
	XPath injection


	Home > Software Quality Definitions - XPath injection

SearchSoftwareQuality.com Definitions (Powered by WhatIs.com)

EMAIL THIS

LOOK UP TECH TERMS		Powered by:

Browse tech terms alphabetically:

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z #

XPath injection

Digg This!

StumbleUpon

Del.icio.us

XPath injection is an attack targeting Web sites that create XPath queries from user-supplied data. If an application embeds unprotected data into an XPath query, the query can be altered so that it is no longer parsed in the manner originally intended. This can be done by bypassing the Web site authentication system and extracting the structure of one or more XML documents in the site.

LAST UPDATED:

13 Jun 2006

Read more about XPath injection:

-	The Web Application Security Consortium outlines how XPath injection works.
-	Amit Klein compares simple XPath injection and blind XPath injection.
-	Runa Dwibedi discusses XPath injection techniques and countermeasures.

Do you have something to add to this definition? Let us know.
Send your comments to techterms@whatis.com

Digg This!

StumbleUpon

Del.icio.us

SEARCH

TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.


TechTarget Corporate Web Site \| Media Kits \| Reprints \| Site Map All Rights Reserved, Copyright 2006 - 2008, TechTarget \| Read our Privacy Policy