SQL Injections by Truncation

By Bala Neerumalla on 02 Aug 2006 @ Blackhat
πŸ“Š Presentation πŸ”— Link
#web-security #sql-injection #secure-coding #vulnerability-management
Focus Areas: Application Security , DevSecOps , Vulnerability Management , Web Application Security

Abstract

In this talk, I will discuss some ways to circumvent common mitigations of SQL Injection vulnerabilities in dynamic SQL. I will then suggest ways to protect against them.