XPath Injection attacks - the "other white meat"?

re: XPath Injection attacks - the "other white meat"?

Bertrand Le Roy — Thu, 17 Jun 2004 01:51:00 GMT

On the other hand, you only risk information disclosure, whereas the dangers of SQL injection usually are the complete destruction of your database and/or taking control of the machine if the dba is careless enough.
So as usual, validate and escape user data, and don't store unencoded secrets in a xml file.

re: XPath Injection attacks - the "other white meat"?

Addy Santo — Thu, 17 Jun 2004 08:51:00 GMT

You are correct, however I would suggest that theft of data is much more severe than a mere server crash. One is typically remedied by a simple restore operation, while the other is irreversible and cause serious monetary losses, not to mention tarnished reputations.

Do you think Valve would have been in worse shape if someone crashed their database instead of stealing the halflife 2 codebase? I doubt it.

XPath Injection Attacks

paul.bz — Sun, 20 Jun 2004 10:20:00 GMT

XPath Injection Attacks

SecureCoder by Anil John — Mon, 21 Jun 2004 04:44:00 GMT

XPath Injection Attacks

SecureCoder by Anil John — Mon, 21 Jun 2004 04:44:00 GMT

http://cyberforge.com/weblog/aniltj/

TrackBack — Thu, 22 Jul 2004 03:48:00 GMT

http://cyberforge.com/weblog/aniltj/

Santomania XPath Injection attacks the other white meat | Wood TV Stand

Santomania XPath Injection attacks the other white meat | Wood TV Stand — Mon, 01 Jun 2009 02:23:52 GMT

PingBack from http://woodtvstand.info/story.php?id=10067

Santomania XPath Injection attacks the other white meat | Cast Iron Cookware

Santomania XPath Injection attacks the other white meat | Cast Iron Cookware — Wed, 03 Jun 2009 22:39:55 GMT

PingBack from http://castironbakeware.info/story.php?title=santomania-xpath-injection-attacks-the-other-white-meat