inserting malicious content, usually code (like SQL, Javascript) into a vulnerable application. Is used only if there is no more specific injection tag available (see tag wiki)
Injection is inserting malicious content, usually code (like SQL, Javascript) into a vulnerable application.
Tag usage:
Should be used only for injection attacks where there is no more specific injection tag available.
- For XSS attacks, use xss, not injection.
- For SQL injection attacks, use sql-injection, not injection.
- For path injection attacks, use path-injection, not injection.
- For other injection-style attacks that do not have a more specific tag, you could use injection. For example, you might use injection on a question about a command injection attack.
