Search Results
There are 1 item(s) tagged with the keyword "SQL injections".
- Displaying: 1 - 1 of 1
- 1. Securing you ASP scripts for SQL injection
Recently I got a client email that his site is affected by malware and Trojan virus. Google safe browsing tool and other firewall security gateway was blocking some of the site URLs.
Site was written in classic asp. When I look into the file contents, no files were modified. Normally if hackers get the ftp details then they modify files and add some iframe code that will load other virus affected sites. But this wasn't case here. So there may be a case of SQL injection. When I looked into database tables, I found some of the fields with having some html code. That html code was loading other sites which are virus infected. Our site is not allowing anyone to add/edit records, however records were modified. This was done by SQL injection using query string parameter.
- By Vikas
- Displaying: 1 - 1 of 1