The code creates an SQL prepared statement from a nonconstant String. If unchecked, tainted data from a user is used in building this String, SQL injection could be used to make the prepared statement do something unexpected and undesirable.
| 1 | org.jcoderz.phoenix.dbview.DbView |
| [308] | |