RE: MySQL being hacked with commands through URL

[Michael.Coll-Barth]

 

> From: James Coffman [mailto:webmaster@stripped] 

> Hello all,
> 
>                 My website has been hacked using a url such as:
> -1%20union%20all%20select%201,2,concat(username,char(58),passw
> ord),4,5,6%20f
> rom%20users-- .

Without more information, it sounds like simple SQL insertion.


The information contained in this message and any attachment may be
proprietary, confidential, and privileged or subject to the work
product doctrine and thus protected from disclosure.  If the reader
of this message is not the intended recipient, or an employee or
agent responsible for delivering this message to the intended
recipient, you are hereby notified that any dissemination,
distribution or copying of this communication is strictly prohibited.
If you have received this communication in error, please notify me
immediately by replying to this message and deleting it and all
copies and backups thereof.  Thank you.