WebApp Sec mailing list archives

RE: Hacme Bank

From: "raza" <raza () raza demon co uk>
Date: Tue, 14 Sep 2004 14:52:07 +0100


Guys ,

Iv'e been trying to add users via SQL injection into the HACME App..

'; INSERT INTO FSB_USERS VALUES(123423, 'HAX0R12',
'HACKME12', 'EASY32', GETDATE())--

it wont work , is there a typo or is my SQL grammar missing something. I
just copied this from the solutions pages that accompany HACME Bank

Please advise.

Thanks

Raz

Current thread:

Hacme Bank Mark Curphey (Sep 09)
- Re: Hacme Bank Rush Molekilla (Sep 09)
- Re: Problem with Hacme Bank Install Martin Mkrtchian (Sep 09)
- RE: Hacme Bank Al (Sep 10)
  - RE: Hacme Bank Don Tuer (Sep 13)
    - Re: Hacme Bank Rogan Dawes (Sep 15)
    - RE: Hacme Bank Don Tuer (Sep 15)
    - RE: Hacme Bank Frank Knobbe (Sep 16)
- <Possible follow-ups>
- RE: Hacme Bank Mark Curphey (Sep 10)
  - RE: Hacme Bank raza (Sep 16)
- RE: Hacme Bank King, Stuart (REHQ-LON) (Sep 13)
- RE: Hacme Bank Calderon, Juan Carlos (GE Commercial Finance, NonGE) (Sep 16)
- Re: Hacme Bank Jérôme (Sep 18)
- Re: Hacme Bank KrK (Sep 18)