From charlesreid1

Revision as of 00:28, 7 March 2022 by Unknown user (talk) (Created page with "=Overview= SQL Injection is a web security vulnerability that allows attackers to execute custom SQL queries by taking advantage of unvalidated inputs. SQL injections can ha...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Overview

SQL Injection is a web security vulnerability that allows attackers to execute custom SQL queries by taking advantage of unvalidated inputs.

SQL injections can have a high impact and are easy to carry out, making them one of the most common exploited vulnerabilities.

Types

There are several types of SQL injection attacks:

  • Retrieving hidden data
  • Subverting application logic
  • UNION attacks
  • Examining the database
  • Blind SQL injection