Answer Posted / sachin
"An attack technique used to exploit web sites by altering
backend SQL statements through manipulating application
input."
SQL Injection happens when a developer accepts user input
that is directly placed into a SQL Statement and doesn't
properly filter out dangerous characters. This can allow an
attacker to not only steal data from your database, but
also modify and delete it. Certain SQL Servers such as
Microsoft SQL Server contain Stored and Extended Procedures
(database server functions). If an attacker can obtain
access to these Procedures it may be possible to compromise
the entire machine. Attackers commonly insert single qoutes
into a URL's query string, or into a forms input field to
test for SQL Injection. If an attacker receives an error
message like the one below there is a good chance that the
application is vulnerable to SQL Injection.
| Is This Answer Correct ? | 1 Yes | 0 No |
Post New Answer View All Answers
what is the difference between Test-bed and test topology?
what exactly is heuristic checklist approach for unit testing?
Explain the components of a test plan?
What is bucket testing?
What is the responsibility of programmer’s vs QA?
i) functional test cases can we consider for regression test ? or we have to write separet test cases for regression test ? ii) How to write the system test case and what are the technique shall we have to follow ?
There are some features to improve the performance of a Product. What are those factors?
What are all the scenario for 1.google analytics 2.api 3.paypal
what r u r responsibilities in current project
Describe some staff conflicts you have handled.
What are the interview question on insurance domain in manual testing
how will u create diff types of scenario for any website?
How to do Pixel Size testing in a PDF document. Is there any Open tool that will be avaiable?
What do you plan to become after say 2-5yrs (Ex: QA Manager, Why?)
sanity testing is done during regression testing.is it true.if it is true plz explain?