Web Development

Ask something
Question Locked

MS SQL

0 helpful
2 replies

by lorna_cruzado

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
what are the common SQL vulnerabilities / pitfalls that an Auditor should look into?

2 replies

by roberto

..there's so many!
Simple ones:
check that all MS security patches are installed (both for the OS and for SQL)
ensure the sa doesn't have the default blank password
check all accounts with sys admin rights
developers often hardcode SQL username/passwords in their code. In the case of web applications, these are often embedded in the web pages (.asp, .aspx, .php, global.asa files, etc) themselves. Very dangerous...

This discussion is closed to new replies.