RE: After the fact: SQL Injection Scanner

2009-10-21 Thread Mark Kruger
If the injection was the one that went around a few months ago - check out this post http://www.coldfusionmuse.com/index.cfm/2008/7/18/Injection-Using-CAST-And-A SCII There is a reverse stored procedure that can undo the damage down in the comments. Be sure and read the post and comments (and

RE: After the fact: SQL Injection Scanner

2009-10-21 Thread Andy Matthews
Mark's right. If you have the SQL injection code, you can essentially reverse engineer it and use it as a blueprint to fix the problems. andy -Original Message- From: Mosh Teitelbaum [mailto:mosh.teitelb...@evoch.com] Sent: Wednesday, October 21, 2009 2:10 PM To: cf-talk Subject:

RE: After the fact: SQL Injection Scanner

2009-10-21 Thread Mosh Teitelbaum
[mailto:mkru...@cfwebtools.com] Sent: Wednesday, October 21, 2009 3:30 PM To: cf-talk Subject: RE: After the fact: SQL Injection Scanner If the injection was the one that went around a few months ago - check out this post http://www.coldfusionmuse.com/index.cfm/2008/7/18/Injection-Using

RE: After the fact: SQL Injection Scanner

2009-10-21 Thread Mosh Teitelbaum
Matthews [mailto:li...@commadelimited.com] Sent: Wednesday, October 21, 2009 3:49 PM To: cf-talk Subject: RE: After the fact: SQL Injection Scanner Mark's right. If you have the SQL injection code, you can essentially reverse engineer it and use it as a blueprint to fix the problems. andy

Re: After the fact: SQL Injection Scanner

2009-10-21 Thread Charles Sheehan-Miles
: Wednesday, October 21, 2009 3:49 PM To: cf-talk Subject: RE: After the fact: SQL Injection Scanner Mark's right. If you have the SQL injection code, you can essentially reverse engineer it and use it as a blueprint to fix the problems. andy -Original Message- From: Mosh

RE: After the fact: SQL Injection Scanner

2009-10-21 Thread Mosh Teitelbaum
: (301) 942-5378 Fax: (301) 933-3651 WWW: http://www.evoch.com/ -Original Message- From: Charles Sheehan-Miles [mailto:char...@sheehanmiles.net] Sent: Wednesday, October 21, 2009 4:31 PM To: cf-talk Subject: Re: After the fact: SQL Injection Scanner You might consider restoring