OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Executing PHP Code from MSSQL table

From: Alexander Klimov (alserkliinbox.ru)
Date: Wed Oct 17 2007 - 05:28:08 CDT


On Mon, 15 Oct 2007, Danux wrote:
> after testing a PHP-MSSQL app, i am able to insert and update tables
> but i can't execute store_procedures, so, i was wondering if its
> possible to update a table putting something like: "phpinfo()" or
> (passthru("ipconfig")) in order to execute while loading the page?

You cannot execute strings directly, but if developers are
clueless enough it is very likely that they actually eval code
stored in db (this blunder is especially common in `content
management systems') -- grep for eval and other similar
functions.

Yet another common mistake is to store in database paths to code
that is included in pages.

--
Regards,
ASK

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------