3 ms·

It's the most common vulnerability. https://www.owasp.org/index.php/Top_10_2013-A1-Injection https://www.owasp.org/index.php/Top_10_2013-A1-Injection

• scrollaway 12y ago
  It's the most common vulnerability on the web. It's certainly not the most common vulnerability in projects built under popular non-php frameworks. Under that model, it's harder to create a situation where a SQL injection is possible than not. Edit: Slack's in PHP, I thought it was in RoR for some reason. Oops.
  • alexhill 12y ago
    Slack is a web service written in PHP, so I'd say elchief's assumption is reasonable.
  • thedufer 12y ago
    Additionally, Slack has had SQLi attacks found against it in the past, which is proof that they aren't defending against it systematically.