|
Brought to you by:
Suppliers of:
|
|
|
| |
| The linked paper contains information on a variety of attacks, including second-order SQL injection, automation scripts, and audit evasion. It also discusses input validation and securing current installations. The intention is to raise awareness of the rich variety of SQL injection attacks, in order to encourage people to fix these issues in their applications. |
| |
Credit:
The paper can be downloaded from:
http://www.ngssoftware.com/papers/advanced_sql_injection.pdf
The information has been provided by Chris Anley.
|
| |
Abstract:
The linked paper discusses in detail the common 'SQL injection' technique, as it applies to the popular Microsoft Internet Information Server/Active Server Pages/SQL Server platform. It discusses the various ways in which SQL can be 'injected' into the application and addresses some of the data validation and database lockdown issues that are related to this class of attack.
The paper is intended to be read by both developers of web applications that communicate with databases and by security professionals whose role includes auditing these web applications.
|
|
|
|
|
