View Attack Vector

General Information

XQUERY Injection

Variants:
Direct Persistent Session

Vector Type:
Attack

Relevance:
Generic

Layer:
Application-Level

Platforms:
Any

Target Type:
Application

Affected Mechanisms:
Input Validation, Syntax Escaping

Invented In:
02/08/2011

Added In:
25/12/2014

Vector Operation Method:
Malicious inputs can affect the structure of XQuery queries

Direct Variant:

XQUERY Injection

Variant Title:
XQUERY Injection

Typical Severity:
Major

Resources:

WASC

Vulnerapedia

OWASP Attacks

White Papers:

Learn More:

Persistent Variant:

Stored XQUERY Injection

Also Known As:
Persistent XQUERY Injection

Typical Severity:
Major

Resources:

White Papers:

Learn More:

Session Variant:

XQUERY Injection via Session Puzzling

Also Known As:
Session XQUERY Injection

Typical Severity:
Major

Resources:

White Papers:

Learn More: