A successful SQL injection attack can read sensitive data from the database, modify database data (insert/update/delete), execute administration operations on the database (such as shutdown the DBMS), ...

This page has been translated to Chinese by monklof. I started writing down this list as my personal notes of topics I discussed with colleagues and friends, and that I wanted to deepen... I'm not a ...