3 ms·
Do you consider blind SQL injection an attack? If a user is not meant to have access to information, but they can somehow access it, that is a vulnerability.
by charcircuit 3y ago
Do you consider blind SQL injection an attack? If a user is not meant to have access to information, but they can somehow access it, that is a vulnerability.
- idle_zealot 3y agoSure, except the information here is not other users' account info or something, it's analogous to the source of the DBMS. Which is not typically considered sensitive.
- bugglebeetle 3y agoTell that to Oracle…
- charcircuit 3y agoNo, it's like the schema of the database which is normally a secret.