Apr 24 2008

Feel like messing up some poor administrators day

Posted by john at 8:50 AM
4 comments - Categories: Adobe

google the following 'inurl:select inurl:where inurl:%20'
and watch all the evil SQL sqlurls come out.

All the more reason to use cfqueryparam

Comments

OMG. I know I shouldn't be surprised any more... but OMG.

Am I missing something? Are you just talking about all of the links to delete statements in PhpMyAdmin?

Plus the full SQL statements via URL params.

If you filter through those you will see a lot of government sites that are open for sql injection attacks