Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: Oracle SQL Injection |
|---|---|
| Date: | Tue, 11 Jul 2006 18:24:32 -0400 |
Mark,
It appears that Oracle does not like this type of syntax where we are appending an UPDATE onto an existing SELECT statement. Could someone please point me in the right direction on how to execute these type of commands. I should also say that the application appears to be replacing a semicolon with a coma.
Have you tried using sub queries? Also, check out these (if you haven't already seen them): http://www.securityfocus.com/infocus/1644 http://www.securityfocus.com/infocus/1646 good luck, tim ------------------------------------------------------------------------- Sponsored by: Watchfire Cross-Site Scripting (XSS) is one of the most common application-level attacks that hackers use to sneak into web applications today. This whitepaper will discuss how traditional CSS attacks are performed, how to secure your site against these attacks and check if your site is protected. Cross-Site Scripting Explained - Download this whitepaper today! https://www.watchfire.com/securearea/whitepapers.aspx?id=701500000008Vmr --------------------------------------------------------------------------
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: How to perform SSL certificate validation ?, Nagareshwar Talekar |
|---|---|
| Next by Date: | Re: Oracle SQL Injection, Cesar |
| Previous by Thread: | Oracle SQL Injection, Mark Keegan |
| Next by Thread: | Re: Oracle SQL Injection, Cesar |
| Indexes: | [Date] [Thread] [Top] [All Lists] |