top | item 2659828

(no title)

HRoark | 14 years ago

I read for most of their hacks they used SQL injection. Any know how that works exactly?

discuss

order

woodall|14 years ago

Input isn't properly sanitized by the server thus allowing an attacker to run code through the database. Fairly easy to test for.

HRoark|14 years ago

It's pretty embarrassing that none of these big corporations (PBS, Sony) can't even take some time to test for security flaws considering that SQL injection like you mentioned is easy to test for.