techtarget

SQL injection (SQLi)

What is a SQL injection (SQLi)? A SQL injection (SQLi) is a technique that attackers use to gain unauthorized access to a web application database by adding a string of malicious code to a database ...

Cyber Attack Techniques: The Fusion of SQL Injection and AI, and the Intrusion Paths Targeted by Automatically Generated Malicious Input

Characters written into an input form are treated as part of a command to the database. This is the basis of SQL injection. If an attacker enters a special string and the application is poorly ...
Security Affairs

Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild

Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild, putting unpatched webmail servers at risk of database compromise.
cybersecuritynews

WordPress Plugin Flaw Exposes 5 Million Sites to SQL Injection Attacks

A high-severity vulnerability in the All-in-One WP Migration and Backup plugin could allow unauthenticated attackers to take over vulnerable WordPress sites. The flaw, tracked as CVE-2026-19949, ...