Dark Reading

Anatomy Of A SQL Injection Attack

[The following is excerpted from "Anatomy Of A SQL Injection Attack," a new report posted this week on Dark Reading's Database Security Tech Center.] It started with a vulnerability on a password ...
CSOonline

JSON-based SQL injection attacks trigger need to update web application firewalls

Security researchers have developed a generic technique for SQL injection that bypasses multiple web application firewalls (WAFs). At the core of the issue was WAF vendors failing to add support for ...
Dark Reading

Cacti Monitoring Tool Spiked by Critical SQL Injection Vulnerability

A critical vulnerability in the Cacti Web-based open source framework for monitoring network performance gives attackers a way to disclose Cacti's entire database contents — presenting a prickly risk ...
TechRepublic

Detection and Prevention of Tautology and Union Query Based SQL Injection Attacks

Web applications are pervasive and play a vital role as web applications are significant mode of communication. SQL injection is one of the most dangerous security vulnerability that is exploited in ...
Threat Post

Tutor LMS for WordPress Open to Info-Stealing Security Holes

The popular learning-management system for teacher-student communication is rife with SQL-injection vulnerabilities. Security vulnerabilities in Tutor LMS, a WordPress plugin installed on more than 20 ...