Privilege escalation via sql injection?

0 ⤊

Privilege escalation via sql injection?

is there a way to escalate sql Privileges via sql injection

2007-02-23 07:42:15 · 2 answers · asked by mike 1 in Computers & Internet ➔ Security

2 answers

Yes, there is.

All it takes is bad coding on a website and a knowledge of SQL

2007-02-23 07:46:26 · answer #1 · answered by Pugilist 5 · 0⤊ 0⤋

It depends what you mean by "sql privileges" -- if you mean "privileges on the SQL server" then the answer is "maybe, probably not." The server configuration would need to be very badly implemented. This also depends on what the database software is.

If you mean to escalate your privileges on a website that is secured using a SQL database back end, then yes, it's very possible.

2007-02-23 17:42:27 · answer #2 · answered by Ralph A 2 · 0⤊ 0⤋