SQL Injection and Cross-Site Scripting: ASP Alliance

Print Add To Favorites Email To Friend Rate This Article
SQL Injection and Cross-Site Scripting

page 1 of 9

Published: 14 Sep 2010

Unedited - Community Contributed

Abstract
For the last couple of months, I was helping to patch up several legacy web applications for Cross-Site Scripting and SQL Injection vulnerabilities. I found lots of articles about this topic via Google, but reading about them and experimenting with them are two very different things. So I decided to put together a small sample application to examine the vulnerabilities that I found.

by Bryian Tan
Feedback

Average Rating: This article has not yet been rated.
Views (Total / Last 10 Days): 16025/ 126

Article Contents:

Introduction

For the last couple of months, I was helping to patch up several legacy web applications for Cross-Site Scripting and SQL Injection vulnerabilities. I found lots of articles about this topic via Google, but reading about them and experimenting with them are two very different things. So I decided to put together a small sample application to examine the vulnerabilities that I found.

View Entire Article

(Page 2) »

Article Feedback

Comment:
Title:
Name:
Url:	( Optional )

Please add 2 and 8 and type the answer here:

User Comments

Title: SQL Injection and Cross-Site Scripting
Name: DINESH
Date: 1/18/2011 6:25:25 AM
Comment:
The best SQL Server Site Scripting

Title: avrail
Name: Refat Eid
Date: 9/19/2010 3:02:00 AM
Comment:
where can i found the TestDBSetup.sql ?

Title: Really Good
Name: Ankit Shivankar
Date: 9/15/2010 1:04:32 AM
Comment:
its really good.....and easy to understand

dear Bryian ...
M facing some problem in my personal project can u help me..
if u can then plz contact me on mail id that is shiva.ankit@gmail.com

Title: Download Link
Name: Bryian Tan
Date: 9/14/2010 8:21:24 PM
Comment:
Hello,

Sorry, I think I forgot to include the download link. Anyway, please download the sample code from here http://download.ysatech.com/SQL-Injection-and-Cross-Site-Scripting/Sample_SQLInjection_XSS.zip

Title: Gustavo
Name: Fernandez
Date: 9/14/2010 3:19:45 PM
Comment:
Where is the link to download the code sample (TestDBSetup.sql)?

Title: Senior programmer/analyst
Name: Greg Hilsheimer
Date: 9/14/2010 2:16:39 PM
Comment:
where is link to download code