20/05/2022
What Is SQL Injection Attack?
SQL injection (SQLi) is a cyberattack in which a hacker runs malicious SQL statements through the application to manipulate the database. These attacks can affect any website or web application that relies on an SQL database (MySQL, Oracle, Sybase, Microsoft SQL Server, Access, Ingres, etc.).
Our MySQL commands cheat sheet offers an overview of the most important commands you need to master this RDBMS.
The consequences of SQLi range from mild to severe. Following an injection, a hacker can:
Corrupt, steal or delete data.
Gain root access to the system.
Create new records to open the door for more advanced breaches, such as an APT attack.
Elevate privileges to reach other applications and systems on the network.
Compromise the server or other backend infrastructure.
Launch a DDoS (denial-of-service) attack.
Access the operating system through the database server.