[hibernate-issues] [Hibernate-JIRA] (HHH-6672) Inserting UNION a HQL and JP-QL query string truncates the query. This makes exploiting HQL Injections easier. Security issue.

David Jorm (JIRA) noreply at atlassian.com
Wed Jan 30 22:52:53 EST 2013

Previous message: [hibernate-issues] [Hibernate-JIRA] (HHH-7821) 2 different NPEs after upgrade from 4.1.6 to 4.1.8
Next message: [hibernate-issues] [Hibernate-JIRA] (HHH-3811) Bug: No ability to escape SQL keywords in HQL queries.
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/hibernate-issues/attachments/20130130/29f57824/attachment.html

Previous message: [hibernate-issues] [Hibernate-JIRA] (HHH-7821) 2 different NPEs after upgrade from 4.1.6 to 4.1.8
Next message: [hibernate-issues] [Hibernate-JIRA] (HHH-3811) Bug: No ability to escape SQL keywords in HQL queries.
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

More information about the hibernate-issues mailing list