Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
infavorites:1234
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with Search options user 86406

SQL injection is a technique used to take advantage of vulnerabilities arising from non-validated input on web applications to pass SQL commands through for execution on a backend database.

2
votes
There is a SQL Injection obviously on $username parameter, but you can't bypass login, because the password is compared with the result of the query, for example, if you inject ' or 1=1 --, the query …
answered Nov 15 '16 by hmrojas.p
2
votes
I had a similar situation with a test, the applicationn used SQL server, there was a WAF filtering the data input, then I couldn't use reserved words, because the WAF was blocking the reserved words. …
answered Feb 12 '17 by hmrojas.p
-3
votes
1answer
I'm doing some test on a web application and I found a SQL Injection in a stored procedure. It's something like this: Stored_procedure [input] The stored procedure validates the input, it must be a …
asked Sep 16 '16 by hmrojas.p
0
votes
If the data input isn't validated or scaped, it could be vulnerable to SQL Injection, because a Stored Procedure could have dynamic queries without validated or scaped data, even if you are using Stor …
answered Feb 22 '17 by hmrojas.p
1
vote
I think you should check for SQL Injection vulnerabilities manually, because you have more probabilities to detect a vulnerability, also you adquire more experience as information security professiona …
answered May 17 '16 by hmrojas.p