At Black Hat DC, security researchers present a way to hack the connection between Web applications and the database, a method they call connection string parameter pollution.
– Two security researchers unveiled a new attack at Black Hat DC that
targets the connection between Web applications and databases.
Independent researcher Jose Palazon and Chema Alonso of security vendor
Informatica64 presented their finding, which they called a CSPP (connection string
paramete…