Injection Attack


server-side attack causes the server to do some processing or run a script or query in a way that is not authorized by the application design.

  • depend on some kind of injection attack

An injection attack is an attack that exploits weak request handling or input validation to run arbitrary code in a client browser or on a server.

  • e.g.
    • persistent XSS
    • SQL injection
    • directory traversal

Types of Injection Attack