SQL Injection: Difference between revisions
From charlesreid1
(Created page with "=Overview= SQL Injection is a web security vulnerability that allows attackers to execute custom SQL queries by taking advantage of unvalidated inputs. SQL injections can ha...") |
No edit summary |
||
| Line 5: | Line 5: | ||
SQL injections can have a high impact and are easy to carry out, making them one of the most common exploited vulnerabilities. | SQL injections can have a high impact and are easy to carry out, making them one of the most common exploited vulnerabilities. | ||
==Types== | =Notes= | ||
==Types of SQL injection attacks== | |||
There are several types of SQL injection attacks: | There are several types of SQL injection attacks: | ||
| Line 14: | Line 16: | ||
* Examining the database | * Examining the database | ||
* Blind SQL injection | * Blind SQL injection | ||
Revision as of 19:05, 9 March 2022
Overview
SQL Injection is a web security vulnerability that allows attackers to execute custom SQL queries by taking advantage of unvalidated inputs.
SQL injections can have a high impact and are easy to carry out, making them one of the most common exploited vulnerabilities.
Notes
Types of SQL injection attacks
There are several types of SQL injection attacks:
- Retrieving hidden data
- Subverting application logic
- UNION attacks
- Examining the database
- Blind SQL injection