Full Disclosure mailing list archives

Re: Exploiting an online store


From: Valdis.Kletnieks () vt edu
Date: Wed, 14 Sep 2005 20:35:16 -0400

On Thu, 15 Sep 2005 03:29:25 +0200, Gadi Evron said:

Check the date of the article. That company no longer exists and SQL 
injections are not THAT big of an issue for established eCommerce sites 
as they were in 1999.

Which is exactly why the previous posting on the list was an SQL injection
in Oracle Reports.  I see.. :)

Attachment: _bin
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: