RE: SQL njection 2

• Previous message: sigtrap: "nmap 3.20 statistics patch"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Mon, 21 Apr 2003 14:06:20 -0400
From: "Calderon, Juan C (CORP, DDEMESIS)" <Juan.Calderon@ddemesis.ge.com>
To: "falcifer" <falcifer2001@yahoo.es>, <webappsec@securityfocus.com>, <pen-test@securityfocus.com>

Hi there!

********
pameter=table;insert%20into%20clientes(uspw,pwus)%20values('j','j')

the ODBC returns this error

error '80040e14'

[Microsoft][Controlador ODBC Microsoft Access] Se encontraron caracteres
después del final de la instrucción SQL.
********

This error occurs because of the ";" character, Access do not allow SQL Blocks (multiple SQL statements) but simple commands and sub queries.

cheers

---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the
world's premier event for IT and network security experts. The two-day
Training features 6 hand-on courses on May 12-13 taught by professionals.
The two-day Briefings on May 14-15 features 24 top speakers with no vendor
sales pitches. Deadline for the best rates is April 25. Register today to
ensure your place. http://www.securityfocus.com/BlackHat-pen-test
----------------------------------------------------------------------------

• Previous message: sigtrap: "nmap 3.20 statistics patch"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]