RE: Problems with IIS

Hi Marcelo, i think you have to analyze the querystring of your pages, it seems to be a SQL-Inyection attack.
 
Most likely solution to his type of attack is to validate every parameter before do anything.
 
You also install URLScan to run with IIS (free MS software).
 
Good luck
Marcelo Villalón M.
 

        -----Mensaje original-----
        De: Marcelo Leão Caffaro [mailto:leao_at_employer.com.br]
        Enviado el: Mié 14-07-2004 7:25
        Para: webappsec_at_lists.securityfocus.com
        CC:
        Asunto: Problems with IIS
        
        

Received on Jul 16 2004