Answer Posted / sachin
"An attack technique used to exploit web sites by altering
backend SQL statements through manipulating application
input."
SQL Injection happens when a developer accepts user input
that is directly placed into a SQL Statement and doesn't
properly filter out dangerous characters. This can allow an
attacker to not only steal data from your database, but
also modify and delete it. Certain SQL Servers such as
Microsoft SQL Server contain Stored and Extended Procedures
(database server functions). If an attacker can obtain
access to these Procedures it may be possible to compromise
the entire machine. Attackers commonly insert single qoutes
into a URL's query string, or into a forms input field to
test for SQL Injection. If an attacker receives an error
message like the one below there is a good chance that the
application is vulnerable to SQL Injection.
| Is This Answer Correct ? | 1 Yes | 0 No |
Post New Answer View All Answers
please give information about ERP Projects and how V-model use in project
What is the difference between functional testing and integration testing?
Can you please explain about the erp project
hi friends .......... from srs to signoff what r the tests the testing team will conduct either sequentially or parallel pls advice thanks in advance
.In languages testing, what is the fixed part and changing part?
What is mean by Schedule report who is the responsible for generated that one ?
What is CVS and why it is used?
What do you plan to become after say 2-5yrs (Ex: QA Manager, Why?)
You have a testing team of 10 members, and now you have to reduce it by 5 member and you dont want to increase risk in your product, you are try to cover all functionality to test. What test Strategy you follow.
Why is it impossible to test a program completely?
How would you do the ollowing Security Testing for web application? 1) Authentication. 2) Authorization. 3) cookies. 4) penetration testing. 5) session testing. 6) encryption and decryption testing pls give examples give example i can't understand so pl
I have 2 yrs 10 months experience in manual testing. there is a gap of 3 yrs in between. just 3 months before i rejoined the same company. I am looking for new & better job.What I have to enhance my career to up level, should I have to do Automation course or any other. Guide me properly.
What is system level testing?
How do u go about testing of web application?
what is traceability matrix and its usefulness