Applied Network Security

Examples of SQL injection attacks

As we learned earlier in the chapter, SQL injection attacks are very common. Many websites have been compromised over the years by hackers exploiting vulnerabilities found within the use of SQL. Let us look at some recent examples of SQL attacks. According to eSecurity Planet, on July 11, 2012 a hacker group known as D33Ds Company hacked Yahoo!. The hackers publicly dumped over 450,000 Yahoo! usernames and passwords. The attack vector used was a union-based SQL injection attack. According to a security report written by the Ponemon Institute, "the average SQL injection attack takes over two months to clean up and some 65 percent of organizations of all types have been hit by a SQL injection attack in the ...