Reputation
Top tag
Next privilege 200 Rep.
See reduced ads
Badges
4
Impact
~214 people reached

  • 0 posts edited
  • 0 helpful flags
  • 2 votes cast
Sep
24
awarded  Autobiographer
Oct
16
comment Is it possible to exploit a sql injection vulnerability with a select only permission, if I knew admin credentials?
Fair enough point.
Oct
16
comment Is it possible to exploit a sql injection vulnerability with a select only permission, if I knew admin credentials?
I had also identified a possible man in the middle vector that could expose admin credentials this morning, which is what prompted the question. It's been a bad morning so far.
Oct
16
awarded  Scholar
Oct
16
awarded  Student
Oct
16
comment Is it possible to exploit a sql injection vulnerability with a select only permission, if I knew admin credentials?
'; execute as login = 'adminlogin'; exec xp_cmdshell 'dir'; revert; -- is returning a permission error so I suppose things could be worse.
Oct
16
accepted Is it possible to exploit a sql injection vulnerability with a select only permission, if I knew admin credentials?
Oct
16
awarded  Supporter
Oct
16
comment Is it possible to exploit a sql injection vulnerability with a select only permission, if I knew admin credentials?
@ChrisS I am going to get that done, I'm just wondering if someone better at this sort of thing could exploit this to get a raise in privilege on the machine.
Oct
16
comment Is it possible to exploit a sql injection vulnerability with a select only permission, if I knew admin credentials?
I certainly agree, this scares the hell out of me, but this doesn't really answer the question.
Oct
16
asked Is it possible to exploit a sql injection vulnerability with a select only permission, if I knew admin credentials?