SQL injection attacks have been going on for years, and the vulnerabilities and exploitation techniques are well-understood and widely discussed. However, they’re still quite prevalent and are used in a variety of scenarios. One recent example is the attack on a Yahoo site that resulted in a breach of 450,000 usernames and passwords. In this video, Ryan O’Boyle of Veracode discusses the nature of SQL injection attacks and how to defend against them.

metasploit 1

saint 4

threatpost 17

attackerkb 1

cvelist 1

cisa_kev 1

zdt 1

exploitdb 1

cve 1

checkpoint_advisories 2

ubuntucve 1

seebug 1