Interesting read, the only thing that I somewhat disagree with is how the details at the bottom of the first page indicate a SQL injection attack. I would think that it would depend on the specifics of the web service implementation. Or am I missing something here?

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/infocus/1879/719#719