I am going to use the open source tool
cflint but I would like to know what some of the warnings it lists actually mean or what they imply. The warnings in question are ones relating to security:
QUERYPARAM_REQ - SetSql() statement should use .addParam()
CFQUERYPARAM_REQ - cfquery should use < cfqueryparam>
Given these warnings, what problem do these indicate with the security of a program? I understand what fix they are suggesting, but what problem does this cause for security?