Have been delving into sql lately, and was curious if its possible to spawn a shell with commands alone? I know about the directory traversal exploit with unicode characters, but was looking for something more "legit".
I've heard that its possible to make a sql script, and then execute that to spawn a shell, any ideas on that? Examples? Possible?
Tia
Full Version: Sql Execution Commands....shell?
| QUOTE (jockel @ Aug 21 2004, 05:47 PM) |
| http://www.pstruh.cz/tips/detpg_cmdshell.htm |
perfect, thanks much!
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
