Manipulating Microsoft SQL Server Using SQL Injection

From: Aaron C. Newman (aaron@newman-family.com)
Date: 08/28/02 

From: "Aaron C. Newman" <aaron@newman-family.com>
To: <bugtraq@securityfocus.com>, <pen-test@securityfocus.com>, <vuln-dev@securityfocus.com>, <security-basics@securityfocus.com>, <webappsec@securityfocus.com>
Date: Wed, 28 Aug 2002 12:38:02 -0400

Hi All,

I just posted a short white paper on Microsoft SQL Server and SQL
Injection titled "Manipulating Microsoft SQL Server Using SQL Injection"
at:

http://www.appsecinc.com/news/briefing.html#inject14

The paper was written and researched by Cesar Cerrudo
(sqlsec@yahoo.com).

All comments are welcome.
 
Regards,
Aaron
_______________________________
Aaron C. Newman
anewman@appsecinc.com
CTO/Founder
Application Security, Inc.
www.appsecinc.com
Phone: 212-490-6022
Fax: 212-490-6456
- Protection Where It Counts -