By rick
via unixwiz.net
Published: Oct 16 2006 / 05:55
"SQL Injection" is subset of the an unverified/unsanitized user input vulnerability ("buffer overflows" are a different subset), and the idea is to convince the application to run SQL code that was not intended. If the application is creating SQL strings naively on the fly and then running them, it's straightforward to create some real surprises.
-
EasyXDM – crossdomain javascript done right
-
THE OPEN WEB NEEDS YOU *NOW*
-
Notify Property Weaver extension for Visual Studio 2010 and Visual Studio 11
-
Parsing Nested JSON in Haskell with AESON
-
Enabling SAML2 SSO for web apps deployed on Tomcat with WSO2 Identity Server IdP
-
Review: Chrome 17, faster than ever, more secure than ever
Add your comment
