Penetration Testing: Re: is JSP&servelet web app SQL Injection Free?

["Frank Fan" <frank () dbappsecurity com>]

Of course not!

In fact it has nothing to do with language, but with how app deal with
paras etc, most app has problems we found are JSP and asp.

Best!
Frank

On Mon, Jan 5, 2009 at 4:28 PM, salamond <jarodzz () gmail com> wrote:
> Hi, all.
>
> I'm new to pen-testing.
>
> Just finished my tour with a couple of tools:
> webscarab
> sqlmap
> ratproxy
>
> But it shows OK for every page that I've been through.
>
> I went through a couple of SQL Injection tutorial, and most of them
> are focusing on
> php or asp pages.
>
> So here's my question, it may sound stupid, but
> is there no SQL Injection problems in JSP&Java sevelet web app?
>
> thanks
>
> JarodZZ