What is SQL Injection (SQL)?

SQL Injection (SQL) is an injection attack on web applications that allows an attacker to execute malicious SQL statements. These statements are targeted on a database server behind a web application. SQL application vulnerabilities are used by attackers to bypass web application security measures implemented by an organization. If successfully exploited, an attacker bypasses authentication … Continued

What is Cross-site Scripting (XSS), and how can you fix it?

What is Cross-site Scripting (XSS)?  XSS, or Cross-site scripting, is a type of attack on a web application that allows an attacker to compromise the visitors of the infected web application. By exploiting XSS vulnerability, an attacker can inject malicious scripts on a page of the infected web application. These scripts get executed when a user … Continued