RE: SQL njection 2

From: Calderon, Juan C (CORP, DDEMESIS) (Juan.Calderon@ddemesis.ge.com)
Date: Mon Apr 21 2003 - 14:06:20 EDT


Hi there!

********
pameter=table;insert%20into%20clientes(uspw,pwus)%20values('j','j')

the ODBC returns this error

error '80040e14'

[Microsoft][Controlador ODBC Microsoft Access] Se encontraron caracteres
después del final de la instrucción SQL.
********

This error occurs because of the ";" character, Access do not allow SQL Blocks (multiple SQL statements) but simple commands and sub queries.

cheers

---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the
world's premier event for IT and network security experts. The two-day
Training features 6 hand-on courses on May 12-13 taught by professionals.
The two-day Briefings on May 14-15 features 24 top speakers with no vendor
sales pitches. Deadline for the best rates is April 25. Register today to
ensure your place. http://www.securityfocus.com/BlackHat-pen-test
----------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:32 EDT