4 ms·
Take a look at the test they added in the patch for an example of how the exploit would go down.
by lansing 14y ago
Take a look at the test they added in the patch for an example of how the exploit would go down.
- kmf 14y agoLooks like two tests (test_where_error_with_hash and test_where_with_table_name). You can see those tests here: http://seclists.org/oss-sec/2012/q2/att-504/3-2-sql-injection.patch http://seclists.org/oss-sec/2012/q2/att-504/3-2-sql-injectio... (this is for 3.2, you can change the patch name for 3.1, etc.)