_Injection	/OrdersRecord.cs: 305
	SQL_Injection	/EditorialsGrid.cs: 171
	SQL_Injection	/EditorialsGrid.cs: 171
	SQL_Injection	/ShoppingCartRecord.cs: 245
	SQL_Injection	/EditorialsRecord.cs: 299
	SQL_Injection	/EditorialCatRecord.cs: 271
	SQL_Injection

More results are available on AST platform