SQL injection is a technique used to take advantage of non-validated input vulnerabilities to pass SQL commands through a Web application for execution by a backend database.
5
votes
1answer
83 views
Is Taking advantage of the IsNumeric() Function In VB.Net Through SQL Injection Possible?
Suppose this is the only mitigation used on a server:
Dim IDPerson
IDPerson = Request.Querystring("id")
If IsNumeric(IDPerson) = True Then
IDPerson = IDPerson
Else
IDPerson = 0
End If
IDPerson is ...
