Why SQL Injection Still Persists: Organizing the Mechanisms and Defensive Design

SQL injection is a vulnerability known for so long that it is always featured in introductory security books. Yet, it remains ...
CSOonline

What is SQL injection? How these attacks work and how to prevent them

Immortalized by “Little Bobby Drop Tables” in XKCD 327, SQL injection (SQLi) was first discovered in 1998, yet continues to plague web applications across the internet. Even the OWASP Top Ten lists ...
bankinfosecurity

Hackers Keep Winning by Gambling on SQL Injection Exploits

A never-before-seen group of hackers has been hitting businesses and government agencies using a less-than-novel tactic: exploiting SQL injection flaws. So warns cybersecurity firm Group-IB, which in ...
VICE

The History of SQL Injection, the Hack That Will Never Go Away

One of the hackers suspected of being behind the TalkTalk breach, which led to the personal details of at least 150,000 people being stolen, used a vulnerability discovered two years before he was ...
Linux Journal

Drupageddon: SQL Injection, Database Abstraction and Hundreds of Thousands of Web Sites

Drupal is a very widely used open-source content management system. It initially was released in 2001, and recent statistics show Drupal as the third-most popular content management system, with just ...