domains / families / security / performing-second-order-sql-injection

performing-second-order-sql-injection

separate

Detect and exploit second-order SQL injection vulnerabilities where malicious

When to use

• When first-order SQL injection testing reveals proper input sanitization at storage time
• During penetration testing of applications with user-generated content stored in databases
• When testing multi-step workflows where stored data feeds subsequent database queries
• During assessment of admin panels that display or process user-submitted data
• When evaluating stored procedure execution paths that use previously stored data

Skill page

Source