WebApp Sec mailing list archives

RE: Problems with IIS


From: Marcelo Villalón Mendez <mvillalon () secureit cl>
Date: Wed, 14 Jul 2004 15:49:25 -0400

Hi Marcelo, i think you have to analyze the querystring of your pages, it seems to be a SQL-Inyection attack.
 
Most likely solution to his type of attack is to validate every parameter before do anything.
 
You also install URLScan to run with IIS (free MS software).
 
Good luck
Marcelo Villalón M.
 

        -----Mensaje original----- 
        De: Marcelo Leão Caffaro [mailto:leao () employer com br] 
        Enviado el: Mié 14-07-2004 7:25 
        Para: webappsec () lists securityfocus com 
        CC: 
        Asunto: Problems with IIS
        
        


Current thread: