3 ms·
But you can use this to trigger the earlier SQL injection vulnerabilities, right?
by joevandyk 14y ago
But you can use this to trigger the earlier SQL injection vulnerabilities, right?
- tptacek 14y agoYes.
- danso 14y agoI think we're all saying the same thing. But this particular vulnerability described in the OP allows SQL injection via a different means than the one I had linked to (from 5 days ago). But yes, it's all SQL injection (and more, in this case).
- ajross 14y agoIt's (apparently) a remote code execution bug. You can also use it to trigger SQL in the sense of simply executing arbitrary SQL. There's no need to bootstrap or trampoline, the doors are swinging open already.