Friday 4 October 2013

SQL Injection Vulnerability


Definition

SQL Injection is a vulnerability that occurs, when a person inputs any malicious code in any of the input fields, and it is accepted by the system. This then directly goes and hits the database, and fetches the private information from it, is called the SQL injection Vulnerability.

Description

Mostly SQL Injection is seen in the website where there is some input field existing. If we have a drop down box, or a radio button, then there is no threat of vulnerability attack, because nothing goes as an input from outside, as all the values are picked up internally.

This vulnerability is such a serious vulnerability that if a hacker takes the advantage of this, he can cause a great loss to a website. If we neglect this vulnerability and leave its loose ends, then its sure that our database containing the private, confidential and the personal information will be hacked and cause our business many losses. Not only this but also we will be left giving our and our customers, and clients private data in their hands. Remember the strict privacy laws existing nowadays, that should be taken care by the persons who have created or are maintaining a particular website. That’s why this SQL injection vulnerability needs to be handled and managed carefully to make ourselves safe.

No comments:

Post a Comment