Home Forums Article Discussions Article Discussions by Author Discuss Content Posted by Brian Kelley Stored Procedures and SQL Injection RE: Stored Procedures and SQL Injection
tokorie-1043553
SSC Rookie
Points: 28
More actions
June 25, 2015 at 12:32 pm
#1808198
Loved the article but it does not address an injection string of the type Usename:= "(Select * from Internet.Students)" where the configured user has access to execute against stored proc against the internet.Students table.