As one of the comments mentioned it looks like lizamoon which infected
over 1,000,000 sites earlier this year.

DECLARE Table_Cursor CURSOR FOR select c.TABLE_NAME,c.COLUMN_NAME from
INFORMATION_SCHEMA.columns c, INFORMATION_SCHEMA.tables t where
c.DATA_TYPE in ('------SNIP-------
 IN EXEC('UPDATE ['+@T+'] SET ['+@C+']=''">

<http://isc.sans.org/diary/SQL+Injection+Attack+happening+ATM/12127 >



-- 
Stephen Russell

901.246-0159 cell

_______________________________________________
Post Messages to: [email protected]
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: 
http://leafe.com/archives/byMID/profox/cajidmy+4ewvfosj0_s1bumbetsoqqkfyo4chn6tu98_gysd...@mail.gmail.com
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.

Reply via email to