3 ms·
> When attackers get your database, they have your server. Could you please link me to more info on this escalation vector?
by marshray 14y ago
> When attackers get your database, they have your server.
Could you please link me to more info on this escalation vector?
- simcop2387 14y agoI don't have it in the context of an escalation, but if they can get the database to make a new stored procedure, http://www.mssqltips.com/sqlservertip/1263/accessing-the-windows-file-system-from-sql-server/ http://www.mssqltips.com/sqlservertip/1263/accessing-the-win... then they can usually do a very large amount of things