SecurityInnovation/TMContentReview — Issue #176: Parameterized APIs Are Used for Data Access
Author: SergeTruth
Created: 2011-11-07 23:20:51+00:00
State: open

If the Stored procedure uses dynamic SQL internally it will still be succeptible to SQL injection in spite of using parameterized queries when calling the stored procedure.