Files
codeql/go/ql/test/query-tests/Security/CWE-078/StoredCommand.go
2022-05-20 10:07:19 -07:00

17 lines
206 B
Go

package main
import (
"database/sql"
"os/exec"
)
var db *sql.DB
func run(query string) {
rows, _ := db.Query(query)
var cmdName string
rows.Scan(&cmdName)
cmd := exec.Command(cmdName)
cmd.Run()
}