[Full-disclosure] SQL Injection + Stored Procedures
- From: "Andres Molinetti" <andymolinetti@xxxxxxxxxxx>
- Date: Tue, 31 Oct 2006 20:25:33 +0000
HI,
Does anyone know how to get the body of a stored procedure in MS SQL
Server through a SELECT statement?
In other words, are the Stored Procedures bodies saved in any accesible
system table?
Cheers,
Andy.
_________________________________________________________________
Grandes éxitos, superhéroes, imitaciones, cine y TV...
http://es.msn.kiwee.com/ Lo mejor para tu móvil.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
- Prev by Date: [Full-disclosure] [SECURITY] [DSA 1202-1] New screen packages fix arbitrary code execution
- Next by Date: Re: [Full-disclosure] unreliable vulnerability reports en-masee [was:Re: vulnerability in Symantec products]
- Previous by thread: [Full-disclosure] [SECURITY] [DSA 1202-1] New screen packages fix arbitrary code execution
- Next by thread: Re: [Full-disclosure] SQL Injection + Stored Procedures
- Index(es):
Relevant Pages
|
