SQL injection - Port Swigger
Summary: SQL injection is a web security vulnerability that lets an attacker interfere with the queries an application makes to its database, generally enabling them to view data they are not normally able to retrieve. An attacker may then be able to modify or delete that data, and PortSwigger notes Burp Suite can be used to test for a range of SQL injection vulnerabilities.
Key Takeaway: The exposure runs past disclosure to destruction: an attacker who reaches the database through a query can not only read records they were never meant to see but also modify or delete them.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026