Hello guys,
Okay forget about my SQL INJECTION QUESTION, do you know that is it possible to have something inside the ACCESS DB like stored proc in SQL?( in this case i’m looking for something looks like MASTER.DBO.XP_CMDSHELL but inside the access?!)
So the question is this, if someone have the injection inside the access db is there any command or procedure to have shell from that DB server ?
Thanks in advance,
Tags: Access, Database, Read, Specialist
June 7th, 2009 at 11:40 pm
In Access, a query is a stored procedure. You write them the same way you write stored procedures in Transact-SQL, and they can take parameters, the same way Transact-SQL does.