[AHOV 2] SQL Injection
A user is able to craft some input to the program that modifies an SQL query into doing something that it shouldn't. →
9 November 2003
Australian Idol: A Licence to Print Money (Unless you win it)
Between broadcaster Channel 10, producers FremantleMedia/Grundy, record label BMG Australia and concept licensors 19, there must be a lot of people wringing their hands with glee. There's a lot of money to be made here, and with any luck, a bare minimum is going to be wasted on the "talent" →
[AHOV 1] Directory Traversal
A user is able to specify a filename to a program that allows them to access files in areas of the filesystem that should be unavailable. →
A Handful of Vulnerabilities: Introduction
A series of articles detailing common security flaws found in software: stuff that gets reported to Bugtraq every day. If you're a developer, it's your job to know what these are, and how to avoid them. →