Second Order SQL Injection

A second-order SQL injection, also known as stored SQL injection or persistent SQL injection, is a type of SQL injection attack where the payload is not directly injected into the application’s SQL query, but rather into the application’s database, from where it is later retrieved and executed within another context, leading to a security vulnerability.

Documentation

See Also

• Second order SQL injection
• Second-Order SQL Injection Attack

Related

• SQL Injection
• Static Application Security Testing (SAST)