Login|Japanese
August 13, 2009
 Database Hacking Video Demonstration from Imperva: SQL Injection Attack via Direct Database Access

This is a continuation of multiple educational video demonstrations related to Web application attacks, however this video is focused specifically on database security. This video looks at a Direct Database Access SQL Injection attack. In this attack a non-privileged user is able to exploit a vulnerability that existed in both Oracle 8i and 9i in which the malicious user could grant themselves DBA privileges.


Feed You can follow this conversation by subscribing to the comment feed for this post.
Comments

Verify your Comment

Previewing your Comment

This is only a preview. Your comment has not yet been posted.

Working...
Your comment could not be posted. Error type:
Your comment has been saved. Comments are moderated and will not appear until approved by the author. Post another comment

The letters and numbers you entered did not match the image. Please try again.

As a final step before posting your comment, enter the letters and numbers you see in the image below. This prevents automated programs from posting comments.

Having trouble reading this image? View an alternate.

Working...

Post a comment

Comments are moderated, and will not appear until the author has approved them.

« Imperva Security Podcast - with WAF Customer Telefonica O2 Germany | Main | WAF Customer Success Stories - Firms Serious about Security do use WAFs »