Answer / sachin

"An attack technique used to exploit web sites by altering
backend SQL statements through manipulating application
input."

SQL Injection happens when a developer accepts user input
that is directly placed into a SQL Statement and doesn't
properly filter out dangerous characters. This can allow an
attacker to not only steal data from your database, but
also modify and delete it. Certain SQL Servers such as
Microsoft SQL Server contain Stored and Extended Procedures
(database server functions). If an attacker can obtain
access to these Procedures it may be possible to compromise
the entire machine. Attackers commonly insert single qoutes
into a URL's query string, or into a forms input field to
test for SQL Injection. If an attacker receives an error
message like the one below there is a good chance that the
application is vulnerable to SQL Injection.

Answer / babuni

SQL injection is a technique that exploits a security vulnerability occurring in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and thereby unexpectedly executed. It is in fact an instance of a more general class of vulnerabilities that can occur whenever one programming or scripting language is embedded inside another.

Answer / pravati

sql injection is an attack in which malicious code is inserted to expose hidden data or to override valuable ones.

What is Testcase? How to define seviority and priority of a bug?Explain me with example?

8 Answers  

---

Once a bug is found how do u report it?wat is the process?

1 Answers  

---

What is Hands-Off Testing?

0 Answers  

---

What is the sdlc? what is the mannual tester roles? Write test case............? Sqlquerries...? How many test cases do you write down  perday.........?

2 Answers  

---

Can you tell me what is negative testing?

4 Answers  

---

Write test cases for yahoo sign up page.

2 Answers   NIIT,

---

What is the main difference between Smoke and sanity testing? Can u plz give me some examples? And to answer in interwview?

3 Answers   Thought Works,

---

What are the drawbacks of manual testing?

1 Answers  

---

Web application is having a client and a client-server application aslo have a client. Then what is the technical difference between thease two clients? can any body expain?

4 Answers  

---

What is split testing?

0 Answers  

---

Hello. I am not here to answer your question. I jus found a job as software QA engr. And i am totally new to software testing. So can someone pls help me in the following scenario? there is this registration screen, and it contain: One textbox called Nickname which only accept alphanumerical One textbox called Contact which only accept numerical, One textbox called Email which can be filled with alphanumerical and symbol and One button called Register now becos there is so many textboxes, where i can filled with alphabet, number, symbol, "just space", leading zeros, leading space. there will be lots of combination. can someone pls help.. i will be appreciated if u can post the test case of the scenario i mentioned. Lots of Thanks

0 Answers  

---

Who fixes the bug as Severity and priority ?

5 Answers   TCS,

---