code injection
Exploiting input vulnerabilities
Code injection is a cyberattack technique where malicious code is inserted into a vulnerable program or system, causing it to execute unintended commands.
The attacker exploits weaknesses in how software handles user input—inserting database queries, scripts, or system commands where only harmless data was expected.
SQL injection targets databases; cross-site scripting targets web browsers.
The breach resulted from a code injection attack on their login form.
- SQLDatabase manipulation language
- vulnerabilityOpenness to harm
- security holeSoftware flaw enabling unauthorized access
- zero dayUndiscovered security flaw
- exploitNotable act or abuse
payload · malware · hack · white hat · script · buffer · overflow · user input · sanitize · escape · input · attack · shell · command · command line · parse · execute · runtime
code injectioninput validation
escaping · whitelisting · sandboxing · defense in depth · security patch
code, codes, coded, coding, coder, coders, codify, codification, inject