Search

Tag: software vulnerability

PCI DSS Requirement 6

What is XPATH Injection and How to Prevent It?

By deliberately sending malformed information to the application, the attacker can determine how XML data is structured or access data that would otherwise not be accessible.
Read
PCI DSS Requirement 6

What is LDAP Injection and How to Prevent It?

LDAP Injection is an attack that is used to manipulate web-based apps that create user-input based LDAP expressions. When an application cannot correctly clear user login, it is possible to change LDAP statements using a Local Proxy.
Read
PCI DSS Requirement 6

What is OS Command Injection and How to Prevent It?

OS Command Injection is a web vulnerability that could allow an attacker to execute commands from an arbitrary operating system (OS) on the server running an application, often endangering the application and all its information.
Read
PCI DSS Requirement 6

What is SQL Injection and How to Prevent It?

SQL Injection is an attack method used to attack applications that are driven by databases. The attacker adds new SQL statements to the relevant field on the standard application screen, using SQL language features.
Read
PCI DSS Requirement 6

What is Cross-Site Scripting (XSS) and How to Prevent It?

Cross-Site Scripting (XSS) is a vulnerability that occurs when the software does not pass the input received from the user through the necessary HTML and JavaScript filters.
Read

Want to stay up to date with the latest news?

We would love to hear from you! Please fill in your details and we will stay in touch. It's that simple!

PCI DSS GUIDE's aim is to clarify the process of PCI DSS compliance as well as to provide some common sense for that process and to help people preserve their security while they move through their compliance processes.

Latest Posts

Vpn Security Risks and Best Practices

0
The encryption offered by VPN services is an ideal solution to protect online security, along with online privacy, device security, and other benefits.

Your 12-Step PCI DSS Compliance Checklist

0
PCI consistency is expected for any organization that acknowledges credit card installments. PCI additionally applies to any association that can affect the security of installment card exchanges.

What’s New in PCI DSS v4.0?

0
PCI DSS v4.0 replaces PCI DSS version 3.2.1 to address emerging threats and technologies better and provide innovative ways to combat new threats.

Most Popular

PCI DSS Requirements

2
The PCI DSS requirements apply to all system components, including people, processes and technologies that store, process or transmit cardholder data or sensitive authentication data, included in or connected to the cardholder data environment.

What’s New in PCI DSS v4.0?

0
PCI DSS v4.0 replaces PCI DSS version 3.2.1 to address emerging threats and technologies better and provide innovative ways to combat new threats.

PCI DSS Requirement 11 Explained

4
Vulnerabilities are constantly found by malicious individuals and researchers, and new software is introduced to them. System components, processes, and custom applications should be periodically reviewed to ensure an evolving environment continues to represent security controls.

Fast Access

© PCI DSS GUIDE | All rights reserved