ankitsam / jsp-myadmin Goto Github PK

What steps will reproduce the problem?
1. Installation Instructions

What is the expected output? What do you see instead?
Error :
The exception was: java.lang.ClassNotFoundException: com.mysql.jdbc.Driver
The exception class was : class java.lang.ClassNotFoundException

What version of the product are you using? On what operating system?
Ubuntu Server 12.04 LTS Version 1.1

Please provide any additional information below.

User, Pass, Host and Port are hardcoded in login.jsp and not taken from the 
parameters filled in Main.jsp.

It's here that we get the login parameters from Index

the processing of form input is not here, but in Main.jsp

added a cast to (String), to prevent warning

missing whitespace before import attribute

Advisory here: http://seclists.org/bugtraq/2015/May/154

Please contact me in case you need any help with fixing these security issues. 
Please create new release after you have fixed these issues. Could you tell me 
if these are valid, thanks?

Fixe: replace all 

con.prepareStatement("USE "+db);

by

con.prepareStatement("USE `"+db+"`");