SQL injection

Everything TechSec Feed has reported about SQL injection: 2 stories, newest first. Part of our Vulnerabilities coverage.

14 Oct
Vulnerabilities

SQL Injection: How Database Queries Become Attack Vectors

Unparameterized queries allow attackers to execute arbitrary database commands, turning data retrieval endpoints into remote command execution channels without exploiting traditional software bugs.

08 Oct
Vulnerabilities

mJobTime Build 15.7.3.32 Exposes LocalSystem RCE via Broken Login Handlers

Unauthenticated attackers can execute arbitrary SQL on Sybase backends, achieving remote code execution as LocalSystem through exposed admin endpoints.