Web Hack List

Collected research

RaceDB: Detecting Request Race Vulnerabilities in Database-Backed Web Applications

RaceDB finds request race conditions in PHP database-backed applications by tracking data dependencies through the application code as well as the SQL, building a race graph, then replaying candidate request pairs both serialized and concurrently to confirm a divergence. Across 14 applications it found 21 known and 18 new races, including coupon reuse and duplicated credits.

Record

Researcher
An Chen, Yonghwi Kwon and Kyu Hyung Lee
Published by
doi.org
Topic
Other

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of An Chen, Yonghwi Kwon and Kyu Hyung Lee, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .