2021-12-18 15:19:25
SQL Injection
DescriptionInjection is a security vulnerability that allows an attacker to alter backend SQL statements by manipulating the user supplied data.
Injection occurs when the user input is sent to an interpreter as part of command or query and trick the interpreter into executing unintended commands and gives access to unauthorized data.
The SQL command which when executed by web application can also expose the back-end database.
ImplicationAn attacker can inject malicious content into the vulnerable fields.
Sensitive data like User Names, Passwords, etc. can be read from the database.
Database data can be modified (Insert/Update/ Delete).
Administration Operations can be executed on the database
Vulnerable ObjectsInput Fields
URLs interacting with the database.
Examples:
SQL injection on the Login Page
Logging into an application without having valid credentials.
Valid userName is available, and password is not available.
Test URL:
http://demo.testfire.net/default.aspxUser Name: sjones
Password: 1=1′ or pass123
SQL query created and sent to Interpreter as below
SELECT * FROM Users WHERE User_Name = sjones AND Password = 1=1′ or pass123;
RecommendationsWhite listing the input fields
Avoid displaying detailed error messages that are useful to an attacker
13 views12:19
A
