SQL Injection
Last updated
Last updated
MS SQL injection is a type of web application security vulnerability that occurs when an attacker can manipulate user input in a web application that interacts with a Microsoft SQL Server database. This vulnerability can allow an attacker to execute malicious SQL statements, such as dropping tables, modifying data, or extracting sensitive information, by exploiting the application's failure to properly sanitize or validate user input.
See refences for examples and useful tips.
Example of union all select:
