Statement of work
CSCI 681 LAB 3 Statement of Work
Deliverables for this project
a. Proof of a system-level access 10.100.0.2 to
b. Proof of SQL injection exploit on Http://10.100.0.4
c. Proof of vlnerability mitigation guidance
SQL Injection Condition- Prepared statements will protect against (almost) all
SQL injection vulnerabilities. They take the form of a template in which certain constant
values are substituted during execution for variables containing user input. This way, you
can make sure of the type of the substitutes and it will also escape all bad characters that
Statement of work
might break an SQL statement. Hence leaving the SQL query properly sanitized as no
user input may break the query. Some functions like mysqli_real_escape_string() PHP in
can also protect against them.
System-level access- Be extremely careful when writing new software or
