pentester.land· Jun 21, 2023· by Marc Olivier Bergeron

AWS WAF Clients Left Vulnerable to SQL Injection Due to Unorthodox MSSQL Design Choice

Open Original Article ↗
Target Program: Microsoft, AWS
🎯 Vulnerability: SQL Injection (SQLi)
💡 Defense Fix: Use Parameterized Prepared Statements (ORM) for all database queries and disable verbose error messages.
#SQL injection#WAF bypass