CSRF @ /EditorialCatRecord.cs

[apcxtest]

Checkmarx (SAST): CSRF
Security Issue: Read More about CSRF
Applications: test_App
Checkmarx Project: apcxtest/test-repo-pub2
Repository URL: https://github.com/apcxtest/test-repo-pub2
Branch: main
Scan ID: 5072abd4-8e3e-49e3-b1b5-44426e72387c

---

Method editorial_categories_delete_Click at line 310 of /EditorialCatRecord.cs gets a parameter from a user request from Value. This parameter value flows through the code and is eventually used to access application state altering functionality. This may enable Cross-Site Request Forgery (CSRF).

Result #1:
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
Attack Vector:

    1. Value: /EditorialCatRecord.cs[310,91]
    2. ToSQL: /EditorialCatRecord.cs[310,45]
    3. sWhere: /EditorialCatRecord.cs[310,3]
    4. sWhere: /EditorialCatRecord.cs[313,60]
    5. sSQL: /EditorialCatRecord.cs[313,9]
    6. sSQL: /EditorialCatRecord.cs[318,38]
    7. OleDbCommand: /EditorialCatRecord.cs[318,21]
    8. cmd: /EditorialCatRecord.cs[318,15]
    9. cmd: /EditorialCatRecord.cs[320,3]
    10. ExecuteNonQuery: /EditorialCatRecord.cs[320,7]
    Review result in Checkmarx One: CSRF

Result #2:
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
Attack Vector:

    1. Value: /EditorialCatRecord.cs[271,110]
    2. ToSQL: /EditorialCatRecord.cs[271,64]
    3. sWhere: /EditorialCatRecord.cs[271,14]
    4. sWhere: /EditorialCatRecord.cs[283,36]
    5. sSQL: /EditorialCatRecord.cs[283,10]
    6. sSQL: /EditorialCatRecord.cs[288,39]
    7. OleDbCommand: /EditorialCatRecord.cs[288,22]
    8. cmd: /EditorialCatRecord.cs[288,16]
    9. cmd: /EditorialCatRecord.cs[290,5]
    10. ExecuteNonQuery: /EditorialCatRecord.cs[290,9]
    Review result in Checkmarx One: CSRF