They might be doing a screen scrape looking for an error message to see if 
they've hit on a vulnerable parameter.  When/if the find one, they probably 
log it or attempt to attack it.

~Brad

> For example, we'll see three successive errant query strings come
> through like this.
>
> ?a=1'&b=2&c=3
> ?a=1&b=2'&c=3
> ?a=1&b=2&c=3'
>
> where they're trying the apostrophe at the end of each var trying to
> escape a potential var being use as an SQL string in the back end.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:310559
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

Reply via email to