View Attack Vector

General Information

SQL Syntax Execution

Variants:
Direct Session

Vector Type:
Attack

Relevance:
Generic

Layer:
Application-Level

Platforms:
Any

Target Type:
Application

Affected Mechanisms:
Secure Design

Invented In:
25/12/1998

Added In:
11/01/2015

Vector Operation Method:
Client controlled SQL syntax execution - SQL queries sent from the client to the server

Direct Variant:

SQL Execution

Variant Title:
SQL Execution

Typical Severity:
Critical

Resources:

White Papers:

Learn More:

Session Variant:

SQL Execution via Session Puzzling

Also Known As:
Session SQL Execution

Typical Severity:
Critical

Resources:

White Papers:

Paper I

Learn More: