It was attempted via the URL
On Wed, Jan 23, 2013 at 11:57 AM, Rob Voyle <[email protected]> wrote: > > Hi Greg > As I continue to update my security processes, I'm curious > Was this injection attempt at the url or at a form input. > > Thanks > Rob > > On 22 Jan 2013 at 11:12, Greg Morphis wrote: > > > > > I saw some request errors but what were they trying to do? > > This is what the onRequest error email showed > > > > "declare @q varchar(8000) select @q = > > 0x57414954464F522044454C4159202730303A30303A313527 exec(@q)" > > > > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > > ~| > > Order the Adobe Coldfusion Anthology now! > > http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag= > > houseoffusion > > Archive: > > http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:35 > > 3998 > > Subscription: > > http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm > > Unsubscribe: > > http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm > > > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354031 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
