Vulnerability Development mailing list archives

Re: SQL Command Insertion & Execution in Visual FoxPro


From: Franklin DeMatto <franklin.lists () qDefense com>
Date: Wed, 07 Aug 2002 17:15:07 -0400

I'm realizing now that it would need to be done with one of the functions that foxpro allows through odbc
This means no commands, and only certain functions
Does anyone have a way?  I can't find any funcs that are useful
Is there a way to insert a second command in the same statement (like with ; in SQL Server)?
This would allow using the DO command, which is supported by ODBC

At 02:01 PM 8/7/2002 -0400, you wrote:
Shell commands can be executed through insertion in a Jet Database through |shell("cmd...:)| and in SQL Server through xp_cmdshell

Can they be done in Visual FoxPro?  How?


Franklin DeMatto
Senior  Analyst, qDefense Penetration Testing
http://qDefense.com
qDefense: Making Security Accessible


Current thread: