SQL Injection - Visible Error-Based SQL Injection
Support This Channel
======================
Please like and subscribe, it means a lot!
Please buy me a coffee so I can continue to make content.
https://buymeacoffee.com/zenshell
My cybersec and webdev training site
https://www.zenshell.ninja
Join our Discord
/ discord
We see an example of a visible error-based SQL injection attack.
Although we are not able to directly access the response to our injected SQL query, we can manipulate the database into exposing values from the database as part of its error messages which are visible on the page.
This is also an example of verbose error disclosure where an end user is exposed to low level details regarding problems occurring on the back end. This makes it much easier for an attacker to craft an SQL injection payload since they can see how their input is being used as part of the SQL query.