Injection Vulnerabilities, with OWASP Suffolk

A joint event, by OWASP Bristol and OWASP Suffolk.

Injection vulnerabilities remain a common problem today. A single mistake could expose your whole database and customer data, or give an attacker the ability to remotely execute code on your server.

We will look at some examples of coding mistakes that can lead to injection vulnerabilities, demonstrate how they can be found with vulnerability scanning tools, and discuss how they can be completely prevented from happening (more than simply hoping developers will use prepared queries or database abstractions correctly).

Agenda:

• OWASP updates
• Injection Vulnerabilities talk