CSRF @ /CategoriesRecord.cs

[apcxtest]

Checkmarx (SAST): CSRF
Security Issue: Read More about CSRF
Applications: test_App
Checkmarx Project: apcxtest/test-repo-pub2
Repository URL: https://github.com/apcxtest/test-repo-pub2
Branch: main
Scan ID: 5072abd4-8e3e-49e3-b1b5-44426e72387c

---

Method Categories_update_Click at line 271 of /CategoriesRecord.cs gets a parameter from a user request from Value. This parameter value flows through the code and is eventually used to access application state altering functionality. This may enable Cross-Site Request Forgery (CSRF).

Result #1:
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
Attack Vector:

    1. Value: /CategoriesRecord.cs[271,90]
    2. ToSQL: /CategoriesRecord.cs[271,59]
    3. sWhere: /CategoriesRecord.cs[271,14]
    4. sWhere: /CategoriesRecord.cs[283,36]
    5. sSQL: /CategoriesRecord.cs[283,10]
    6. sSQL: /CategoriesRecord.cs[288,39]
    7. OleDbCommand: /CategoriesRecord.cs[288,22]
    8. cmd: /CategoriesRecord.cs[288,16]
    9. cmd: /CategoriesRecord.cs[290,5]
    10. ExecuteNonQuery: /CategoriesRecord.cs[290,9]
    Review result in Checkmarx One: CSRF

Result #2:
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
Attack Vector:

    1. Value: /CategoriesRecord.cs[310,71]
    2. ToSQL: /CategoriesRecord.cs[310,40]
    3. sWhere: /CategoriesRecord.cs[310,3]
    4. sWhere: /CategoriesRecord.cs[313,50]
    5. sSQL: /CategoriesRecord.cs[313,9]
    6. sSQL: /CategoriesRecord.cs[318,38]
    7. OleDbCommand: /CategoriesRecord.cs[318,21]
    8. cmd: /CategoriesRecord.cs[318,15]
    9. cmd: /CategoriesRecord.cs[320,3]
    10. ExecuteNonQuery: /CategoriesRecord.cs[320,7]
    Review result in Checkmarx One: CSRF