CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection').

Type

Reference work

Intellectual base

Reference work

Link

no authoritative link yet

Cited by

1 citation across 1 artifact.

Mechanisms

• Parameterized Interpreter Call
  • Its strength is that it makes the data/control boundary a property the interpreter enforces, rather than a string-hygiene habit the developer must get right on every call — the standard first-line control against injection into a query language.

Verification

This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.

Registry ID ref:2e62631f94ef · see in the full table