02-08-2007, 10:15 AM
Quote:Half of all Websites are vulnerable to database attacks, according to security data collected from 27,000 ScanAlert customers for a recently published report. Forty-five percent of Websites had a serious database vulnerability such as SQL injection, while 50% had cross-site scripting (XSS) vulnerabilities (before we helped the sites correct the problems, of course).
Without question, it is a gloomy portrait of the security of software applications used by online merchants. When you apply these percentages to the millions of Websites that sell products and services online, the big picture gets very scary very quickly.
The scary stuff starts with SQL injection...
full article: http://multichannelmerchant.com/news/onl..._02062007/