Sign in Sign up
JA · EN · FR
SecPulse

SQL Injection

⚔️ Attack Types Related 3,881
slug: sqli

Explanation

SQLインジェクションは「Webフォームに特殊な文字列を入れて、データベースに不正な命令を実行させる」古典的な攻撃です。 たとえばログイン画面で `' OR '1'='1` と入力するだけでパスワードチェックを回避できる、というのが最も有名な例です。 対策は「プリペアドステートメント」を使うことで、初学者向けの教科書にも載っている基本中の基本ですが、いまだに世界中で被害が続いています。
📌 Example
2017年Equifax事件 (1.4億人の個人情報流出)、2011年Sony PSN事件 (7700万アカウント漏洩)。

🔖 Related tags

Denial of Service8713 Cross-Site Scripting8075 Remote Code Execution2906 Path Traversal2053 Privilege Escalation1503 Cross-Site Request Forgery1068 Server-Side Request Forgery856 Authentication Bypass853 Insecure Deserialization739 Buffer Overflow77 Command Injection28 Use After Free20 Credential Leak14 Prototype Pollution7 Integer Overflow7

🛡 Vulnerabilities tagged with this 3,890

Image ID Title
CVE-2017-17636 SQL Injection in MLM Forced Matrix (CVE-2017-17636)
CVE-2017-17637 SQL Injection in Car Rental Script (CVE-2017-17637)
CVE-2017-17586 SQL Injection in FS Olx Clone (CVE-2017-17586)
CVE-2017-17587 SQL Injection in FS Indiamart Clone (CVE-2017-17587)
CVE-2017-17588 SQL Injection in FS IMDB Clone (CVE-2017-17588)
CVE-2017-17589 SQL Injection in FS Thumbtack Clone (CVE-2017-17589)
CVE-2017-17590 SQL Injection in FS Stackoverflow Clone (CVE-2017-17590)
CVE-2017-17591 SQL Injection in Realestate Crowdfunding Script (CVE-2017-17591)
CVE-2017-17592 SQL Injection in Website Auction Marketplace (CVE-2017-17592)
CVE-2017-17594 SQL Injection in DomainSale PHP Script (CVE-2017-17594)
CVE-2017-17595 SQL Injection in Beauty Parlour Booking Script (CVE-2017-17595)
CVE-2017-17596 SQL Injection in Entrepreneur Job Portal Script (CVE-2017-17596)
CVE-2017-17597 SQL Injection in Nearbuy Clone Script (CVE-2017-17597)
CVE-2017-17598 SQL Injection in Affiliate MLM Script (CVE-2017-17598)
CVE-2017-17599 SQL Injection in Advance Online Learning Management Script (CVE-2017-17599)
CVE-2017-17600 SQL Injection in Basic B2B Script (CVE-2017-17600)
CVE-2017-17601 SQL Injection in Cab Booking Script (CVE-2017-17601)
CVE-2017-17602 SQL Injection in Advance B2B Script (CVE-2017-17602)
CVE-2017-17603 SQL Injection in Advanced Real Estate Script (CVE-2017-17603)
CVE-2017-17604 SQL Injection in Entrepreneur Bus Booking Script (CVE-2017-17604)
CVE-2017-17605 SQL Injection in Consumer Complaints Clone Script (CVE-2017-17605)
CVE-2017-17606 SQL Injection in Co-work Space Search Script (CVE-2017-17606)
CVE-2017-17607 SQL Injection in CMS Auditor Website (CVE-2017-17607)
CVE-2017-17608 SQL Injection in Child Care Script (CVE-2017-17608)
CVE-2017-17609 SQL Injection in Chartered Accountant Booking Script (CVE-2017-17609)
CVE-2017-17610 SQL Injection in E-commerce MLM Software (CVE-2017-17610)
CVE-2017-17611 SQL Injection in Doctor Search Script (CVE-2017-17611)
CVE-2017-17567 SQL Injection in Scubez (CVE-2017-17567)
CVE-2017-17570 SQL Injection in FS Expedia Clone (CVE-2017-17570)
CVE-2017-17571 SQL Injection in FS Foodpanda Clone (CVE-2017-17571)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details