MiniMail's login page takes your username and password and glues them straight into a SQL query. That one shortcut lets you log in as the administrator without knowing the password. SQL injection is older than most of the people learning it, and it still turns up in real applications, so this is the web lab every beginner should do first. Lab at a glance: Beginner · 70 XP · about 10 minutes · runs in your browser, no signup or…
No comments:
Post a Comment