search

itkaa / webgoat

Webgoat for CI/CD test setups
0 stars 3 forks source link

Fix Sql Injections Please #1

Open itkaa opened 3 years ago

itkaa commented 3 years ago

Tons of Sql injections to fix, check the code-scanning alerts.

secure-code-warrior-for-github[bot] commented 3 years ago

Micro-Learning Topic: SQL injection (Detected by phrase)

What is this? (2min video)

This is probably one of the two most exploited vulnerabilities in web applications and has led to a number of high profile company breaches. It occurs when an application fails to sanitize or validate input before using it to dynamically construct a statement. An attacker that exploits this vulnerability will be able to gain access to the underlying database and view or modify data without permission.

Try this challenge in Secure Code Warrior