DevHackersBlog

SQL injection is a high-severity vulnerabiliry. Attackers can exploit SQLi vulnerabilities to access or delete data form the database and do other desirable things. What is SQL injection? A SQL query is one way an application talks to the database. SQL injection occurs when an application fails to sanitize untrusted data(such as data in web form fields) in a database query. An attacker can use specially-crafed SQL commands to trick the application into asking the database to execute unexpected command. One-third of web applications i.e 32% of web applications have at least one SQL injection vulnerability, according to state of Software Security Report. Attackers can Exploit SQL injection vulnerabilities to: Control an application's data-driven behaviour. Alter data in the database without authorization. Access data withour authorization. Anotomy of a SQL injection attack  A SQL query includes an argument , which tell the database to return only the desired recor...