diff --git a/dependency-check-core/src/main/resources/data/dbStatements.properties b/dependency-check-core/src/main/resources/data/dbStatements.properties new file mode 100644 index 000000000..f09595f8f --- /dev/null +++ b/dependency-check-core/src/main/resources/data/dbStatements.properties @@ -0,0 +1,36 @@ +# Copyright 2015 OWASP. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. + +DELETE_REFERENCE=DELETE FROM reference WHERE cveid = ? +DELETE_SOFTWARE=DELETE FROM software WHERE cveid = ? +DELETE_VULNERABILITY=DELETE FROM vulnerability WHERE id = ? +CLEANUP_ORPHANS=DELETE FROM CpeEntry WHERE id not in (SELECT CPEEntryId FROM Software); +INSERT_REFERENCE=INSERT INTO reference (cveid, name, url, source) VALUES (?, ?, ?, ?) +INSERT_SOFTWARE=INSERT INTO software (cveid, cpeEntryId, previousVersion) VALUES (?, ?, ?) +INSERT_CPE=INSERT INTO cpeEntry (cpe, vendor, product) VALUES (?, ?, ?) +SELECT_CPE_ID=SELECT id FROM cpeEntry WHERE cpe = ? +INSERT_VULNERABILITY=INSERT INTO vulnerability (cve, description, cwe, cvssScore, cvssAccessVector, cvssAccessComplexity, cvssAuthentication, cvssConfidentialityImpact, cvssIntegrityImpact, cvssAvailabilityImpact) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?) +UPDATE_VULNERABILITY=UPDATE vulnerability SET description=?, cwe=?, cvssScore=?, cvssAccessVector=?, cvssAccessComplexity=?, cvssAuthentication=?, cvssConfidentialityImpact=?, cvssIntegrityImpact=?, cvssAvailabilityImpact=? WHERE id=? +SELECT_CVE_FROM_SOFTWARE=SELECT cve, cpe, previousVersion FROM software INNER JOIN vulnerability ON vulnerability.id = software.cveId INNER JOIN cpeEntry ON cpeEntry.id = software.cpeEntryId WHERE vendor = ? AND product = ? ORDER BY cve, cpe +SELECT_CPE_ENTRIES=SELECT cpe FROM cpeEntry WHERE vendor = ? AND product = ? +SELECT_REFERENCES=SELECT source, name, url FROM reference WHERE cveid = ? +SELECT_VENDOR_PRODUCT_LIST=SELECT vendor, product FROM cpeEntry GROUP BY vendor, product +SELECT_SOFTWARE=SELECT cpe, previousVersion FROM software INNER JOIN cpeEntry ON software.cpeEntryId = cpeEntry.id WHERE cveid = ? +SELECT_VULNERABILITY=SELECT id, description, cwe, cvssScore, cvssAccessVector, cvssAccessComplexity, cvssAuthentication, cvssConfidentialityImpact, cvssIntegrityImpact, cvssAvailabilityImpact FROM vulnerability WHERE cve = ? +SELECT_VULNERABILITY_ID=SELECT id FROM vulnerability WHERE cve = ? +SELECT_PROPERTIES=SELECT id, value FROM properties +SELECT_PROPERTY=SELECT id, value FROM properties WHERE id = ? +INSERT_PROPERTY=INSERT INTO properties (id, value) VALUES (?, ?) +UPDATE_PROPERTY=UPDATE properties SET value = ? WHERE id = ? +DELETE_PROPERTY=DELETE FROM properties WHERE id = ?