英文站

http://www.ngssoftware.com/papers.htm

http://www.appsecinc.com

http://www.sqlsecurity.com

http://www.atstake.com/

http://marc.theaimsgroup.com/?l=bugtraqr=1

http://www.securitytracker.com

http://securityfocus.com

http://www.securityrisk.org/

http://www.hackerscenter.com/

http://tgs-security.com/

http://www.hackerlounge.com

http://brain-hack.org/

http://lnx.hackerscenter.com

http://binaryuniverse.net/

http://www.idefense.com/application/poi/display?type=vulnerabilities&flashstatus=true

http://www.securitytracker.com/archives/target/49.html

http://www.idefense.com/application/poi/display?type=vulnerabilities&flashstatus=true

http://www.petefinnigan.com/

http://www.securiteam.com

http://www.spidynamics.com/support/whitepapers/index.html

http://www.unixwiz.net/techtips/sql-injection.html

http://www.imperva.com

http://www.4guysfromrolla.com/

http://www.governmentsecurity.org/articles/SQLInjectionModesofAttackDefenceandWhyItMatters.php