RE: SQL njection 2

From: Calderon, Juan C (CORP, DDEMESIS) (Juan.Calderonat_private)
Date: Mon Apr 21 2003 - 11:06:20 PDT

  • Next message: Sam: "Port Scanners / Sniffers Review"

    Hi there!
    
    ********
    pameter=table;insert%20into%20clientes(uspw,pwus)%20values('j','j')
    
    the ODBC returns this error
    
    error '80040e14' 
    
    [Microsoft][Controlador ODBC Microsoft Access] Se encontraron caracteres
    después del final de la instrucción SQL. 
    ********
    
    This error occurs because of the ";" character, Access do not allow SQL Blocks (multiple SQL statements) but simple commands and sub queries.
    
    cheers
    
    ---------------------------------------------------------------------------
    Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the 
    world's premier event for IT and network security experts.  The two-day 
    Training features 6 hand-on courses on May 12-13 taught by professionals.  
    The two-day Briefings on May 14-15 features 24 top speakers with no vendor 
    sales pitches.  Deadline for the best rates is April 25.  Register today to 
    ensure your place.  http://www.securityfocus.com/BlackHat-pen-test 
    ----------------------------------------------------------------------------
    



    This archive was generated by hypermail 2b30 : Thu Apr 24 2003 - 10:05:28 PDT