dmiessler.com | grep understanding - Latest Comments in Look What I Just Found In My Access.loghttp://danielrm26.disqus.com/dmiessler.com/about/enMon, 18 Aug 2008 16:51:35 -0000Re: Look What I Just Found In My Access.loghttp://dmiessler.com/blog/look-what-i-just-found-in-my-accesslog-2#comment-4359308<p>Its the latest MSSQL server injection hack whereby it messes up all existing character based columns. Details are here:</p><p><br></p><p><a href="http://www.coldfusionmuse.com/index.cfm/2008/7/18/Injection-Using-CAST-And-ASCII" rel="nofollow noopener" target="_blank" title="http://www.coldfusionmuse.com/index.cfm/2008/7/18/Injection-Using-CAST-And-ASCII">http://www.coldfusionmuse.c...</a></p><p><br></p><p>It seems that a lot of ColdFusion + MSSQL users have been particularly hit hard.</p>Raoul DukeMon, 18 Aug 2008 16:51:35 -0000Re: Look What I Just Found In My Access.loghttp://dmiessler.com/blog/look-what-i-just-found-in-my-accesslog-2#comment-4359307<p>Sorry, I was bored ;-)</p>Brooks GarrettSun, 17 Aug 2008 10:55:30 -0000Re: Look What I Just Found In My Access.loghttp://dmiessler.com/blog/look-what-i-just-found-in-my-accesslog-2#comment-4359306<p>What.... They just wanted you to check out their uber-leet c00l piece of javascript, you're not interested?...</p><p><br></p><p>But it's really cool...</p><p><br></p><p>Oh, OK, how about this great TRS-80 I got back here, I'll toss in a tape deck for free?? :)</p>Michael S BlackSun, 17 Aug 2008 08:50:18 -0000