126 reputation
4
bio website
location
age
visits member for 3 years, 7 months
seen Dec 30 '14 at 21:53

Want to tip/donate? http://www.unicef.org/


Sep
24
awarded  Autobiographer
Oct
16
comment Is it possible to exploit a sql injection vulnerability with a select only permission, if I knew admin credentials?
Fair enough point.
Oct
16
comment Is it possible to exploit a sql injection vulnerability with a select only permission, if I knew admin credentials?
I had also identified a possible man in the middle vector that could expose admin credentials this morning, which is what prompted the question. It's been a bad morning so far.
Oct
16
awarded  Scholar
Oct
16
awarded  Student
Oct
16
comment Is it possible to exploit a sql injection vulnerability with a select only permission, if I knew admin credentials?
'; execute as login = 'adminlogin'; exec xp_cmdshell 'dir'; revert; -- is returning a permission error so I suppose things could be worse.
Oct
16
accepted Is it possible to exploit a sql injection vulnerability with a select only permission, if I knew admin credentials?
Oct
16
awarded  Supporter
Oct
16
comment Is it possible to exploit a sql injection vulnerability with a select only permission, if I knew admin credentials?
@ChrisS I am going to get that done, I'm just wondering if someone better at this sort of thing could exploit this to get a raise in privilege on the machine.
Oct
16
comment Is it possible to exploit a sql injection vulnerability with a select only permission, if I knew admin credentials?
I certainly agree, this scares the hell out of me, but this doesn't really answer the question.
Oct
16
asked Is it possible to exploit a sql injection vulnerability with a select only permission, if I knew admin credentials?