August 29, 2008 11:06pm pdt

Member Login

Hall of Fame

Yearly

1SidFishes 168,785
2Zvonko 111,330
3gdemaria 97,410
4_agx_ 74,657
5Plucka 63,800
6SBennett 54,100
7zadoc 37,230
8hielo 35,850
9dgrafx 32,800
10erikTsomik 28,800
11Mr_Nil 24,500
12srikanthm... 20,810
13pmascari 18,750
14meverest 17,950
15Kerrdo 15,300
16Jester_48 14,200
17msfletch 13,820
18rob_loren... 13,360
19angelIII 12,000
19pigmentarts 12,000
21BSSupport 11,000
22digicidal 9,150
23HuyBD 8,800
24jason1178 8,350
25rucky544 8,300

	[x] Attachment Details

SQL Injection Attack

Zone: ColdFusion Application Server

Tags: sql, injection, coldfusion

Please tell me how to exploit this query with a SQL injection attack!

I've been reading about such attacks and I want to lock down my code a bit better. But, for some reason I can't get my Coldfusion program to bite on the good old

' or '1'='1' --

as the password when I feed it in through a URL or the HTML form. The query it calls is as follows:

<CFQUERY NAME="checklogin" DATASOURCE="..." USERNAME="..." PASSWORD="...">

      SELECT       COUNT(*) AS usrcount
      FROM accounts
      WHERE      RTRIM( username )             = '#username#'       AND
                  RTRIM( pass )            = '#password#'
      GROUP BY username
</CFQUERY>

Intuitively this query should be hackable, am I mistaken? Can anyone give me a SQLInjection hack that will break this SQL statement (it shouldn't be too hard to do?)

Also, any suggestions to sure-up my code would also be greatly appreciated (but mainly I want a hack example that works so I can fix my other sins ...)

Using MS SQL Server. Please, nothing that will do damage (the apps are still my babies!)

Thanks for your input and comments!

Start your free trial to view this solution

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

9.0

Question Stats

Zone: Software

Question Asked By: pbguy

Solution Provided By: Tacobell777

Participating Experts: 2

Solution Grade: A

Translate:

Loading Advertisement...

20080723-EE-VQP-34