Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

SQL Injection to Help You Sleep at Night

netspi.com | vulnerability | #sql-injection | #oracle | #mysql | #mssql | #safe-testing | #production-database

Summary

Argues production databases deserve care during pentests and shows read-only SQL injection habits across MySQL, MSSQL, and Oracle so testers can hunt vulnerabilities without corrupting live data.
Published
Collected

original ↗

Related coverage

vulnerability · netspi.com
Oracle WebLogic Server Proxy Plugin (CVE-2026-21962): Overview & Takeaways
CVE-2026-21962 (CVSS 10.0) lets unauthenticated attackers bypass security in Oracle HTTP Server and WebLogic proxy plugins for Apache and IIS, exposing backend WebLogic systems in the DMZ.
vulnerability · netspi.com
Exploiting Second Order SQL Injection with Stored Procedures
This walkthrough covers exploiting second-order SQL injection in an Excel report export feature, chaining stored procedure UNC path injection via xp_dirtree to exfiltrate database details over DNS.
vulnerability · netspi.com
NetSPI SQL Injection Wiki
Open-sources NetSPI's SQL injection wiki, a consolidated knowledge base spanning detection through attack queries across DBMSs, covering data extraction, obfuscation, and pivoting past the DB.
vulnerability · netspi.com
Advisory: XXE Injection in Oracle Database (CVE-2014-6577)
Oracle Database's XML parser (11.2.0.3-12.1.0.2) resolves external schemas, so XXE via extractvalue() lets a CREATE SESSION holder exfiltrate data over HTTP/FTP, port-scan, or trigger SSRF.
vulnerability · netspi.com
Hacking SQL Server Stored Procedures – Part 3: SQL Injection
SQL injection inside stored procedures using dynamic SQL can escalate to sysadmin when procedures run with elevated privileges via WITH EXECUTE AS or certificate signing, as this walkthrough shows.
vulnerability · netspi.com
Advisory: Oracle Forms 10g Unauthenticated Remote Code Execution (CVE-2014-4278)
Oracle Forms 10g fails to validate the ifip parameter passed to ListenerServlet, letting unauthenticated attackers execute arbitrary commands; E-Business Suite 12.0.6-12.2.4 is also affected.
back