Appscan Source Cannot Find Any Vulnerabilities in ASP .NET code

Hi,

I have a ASP .NET project with 3 million lines code. When I scan it, Appscan says there is no vulnerability. I can compile and run the code with visual studio 2015. So the code seems healthy. I added code to Appscan with “discover application”.

Appscan source version: 9.0.3.5.70
OS: Windows Server 2012 R2

When I checked the console, there are just some warning messages.

03/29/17 11:42:12 – New scan started
03/29/17 11:42:12 – Scanning with Scan Configuration: Normal scan
03/29/17 11:42:15 – Scanning with cross-project analysis disabled
03/29/17 11:42:15
03/29/17 11:42:15 – Scanning Project Web ( 1 of 1 )
03/29/17 11:42:50 – Preparing project for scan…
03/29/17 11:44:13
03/29/17 11:44:13 – (0): warning : The following assembly has dependencies on a version of the .NET Framework that is higher than the target and might not load correctly during runtime causing a failure: AsdAsd, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null. The dependencies are: System.Net.Http, Version=4.0.0.0, Culture=neutral, PublicKeyToken=asdasdasdasdasd. You should either ensure that the dependent assembly is correct for the target framework, or ensure that the target framework you are addressing is that of the dependent assembly.
(0): warning : The following assembly has dependencies on a version of the .NET Framework that is higher than the target and might not load correctly during runtime causing a failure: System.Net.Http.Formatting, Version=4.0.0.0, Culture=neutral, PublicKeyToken=asdasdasdasdasd. The dependencies are: System.Net.Http, Version=2.0.0.0, Culture=neutral, PublicKeyToken=asdasdasdasdasd. You should either ensure that the dependent assembly is correct for the target framework, or ensure that the target framework you are addressing is that of the dependent assembly.
(0): warning : The following assembly has dependencies on a version of the .NET Framework that is higher than the target and might not load correctly during runtime causing a failure: System.Net.Http.Extensions, Version=2.2.29.0, Culture=neutral, PublicKeyToken=asdasdasdasdasd. The dependencies are: System.Net.Http, Version=1.5.0.0, Culture=neutral, PublicKeyToken=asdasdasdasdasd. You should either ensure that the dependent assembly is correct for the target framework, or ensure that the target framework you are addressing is that of the dependent assembly.
(0): warning : The following assembly has dependencies on a version of the .NET Framework that is higher than the target and might not load correctly during runtime causing a failure: Efsdf, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null. The dependencies are: System.Net.Http, Version=4.0.0.0, Culture=neutral, PublicKeyToken=asdasdasdasdasd. You should either ensure that the dependent assembly is correct for the target framework, or ensure that the target framework you are addressing is that of the dependent assembly.
c:WebApp_CodeInterfaceClass1.cs(194): warning CS0429: Unreachable expression code detected
c:WebApp_CodeInterfaceClass1.cs(195): warning CS0429: Unreachable expression code detected
c:WebApp_CodeInterfaceClass1.cs(196): warning CS0429: Unreachable expression code detected
c:WebApp_CodeInterfaceClass1.cs(197): warning CS0429: Unreachable expression code detected
c:WebApp_CodeInterfaceClass1.cs(198): warning CS0429: Unreachable expression code detected
c:WebApp_CodeInterfaceClass1.cs(199): warning CS0429: Unreachable expression code detected
c:WebApp_CodeInterfaceClass1.cs(2154): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeInterfaceClass1.cs(2166): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeInterfaceClass2.cs(315): warning CS0472: The result of the expression is always ‘false’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeInterfaceClass3.cs(326): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeInterfaceClass4.cs(28): warning CS0472: The result of the expression is always ‘false’ since a value of type ‘bool’ is never equal to ‘null’ of type ‘bool?’
c:WebApp_CodeInterfaceClass5.cs(364): warning CS0618: ‘System.Xml.XmlConvert.ToDateTime(string)’ is obsolete: ‘Use XmlConvert.ToDateTime() that takes in XmlDateTimeSerializationMode’
c:WebApp_CodeInterfaceClass5.cs(380): warning CS0618: ‘System.Xml.XmlConvert.ToDateTime(string)’ is obsolete: ‘Use XmlConvert.ToDateTime() that takes in XmlDateTimeSerializationMode’
c:WebApp_CodeInterfaceClass5.cs(473): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeInterfaceClass6.cs(109): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeClass7.cs(2347): warning CS0618: ‘ImageResizer.ImageBuilder.Build(object, object, ImageResizer.ResizeSettings, bool, bool)’ is obsolete: ‘Use .Build(new ImageJob(source, dest, settings, disposeSource, addFileExtension)).FinalPath instead’
c:WebApp_CodeClass7.cs(2632): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeServicesClass8.cs(33): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeServicesClass8.cs(164): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeInterfaceClass9.cs(192): warning CS0472: The result of the expression is always ‘false’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeInterfaceClass9.cs(441): warning CS0472: The result of the expression is always ‘false’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeInterfaceClass10.cs(200): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeInterfaceClass10.cs(624): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeInterfaceClass10.cs(1683): warning CS0219: The variable ‘Doviz’ is assigned but its value is never used
c:WebApp_CodeInterfaceClass10.cs(1934): warning CS0472: The result of the expression is always ‘false’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeInterfaceClass10.cs(3462): warning CS0162: Unreachable code detected
c:WebApp_CodeInterfaceClass10.cs(3773): warning CS0472: The result of the expression is always ‘false’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeInterfaceClass10.cs(4532): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeInterfaceClass11.cs(46): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeInterfaceClass11.cs(91): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeServicesClass12.cs(54): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeServicesClass12.cs(122): warning CS0472: The result of the expression is always ‘false’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeInterfaceClass13.cs(21): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeIntegrationClass14.cs(209): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘bool’ is never equal to ‘null’ of type ‘bool?’
c:WebApp_CodeIntegrationClass14.cs(214): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeIntegrationClass14.cs(234): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘double’ is never equal to ‘null’ of type ‘double?’
c:WebApp_CodeIntegrationClass14.cs(239): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘double’ is never equal to ‘null’ of type ‘double?’
c:WebApp_CodeIntegrationClass14.cs(244): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘double’ is never equal to ‘null’ of type ‘double?’
c:WebApp_CodeIntegrationClass14.cs(249): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘double’ is never equal to ‘null’ of type ‘double?’
c:WebApp_CodeIntegrationClass14.cs(254): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘double’ is never equal to ‘null’ of type ‘double?’
c:WebApp_CodeIntegrationClass14.cs(279): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘double’ is never equal to ‘null’ of type ‘double?’
c:WebApp_CodeIntegrationClass14.cs(294): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘double’ is never equal to ‘null’ of type ‘double?’
c:WebApp_CodeIntegrationClass14.cs(331): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘double’ is never equal to ‘null’ of type ‘double?’
c:WebApp_CodeIntegrationClass14.cs(391): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘double’ is never equal to ‘null’ of type ‘double?’
c:WebApp_CodeIntegrationClass14.cs(396): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeIntegrationClass14.cs(401): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘double’ is never equal to ‘null’ of type ‘double?’
c:WebApp_CodeIntegrationClass14.cs(416): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘double’ is never equal to ‘null’ of type ‘double?’
c:WebApp_CodeIntegrationClass14.cs(421): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘double’ is never equal to ‘null’ of type ‘double?’
c:WebApp_CodeIntegrationClass14.cs(426): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘double’ is never equal to ‘null’ of type ‘double?’
c:WebApp_CodeIntegrationClass14.cs(431): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘double’ is never equal to ‘null’ of type ‘double?’
c:WebApp_CodeIntegrationClass14.cs(436): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeIntegrationClass14.cs(441): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeIntegrationClass14.cs(451): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeIntegrationClass14.cs(471): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘double’ is never equal to ‘null’ of type ‘double?’
c:WebApp_CodeIntegrationClass14.cs(476): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘double’ is never equal to ‘null’ of type ‘double?’
c:WebApp_CodeIntegrationClass14.cs(486): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘double’ is never equal to ‘null’ of type ‘double?’
c:WebApp_CodeIntegrationClass14.cs(496): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeIntegrationClass14.cs(501): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeIntegrationClass14.cs(516): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeIntegrationClass14.cs(526): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeInterfaceClass15.cs(33): warning CS0472: The result of the expression is always ‘true’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeServicesClass10leri.cs(1774): warning CS0472: The result of the expression is always ‘false’ since a value of type ‘int’ is never equal to ‘null’ of type ‘int?’
c:WebApp_CodeServicesClass10leri.cs(2666): warning CS0162: Unreachable code detected
c:WebApp_CodeInterfaceClass16.cs(14): warning CS0472: The result of the expression is always ‘false’ since a value of type ‘bool’ is never equal to ‘null’ of type ‘bool?’
c:WebApp_CodeInterfaceClass1.cs(1665): warning CS0169: The field ‘Class1.TyyugdhGgfhfhff.Row’ is never used
c:WebApp_CodeInterfaceClass1.cs(2244): warning CS0649: Field ‘Class1.TyyugdhGgfhfhff.TFaturaHrG.PriceOK’ is never assigned to, and will always have its default value false
c:WebApp_CodeInterfaceClass17.cs(17): warning CS0414: The field ‘Class17._LoadPath’ is assigned but its value is never used
c:WebiadeIadeIslemlerim.aspx(192): error CS1061: ‘System.Web.UI.WebControls.FileUpload’ does not contain a definition for ‘AllowMultiple’ and no extension method ‘AllowMultiple’ accepting a first argument of type ‘System.Web.UI.WebControls.FileUpload’ could be found (are you missing a using directive or an assembly reference?)

Related:

Leave a Reply