390
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 24 Jan 2024
390 points (98.5% liked)
Cybersecurity - Memes
1893 readers
2 users here now
Only the hottest memes in Cybersecurity
founded 2 years ago
MODERATORS
How to say you're vulnerable to code injection without saying you're vulnerable to code injection.
Are they vulnerable though, if they already exclude it at the user input?
I yet have to learn SQL and is there a way to allow passwords with '); DROP TABLE... without being vulnerable to an injection?
nevermind i googled it, and there various ways to do so
This still smells though. Why is the raw, plain text password string getting anywhere near database queries in the first place?
I doubt it is. they probably have a WAF that blocks these strings though and didnt want to bother reconfiguring it