Penetration Testing mailing list archives

RE: SQL njection 2


From: "Calderon, Juan C (CORP, DDEMESIS)" <Juan.Calderon () ddemesis ge com>
Date: Mon, 21 Apr 2003 14:06:20 -0400

Hi there!

********
pameter=table;insert%20into%20clientes(uspw,pwus)%20values('j','j')

the ODBC returns this error

error '80040e14' 

[Microsoft][Controlador ODBC Microsoft Access] Se encontraron caracteres
después del final de la instrucción SQL. 
********

This error occurs because of the ";" character, Access do not allow SQL Blocks (multiple SQL statements) but simple 
commands and sub queries.

cheers

---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the
world's premier event for IT and network security experts.  The two-day
Training features 6 hand-on courses on May 12-13 taught by professionals.
The two-day Briefings on May 14-15 features 24 top speakers with no vendor
sales pitches.  Deadline for the best rates is April 25.  Register today to
ensure your place.  http://www.securityfocus.com/BlackHat-pen-test
----------------------------------------------------------------------------


Current thread: