New answers tagged sql-injection
1
vote
This is supposed to be vulnerable to SQL injection but I can't really see how. Is it really that bad?
I don't know all the details of PHP and you're doing something weird with the '' in the middle of that regex, but in general if you aren't removing spaces, that's definitely exploitable. Even without ...
- 43k
1
vote
Valid SQL Injection Syntax where same vulnerable parameter used in both a SELECT and a UPDATE statement
Does your code allow putting multiple statements in the same query?
E.g. to append
); next query; next query; etc
Would that work? I did a little experiment which indicates that if you can append ...
- 1,529
0
votes
Valid SQL Injection Syntax where same vulnerable parameter used in both a SELECT and a UPDATE statement
You can wrap the sql statement in a one UPDATE statement.
UPDATE users SET users.description = Y FROM users WHERE users.id in (SELECT description FROM users WHERE id IN (X) UNION SELECT description ...
- 217
Top 50 recent answers are included