Your browser either does not support JavaScript or it is disabled in your browser's settings. Please consult your browser's documentation for information about enabling this feature.
#ods_bar { margin: 0; padding: 0; width: 100%; float: left; clear: both; color: #444; font-size: 9pt; font-family: Arial, Helvetica, sans-serif; background-color: #ddeff9} #ods_bar ul { list-style-type: none} #ods_bar ul li { display: inline} #ods_bar a { text-decoration: none; color: inherit} #ods_bar img { float: none; border: 0; margin: 0} #ods_bar input { margin-right: 8px; font-size: 7pt; color: #555;} #ods_bar_handle { width: 10px; float: left} #ods_bar_content { float: left; width: 100%; background-color: #ddeff9} #ods_bar_top { float: left; width: 100%; background-color: #fff} #ods_bar_bot { float: left; clear: left; width: 100%; padding-top: 2px; padding-bottom: 2px; background-color: #85b9d2} #ods_bar_top_cmds { font-size: 7.5pt; margin-top: 4px; color: #42abc4; background-color: #fff; float: right; padding-right: 8px} #ods_bar_top_cmds img { vertical-align: middle;} #ods_bar_top_cmds a { text-decoration: none} #ods_bar_top_cmds a.user_profile_lnk { text-transform: none} #ods_bar_first_lvl { float: left; padding: 0; margin: 0; color: #fff; background: #0075A8 url("/ods/images/navlv1default.png")} #ods_bar_first_lvl li { padding: 0; padding-left: 4px; margin: 0} #ods_bar_first_lvl li a { margin-top: 0px; padding: 6px 3px 6px 3px; vertical-align: middle; color: #fff; /* Required due to buggy CSS in IE */} #ods_bar_first_lvl li a img { margin-top: 2px; margin-bottom: 5px; vertical-align: middle;} #ods_bar_first_lvl li.sel a { color: #455; background: #b1d4e5 url("/ods/images/navlv1sel.png")} #ods_bar_second_lvl { width: 100%; height: 20px; float: left; clear: left; margin: 0; padding: 0; padding-top: 4px; background: #ddeff9 url("/ods/images/navlv2default.png")} #ods_bar_second_lvl li { margin-right: 5px} #ods_bar_second_lvl li:first-child { margin-left: 27px;} #ods_bar_second_lvl li a { vertical-align: middle; color: #444; /* Required by buggy IE CSS implementation */ } #ods_bar_home_path { margin: 2px 0px 0px 36px; padding: 0; font-size: 8pt} .popup { position: absolute; background-color: #fff; border: 1px dotted #4800F4; padding: 0.5em; font-size: 80%; } #ods_bar_odslogin { font-size: 7.5pt; margin-top: 4px; color: #42abc4; background-color: #fff; float: right; padding-right: 8px; } #ods_bar_odslogin img { vertical-align: middle; margin-left: 8px; } #ods_bar_odslogin a { margin-left: 3px; color: inherit; text-decoration: none; }
Loading... please wait.
Sign In
| Sign Up
Community
Briefcase
Weblog
Wiki
Bookmarks
Tags
Sign In
| Sign Up |
Help
|
About
Comunity blog
kidehen@openlinksw.com's BLOG [127]
uda's BLOG [135]
vdb's BLOG [136]
more...
ODS Home
> Weblog
Universal Data Access Technology Blog
You are not logged in
Login
Weblog
|
LinkBlog
|
Summary
|
Archive
|
Search
Subscribe
Atom 1.0
RSS 2.0
RDF RSS 1.0
OCS
OPML
XBEL
Display Settings
articles per page.
descending
ascending
order.
June 4, 2015
17:12
Life after sun.jdbc.odbc.JdbcOdbcDriver
In the beginning... When Sun originally released Java 1.0, there were no JDBC drivers -- there wasn...
with tags:
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17ZzOPEB1d
|
17
|
-1 OR 2+178-178-1=0+0+0+1 --
|
-1 OR 2+206-206-1=0+0+0+1
|
-1' OR 2+34-34-1=0+0+0+1 --
|
-1' OR 2+190-190-1=0+0+0+1 or 'fgB6ITye'='
|
-1" OR 2+260-260-1=0+0+0+1 --
|
17*if(now()=sysdate()
|
sleep(15)
|
0)
|
170'XOR(17*if(now()=sysdate()
|
sleep(15)
|
0))XOR'Z
|
170"XOR(17*if(now()=sysdate()
|
sleep(15)
|
0))XOR"Z
|
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
|
17-1; waitfor delay '0:0:15' --
|
17-1); waitfor delay '0:0:15' --
|
17-1 waitfor delay '0:0:15' --
|
17fbJv0bsw'; waitfor delay '0:0:15' --
|
17-1 OR 878=(SELECT 878 FROM PG_SLEEP(15))--
|
17-1) OR 154=(SELECT 154 FROM PG_SLEEP(15))--
|
17-1)) OR 612=(SELECT 612 FROM PG_SLEEP(15))--
|
17bfqmiJTq' OR 483=(SELECT 483 FROM PG_SLEEP(15))--
|
172AZ3mfd5') OR 672=(SELECT 672 FROM PG_SLEEP(15))--
|
176XDCahQJ')) OR 828=(SELECT 828 FROM PG_SLEEP(15))--
|
17*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
|
15)
|
17'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
|
15)||'
|
17
|
17'"
|
17'"%2527%2522\'\"
|
@@6I2gi
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
under category:
ODBC
|
JDBC
|
Industry News
|
Tips & Tricks
On del.icio.us:
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17ZzOPEB1d
|
17
|
-1 OR 2+178-178-1=0+0+0+1 --
|
-1 OR 2+206-206-1=0+0+0+1
|
-1' OR 2+34-34-1=0+0+0+1 --
|
-1' OR 2+190-190-1=0+0+0+1 or 'fgB6ITye'='
|
-1" OR 2+260-260-1=0+0+0+1 --
|
17*if(now()=sysdate()
|
sleep(15)
|
0)
|
170'XOR(17*if(now()=sysdate()
|
sleep(15)
|
0))XOR'Z
|
170"XOR(17*if(now()=sysdate()
|
sleep(15)
|
0))XOR"Z
|
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
|
17-1; waitfor delay '0:0:15' --
|
17-1); waitfor delay '0:0:15' --
|
17-1 waitfor delay '0:0:15' --
|
17fbJv0bsw'; waitfor delay '0:0:15' --
|
17-1 OR 878=(SELECT 878 FROM PG_SLEEP(15))--
|
17-1) OR 154=(SELECT 154 FROM PG_SLEEP(15))--
|
17-1)) OR 612=(SELECT 612 FROM PG_SLEEP(15))--
|
17bfqmiJTq' OR 483=(SELECT 483 FROM PG_SLEEP(15))--
|
172AZ3mfd5') OR 672=(SELECT 672 FROM PG_SLEEP(15))--
|
176XDCahQJ')) OR 828=(SELECT 828 FROM PG_SLEEP(15))--
|
17*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
|
15)
|
17'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
|
15)||'
|
17
|
17'"
|
17'"%2527%2522\'\"
|
@@6I2gi
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
On technorati:
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17ZzOPEB1d
|
17
|
-1 OR 2+178-178-1=0+0+0+1 --
|
-1 OR 2+206-206-1=0+0+0+1
|
-1' OR 2+34-34-1=0+0+0+1 --
|
-1' OR 2+190-190-1=0+0+0+1 or 'fgB6ITye'='
|
-1" OR 2+260-260-1=0+0+0+1 --
|
17*if(now()=sysdate()
|
sleep(15)
|
0)
|
170'XOR(17*if(now()=sysdate()
|
sleep(15)
|
0))XOR'Z
|
170"XOR(17*if(now()=sysdate()
|
sleep(15)
|
0))XOR"Z
|
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
|
17-1; waitfor delay '0:0:15' --
|
17-1); waitfor delay '0:0:15' --
|
17-1 waitfor delay '0:0:15' --
|
17fbJv0bsw'; waitfor delay '0:0:15' --
|
17-1 OR 878=(SELECT 878 FROM PG_SLEEP(15))--
|
17-1) OR 154=(SELECT 154 FROM PG_SLEEP(15))--
|
17-1)) OR 612=(SELECT 612 FROM PG_SLEEP(15))--
|
17bfqmiJTq' OR 483=(SELECT 483 FROM PG_SLEEP(15))--
|
172AZ3mfd5') OR 672=(SELECT 672 FROM PG_SLEEP(15))--
|
176XDCahQJ')) OR 828=(SELECT 828 FROM PG_SLEEP(15))--
|
17*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
|
15)
|
17'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
|
15)||'
|
17
|
17'"
|
17'"%2527%2522\'\"
|
@@6I2gi
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
|
17
December 9, 2008
13:09
DataSpaces Bulletin: December issue now online!
The highly anticipated December 2008 issue of the DataSpaces Bulletin is now available! This month...
under category:
ODBC
|
JDBC
|
ADO.NET
|
Industry News
|
Tips & Tricks
|
Demos & Tutorials
January 4, 2005
12:19
IBM Flexes XML Muscle
Here is another article titled "IBM Flexes XML Muscle" that covers the same general theme:...
under category:
ODBC
|
JDBC
|
ADO.NET
|
Tips & Tricks
|
Demos & Tutorials
May 17, 2004
20:41
Preventable SQL DBMS Vulnerabilities
Here are some excerpts (inlined) with my comments (outlined)
under category:
ODBC
|
JDBC
|
ADO.NET
|
Tips & Tricks
|
Demos & Tutorials
January
February
March
April
May
June
July
August
September
October
November
December
2003
2004
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
Sun
Mon
Tue
Wed
Thu
Fri
Sat
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
<
today
Tag Cloud
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
-1 OR 2+178-178-1=0+0+0+1 --
-1 OR 2+206-206-1=0+0+0+1
-1" OR 2+260-260-1=0+0+0+1 --
-1' OR 2+190-190-1=0+0+0+1 or 'fgB6ITye'='
-1' OR 2+34-34-1=0+0+0+1 --
0)
0))XOR"Z
0))XOR'Z
15)
15)||'
17
17'"
17'"%2527%2522\'\"
17'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
17*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
17*if(now()=sysdate()
17-1 OR 878=(SELECT 878 FROM PG_SLEEP(15))--
17-1 waitfor delay '0:0:15' --
17-1) OR 154=(SELECT 154 FROM PG_SLEEP(15))--
17-1)) OR 612=(SELECT 612 FROM PG_SLEEP(15))--
17-1); waitfor delay '0:0:15' --
17-1; waitfor delay '0:0:15' --
170"XOR(17*if(now()=sysdate()
170'XOR(17*if(now()=sysdate()
172AZ3mfd5') OR 672=(SELECT 672 FROM PG_SLEEP(15))--
176XDCahQJ')) OR 828=(SELECT 828 FROM PG_SLEEP(15))--
17ZzOPEB1d
17bfqmiJTq' OR 483=(SELECT 483 FROM PG_SLEEP(15))--
17fbJv0bsw'; waitfor delay '0:0:15' --
@@6I2gi
business
natural-language
odbc
rails
ruby
search
sleep(15)
web2.0
webdevelopment
Running on Linux platform