Search Results

Follow the steps below to remediate this finding on Generic / Developer guidance. MySQL-specific SQL injection exploits MySQL syntax and functions.Remediation:Use PDO or MySQLi with prepared statements — never string-concatenate user input into queries.Disable...

Follow the steps below to remediate this finding on WordPress. Use $wpdb->prepare() for all custom MySQL queries:$results = $wpdb->get_results( $wpdb->prepare('SELECT * FROM wp_users WHERE user_login = %s', $username) );Ensure the WordPress database user only ...

Follow the steps below to remediate this finding on Joomla. Use the Joomla Database API with $db->quote() for all MySQL queries.Ensure the Joomla database user has only the necessary MySQL privileges.Enable Joomla's SQL debug log in development to detect unpar...

Follow the steps below to remediate this finding on Drupal. Use Drupal's database abstraction layer, which automatically escapes and parameterises MySQL queries.Review any custom modules using db_query() with raw string interpolation and replace with the query...

Follow the steps below to remediate this finding on Linux (Debian/Ubuntu). Edit /etc/ssh/sshd_config and restrict the Ciphers directive to exclude CBC mode ciphers:Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-...

Follow the steps below to remediate this finding on Linux (RHEL/CentOS/AlmaLinux). Edit /etc/ssh/sshd_config and restrict the Ciphers directive:Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com...

Follow the steps below to remediate this finding on Windows. For Win32-OpenSSH, edit C:\ProgramData\ssh\sshd_config (or %PROGRAMDATA%\ssh\sshd_config).Add or update the Ciphers directive to exclude CBC ciphers:Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-gc...

Follow the steps below to remediate this finding on Linux (Debian/Ubuntu). The Terrapin attack requires both ChaCha20-Poly1305 or CBC with Encrypt-then-MAC AND the use of prefix truncation during handshake.The primary fix is to update OpenSSH to a version that...

Follow the steps below to remediate this finding on Linux (RHEL/CentOS/AlmaLinux). Update OpenSSH to 9.6+ if available:sudo dnf update openssh-server openssh-clientsIf the update is not available, disable the affected algorithms in /etc/ssh/sshd_config:Ciphers...