View source for SQL injection/Basics

<noinclude>{{path|[[SQL injection]] > Basics}}</noinclude>

There are a number of factors to take into consideration when analyzing a [[SQL]] injection [[vulnerability]].  These factors will determine methodology for successful exploitation. SQL injection vulnerabilities are typically either standard injection vulnerabilities, '''error-based''' vulnerabilities, or '''blind''' vulnerabilities, blind being the most difficult of the three.
* '''Standard vulnerabilities''' - The page can be exploited by using the [[#Basic_Injection_:_Union_Select|'''UNION SELECT''' or '''UNION ALL SELECT''' statements]] to simply display selected data on the page.
* '''Error-based vulnerabilities''' - Error based vulnerabilities occur when verbose errors from the [[SQL]] [[Databasing engine|databasing engine]] are enabled and displayed on the page.  Thus, attackers may use things such as illegal type conversions to throw errors containing data.
* '''Blind vulnerabilities''' - Blind [[SQL]] injection vulnerabilities are not only the most difficult to exploit, but also the most time consuming.  [[#Expert:_Timing_attacks_for_automated_boolean_enumeration|Timing attacks]] and [[#Advanced:_Manual_Boolean_Enumeration|boolean enumeration]] are the only methods of successful exploitation of select statements.


==Injection points==

{{:SQL_injection/Basics/Injection_Points}}

==Input testing==
{{:SQL_injection/Basics/Testing}}