Index/sql-injection
sql-injection facts.
91 model facts classified under this behavior kind. Follow a row to inspect its complete access path and provenance.
SymbolLanguageRoleAccess path
PQescapeLiteralc / stdlibsanitizerReturnValuePQescapeStringConnc / stdlibsanitizerArgument[1]PQexecc / stdlibsinkArgument[1]PQexecParamsc / stdlibsinkArgument[1]PQpreparec / stdlibsinkArgument[2]mysql_queryc / stdlibsinkArgument[1]mysql_real_escape_stringc / stdlibsanitizerArgument[1]mysql_real_queryc / stdlibsinkArgument[1]sqlite3_execc / stdlibsinkArgument[1]sqlite3_get_tablec / stdlibsinkArgument[1]sqlite3_preparec / stdlibsinkArgument[1]sqlite3_prepare_v2c / stdlibsinkArgument[1]execjavascript / stdlibsinkArgument[0]preparejavascript / stdlibsinkArgument[0]queryjavascript / stdlibsinkArgument[0]queryjavascript / stdlibsinkArgument[0]rawjavascript / knexsinkArgument[0]escapejavascript / mysqlsanitizerArgument[0] -> ReturnValueexecutejavascript / stdlibsinkArgument[0]queryjavascript / stdlibsinkArgument[0]queryjavascript / stdlibsinkArgument[0]queryjavascript / stdlibsinkArgument[0]queryjavascript / sequelizesinkArgument[0]alljavascript / stdlibsinkArgument[0]getjavascript / stdlibsinkArgument[0]runjavascript / stdlibsinkArgument[0]escapejavascript / sqlstringsanitizerArgument[0] -> ReturnValue$executeRawUnsafejavascript / stdlibsinkArgument[0]$queryRawUnsafejavascript / stdlibsinkArgument[0]executepython / stdlibsinkArgument[0]fetchpython / stdlibsinkArgument[0]floatpython / builtinssanitizerArgument[0] -> ReturnValueintpython / builtinssanitizerArgument[0] -> ReturnValueexecutepython / stdlibsinkArgument[0]executemanypython / stdlibsinkArgument[0]executescriptpython / stdlibsinkArgument[0]executepython / django.db.backends.mysql.base.CursorWrappersinkArgument[0]executemanypython / django.db.backends.mysql.base.CursorWrappersinkArgument[0]executepython / django.db.backends.utils.CursorWrappersinkArgument[0]executemanypython / django.db.backends.utils.CursorWrappersinkArgument[0]RawSQLpython / django.db.models.expressionssinkArgument[0]rawpython / django.db.models.manager.ManagersinkArgument[0]extrapython / django.db.models.query.QuerySetsinkArgument[0]extrapython / django.db.models.query.QuerySetsinkArgument[1]extrapython / django.db.models.query.QuerySetsinkArgument[3]executepython / stdlibsinkArgument[0]read_sqlpython / pandassinkArgument[0]read_sql_querypython / pandassinkArgument[0]execute_sqlpython / stdlibsinkArgument[0]RawQuerypython / peeweesinkArgument[0]Identifierpython / psycopg2.sqlsanitizerArgument[0] -> ReturnValueLiteralpython / psycopg2.sqlsanitizerArgument[0] -> ReturnValueextrapython / stdlibsinkArgument[0]rawpython / stdlibsinkArgument[0]exec_driver_sqlpython / stdlibsinkArgument[0]executepython / stdlibsinkArgument[0]textpython / sqlalchemysinkArgument[0]executepython / sqlite3.ConnectionsinkArgument[0]executemanypython / sqlite3.ConnectionsinkArgument[0]executescriptpython / sqlite3.ConnectionsinkArgument[0]executepython / sqlite3.CursorsinkArgument[0]executemanypython / sqlite3.CursorsinkArgument[0]executescriptpython / sqlite3.CursorsinkArgument[0]exectypescript / stdlibsinkArgument[0]preparetypescript / stdlibsinkArgument[0]querytypescript / stdlibsinkArgument[0]rawtypescript / drizzle-ormsinkArgument[0]querytypescript / stdlibsinkArgument[0]fromRawtypescript / knexsinkArgument[0]havingRawtypescript / knexsinkArgument[0]orderByRawtypescript / knexsinkArgument[0]rawtypescript / knexsinkArgument[0]whereRawtypescript / knexsinkArgument[0]escapetypescript / mysqlsanitizerArgument[0] -> ReturnValueexecutetypescript / stdlibsinkArgument[0]querytypescript / stdlibsinkArgument[0]querytypescript / stdlibsinkArgument[0]querytypescript / stdlibsinkArgument[0]andWheretypescript / stdlibsinkArgument[0]havingtypescript / stdlibsinkArgument[0]orderBytypescript / stdlibsinkArgument[0]orWheretypescript / stdlibsinkArgument[0]wheretypescript / stdlibsinkArgument[0]literaltypescript / sequelizesinkArgument[0]querytypescript / sequelizesinkArgument[0]alltypescript / stdlibsinkArgument[0]gettypescript / stdlibsinkArgument[0]runtypescript / stdlibsinkArgument[0]escapetypescript / sqlstringsanitizerArgument[0] -> ReturnValue$executeRawUnsafetypescript / stdlibsinkArgument[0]$queryRawUnsafetypescript / stdlibsinkArgument[0]