""2.6 Avoid String Concatenation for Dynamic SQL Statements""; ""2.6.1 CWE