What’s the worse that can happen due to an SQL Injection?

An SQL Injection may lead to loss of confidential data including client data, which may affect compliance and lead to huge fines. An SQL Injection may also lead to complete system compromise (as described in this article). Read how an SQL Injection lead to the compromise of tax data of an entire country .

How do I find out if I was a victim of an SQL Injection attack?

If you suspect that you were a victim of an SQL Injection, first, check your applications using a web vulnerability scanner like Acunetix to confirm that there is a vulnerability. If you confirm that there is a vulnerability and you suspect that an attacker used it, you need to perform a manual analysis of your system. Learn how conduct an investigation in the case of a suspected SQL Injection attack .

How do I prevent SQL Injections in my applications?

To prevent SQL Injections, the application must never directly include user input in queries. Instead, all developers must use parameterized queries (prepared statements) and/or stored procedures. Find out how to prevent SQL Injections in PHP .

Where do I find more information about SQL Injections?

The Acunetix site has tons of information about all flavors of SQL Injection. This is because Acunetix has always focused strongly on helping you prevent this critical vulnerability. Simply search our site to find more. You can start by reading a general article about SQL Injections .

Web Security Blog | Page 41 of 137

Exploiting SQL Injection: a Hands-on Example

Web Security Zone | February 26, 2019 by Agathoklis Prodromou

In this series, we will be showing step-by-step examples of common attacks. We will start off with a basic SQL Injection attack directed at a web application and leading to privilege escalation to OS root. SQL Injection is one of the most dangerous vulnerabilities a…

Critical CSRF Vulnerability on Facebook

Web Security Zone | February 25, 2019 by Tomasz Andrzej Nidecki

A security researcher Youssef Sammouda (Samm0uda) recently discovered a critical CSRF (Cross-site Request Forgery) security vulnerability on Facebook. This security issue could have been used to take over any Facebook user account. Samm0uda reported the bug on January 26 and Facebook fixed it just 5…

Paul’s Security Weekly Episode: Web App Scanning with Authentication.

Web Security Zone | February 22, 2019 by Tamara Naudi

Benjamin Daniel Mussler, Senior Security Researcher at Acunetix meets with Paul at Paul’s Security Weekly to discuss how Acunetix handles authentication to broaden the scan surface and why a web vulnerability scanner should be able to log into protected areas.

Setting Up A Self-Signed TLS/SSL Certificate on Apache

WordPress Security | February 15, 2019 by Samuel Bocetta

SSL is a fundamental piece of technology when you want to run a protected Apache site. SSL certificates permit you to scramble all the traffic sent to and from your Apache site to keep others from seeing the majority of the traffic. It utilizes open…

New build facilitates scanning restricted areas and sites which use Swagger and SOAP

Product Releases | February 8, 2019 by Nicholas Sciberras

Acunetix version 12 (build 12.0.190206130 – Windows and Linux) has been released. This new build makes it easier to record Login Sequences which can be used to scan restricted areas, and provides support to provide Swagger and WSDL as import files to be used by…

Authenticated Scans on Applications That Make Use of One-time Tokens or CAPTCHAs

Product Articles | February 7, 2019 by Bernhard Abele

One-Time Tokens add another layer of security, supplementing the username and password with a code that only the individual user has access to (for example by SMS or via a security key). A CAPTCHA has a different purpose, as it provides a test used to…

Acunetix Web Application Vulnerability Report 2019

Web Security Zone | February 4, 2019 by Tamara Naudi

Acunetix compiles an annual web application vulnerability report. The purpose of this report is to provide security experts and interested parties with an analysis of data on vulnerabilities gathered over the previous year. The 2019 report contains the results and analysis of vulnerabilities, detected from…

Visit us at RSAC 2019

Events | January 31, 2019 by Tamara Naudi

This year’s RSA Conference held between 4-8 March at the Moscone Centre, San Francisco, is centered around the theme BETTER – better solutions, brainstorming better ideas; ensuring a better and safer world, making security a top priority. At Acunetix we also have been working on presenting…

A fresh look on reverse proxy related attacks

Web Security Zone | January 22, 2019 by Aleksei Tiurin

In recent years, several researches have been published about attacks deliberately or directly related to reverse proxies. While implementing various reverse-proxy checks on the scanner, I started analyzing implementations of reverse proxies. Initially, I wanted to analyze how both reverse proxies and web servers parse…

Acunetix Web Security Blog