WWF does seem to be well secured against SQL Injection exploits. I haven't gone through every last input field to make sure it uses the formatInput and formatSQLInput function, but coverage seems comprehensive. Here is a good introduction to SQL Injection attacks with some good examples to test:
http://www.unixwiz.net/techtips/sql-injection.html
One area of vulnerability in WWF compared to the examples in the site above is that an attacker can easily acquire the entire source code and can know with near absolute certainty the name of every table and field.
Even if WWF were wide open to SQL Injection exploits, using SQL Injection alone, an attacker could not acquire a user password in order to act as that user. Using SQL Injection and still assuming WWF were vulnerable, an attacker could change the user email address and then reset the password in order to act as that user after the reset. Obviously the legitimate user could no longer log in with the old password and the email address would be a telltail sign of the attack.
Topic Options
Post Options
Thanks(0)
