News for hackers. Stuff that matters.
Re:Select Code_execution from * Using SQLite; (2019) by devwastaken on Saturday June 13, 2020 @03:24PM (#23511951)
Watched it, but all I'm seeing is queries that require arbitrary access in the first place. If you're using sqlite with prepared statements via another programming language, I'm failing to see how these attacks can be used.

Most of these attacks rely on creation of virtual table. Can that be done using a simple select statement with prepared statements?

There are no comments on this comment yet.