CISSP Injection Vulnerabilities – Bk1D3T6St1
Injection is when user-supplied content, typically entered into a web form, is not properly checked and sanitized before being processed, enabling the attacker to insert malicious instructions into what is supposed to be data. The classic example is SQL injection, in which the user’s input is combined with an SQL query which is submitted to the database for processing. SQL injection attacks have been implicated in some of the largest security breaches, including an attack …
