Variations on SQL are used by some of the most popular database tools in the world, including some of Oracle's database systems, MySQL, PostgreSQL and Microsoft's SQL Server.

Last August, for instance, the company announced the availability of pre-configured VM images for Microsoft SQL Server Standard edition, Windows Server 2016 and SQL Server Web.

The attackers aren’t targeting a specific vulnerability. Instead they are using an automated SQL injection attack engine that is tailored to attack Web sites using SQL Server, Huang said.

The simplest form of SQL injection is through user input. Web applications typically accept user input through a form, and the front end passes the user input to the back-end database for processing.

For starters, SQL Server 2000 is tightly integrated with Microsoft Internet Information Server. You can define a virtual root in an IIS Web site that refers to a database on SQL Server.

Microsoft this month pushed out 133 patches for a broad swatch of software and apps and plugged a zero-day flaw in SQL Server.

If you’re interested in databases at all, you already know that Microsoft is about to ship a new version of SQL Server. In line with this year’s naming model, it’s called SQL Server 2000, although ...

SQL Server 2012, which will launch some time in the first few months of 2012, has a lot of moving parts. Exactly how is Microsoft going to bundle up its various capabilities? We know a bit about ...