153 reputation
7
bio website
location
age
visits member for 1 year, 5 months
seen Nov 1 '13 at 6:37

Jul
11
awarded  Popular Question
May
29
awarded  Scholar
May
29
accepted What kind of security injection are these traces of, SQL, javascript, or otherwise?
May
29
comment What kind of security injection are these traces of, SQL, javascript, or otherwise?
Thank you very much for the info! I am trying to learn, I am reading up on security articles and this forum is in fact one of the places that I'm learning a lot. My boss actually did enlist the help of a "professional hacker" but they didn't offer me any advice that I hadn't already learned online, apart from telling me to disable the cgi-guestbook.
May
29
revised What kind of security injection are these traces of, SQL, javascript, or otherwise?
added 782 characters in body
May
29
asked What kind of security injection are these traces of, SQL, javascript, or otherwise?
May
26
awarded  Popular Question
May
15
comment What kind of attack was this?
is there a way to access a log of mysql commands run on the database?
May
15
awarded  Commentator
May
15
comment What kind of attack was this?
So this means there is a weakness in the code I wrote for our software, that it allowed such values to get inserted, right?
May
15
comment What kind of attack was this?
@LucasKauffman one more edit to the question. Some of my tables have values like cat /etc/pwd and +response.write(9062801*9462776)+. Does this mean that the entry point was definitely a SQL injection? Or could a SQL injection have been a parallel weakness apart from the uploaded malicious code? Are these values part of the hacker's efforts to get at our credentials?
May
15
revised What kind of attack was this?
added 369 characters in body
May
15
comment What kind of attack was this?
I think modified .htaccess code can make images executable.
May
15
revised What kind of attack was this?
added 228 characters in body
May
14
comment What kind of attack was this?
how can I prevent the using of the EXEC function? my site does have input forms.
May
14
comment What kind of attack was this?
wow thanks this is exactly it!
May
14
revised What kind of attack was this?
added 921 characters in body
May
14
awarded  Editor
May
14
comment What kind of attack was this?
ok i've edited the question and there's clearly more going on than SQL injections.
May
14
comment What kind of attack was this?
i just editted the question, i found some horrible mutations on my file system. i don't think this could just be a sql injection.