CoChat
Sign Up
Cited by 122Web Application Security VulnerabilitiesWeb Applications and Data ManagementNetwork Security and Intrusion Detection

The DOI matches its Crossref record.

A Survey on Web Application Vulnerabilities (SQLIA, XSS) Exploitation and Security Engine for SQL Injection

Johari, Rahul, Sharma, Pankaj·2012·2012 International Conference on Communication Systems and Network Technologies
DOI 10.1109/csnt.2012.104
Open this paper in CoChat — free account

Abstract

Today almost all organizations have improved their performance through allowing more information exchange within their organization as well as between their distributers, suppliers, and customers using web support. Databases are central to the modern websites as they provide necessary data as well as stores critical information such as user credentials, financial and payment information, company statistics etc. These websites have been continuously targeted by highly motivated malicious users to acquire monetary gain. Structured Query Language (SQL) injection and Cross Site Scripting Attack (XSS) is perhaps one of the most common application layer attack technique used by attacker to deface the website, manipulate or delete the content through inputting unwanted command strings. Structured Query Language Injection Attacks (SQLIA) is ranked 1st in the Open Web Application Security Project (OWASP) [1] top 10 vulnerability list and has resulted in massive attacks on a number of websites in the past few years. In this paper, we present a detailed review on various types of Structured Query Language Injection attacks, Cross Site Scripting Attack, vulnerabilities, and prevention techniques. Besides presenting our findings from the survey, we also propose future expectations and possible development of countermeasures against Structured Query Language Injection attacks.

Overview

Integrity signals

Registry

Crossref · 10.1109/csnt.2012.104

Cites

Statistics

Recomputing p-values needs the paper’s full text.

Verification

Claims the paper makes

This paper’s full text isn’t openly available, so its claims and self-check weren’t run. The registry and citation checks still apply.

Citations

Cites

Still being checked.

Research works printed but not linked: 14

  1. 10.1109/ICSE.2009.5070521 · DOI
  2. putthacharoen, 2011, Protecting Cookies from Cross Site Script Attacks Using Dynamic Cookies Rewriting Technique, ICACT2011 Method for Detecting Cross-Site Scripting Attacks
  3. zhang, 2010, An Execution-flow Based Method for Detecting Cross-Site Scripting Attacks
  4. 10.1109/ITNG.2009.34 · DOI
  5. 10.1016/j.infsof.2008.08.002 · DOI
  6. 10.1109/SAINT.2010.60 · DOI
  7. 10.1109/IADCC.2009.4809188 · DOI
  8. 10.1109/ISCC.2010.5546750 · DOI
  9. 10.1109/CICN.2011.142 · DOI
  10. 10.1007/978-3-642-22540-6_43 · DOI
  11. 10.1109/CIT.2011.103 · DOI
  12. balasundaram, 2011, An Authentication Scheme for Preventing SQL Injection Attack Using Hybrid EncryptionPSQLIAHBE, 53, 359
  13. 10.1145/1698750.1698754 · DOI
  14. kim, 0, Injection Attack Detection using the Removal of SQL Query Attribute Values, Information Science and Applications (ICISA) 2011 International Conference Issue Date 26-29 April 2011, 1

Cited by

See all 122

Metadata

Authors
Johari, R., & Sharma, P.
Affiliations
  • Guru Gobind Singh Indraprastha University (IN)
  • Government of India (IN)
ORCID
Venue
2012 International Conference on Communication Systems and Network Technologies
Publisher
IEEE
Published
2012-05
Pages
453-458
DOI
10.1109/csnt.2012.104
OpenAlex
W2062394878
Cited by
122
References
0
Citations by year
2026: 2 · 2025: 3 · 2024: 5 · 2023: 12 · 2022: 11 · 2021: 8 · 2020: 11 · 2019: 12 · 2018: 9 · 2017: 4 · 2016: 10 · 2015: 14 · 2014: 13 · 2013: 7 · 2012: 1
FWCI
8.81
Type
conference paper
Language
en
Open access
closed
Locations
International Conference on Communication Systems and Network Technologies (publishedVersion)
Topics
  • Physical Sciences › Computer Science › Information Systems › Web Application Security Vulnerabilities
  • Physical Sciences › Computer Science › Information Systems › Web Applications and Data Management
  • Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
Keywords
SQL injection, cross-site scripting, web application vulnerabilities, application layer attacks, OWASP Top 10, web application security

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review

How to cite

Cite CoChat for the checks on this page, and the paper for its own findings.

This page
CoChat. (2026). Citation check: A Survey on Web Application Vulnerabilities (SQLIA, XSS) Exploitation and Security Engine for SQL Injection. https://app.cochat.ai/papers/10.1109/csnt.2012.104
The paper
Johari, R., & Sharma, P. (2012). A Survey on Web Application Vulnerabilities (SQLIA, XSS) Exploitation and Security Engine for SQL Injection. 2012 International Conference on Communication Systems and Network Technologies. https://doi.org/10.1109/csnt.2012.104