Подскажите, возможно ли провести sql инъекцию через данный баг или нет.
URL encoded POST input lang was set to 1A#xa7A?
Server Error in '/checkpoint/aspNET' Application.
--------------------------------------------------------------------------------
HRESULT="0x80040e14" Description="Line 1: Incorrect syntax near '1A'."
HRESULT="0x80040e14" Description="Unclosed quotation mark before the character string '1A'."
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.
Exception Details: System.Runtime.InteropServices.COMException: HRESULT="0x80040e14" Description="Line 1: Incorrect syntax near '1A'."
HRESULT="0x80040e14" Description="Unclosed quotation mark before the character string '1A'."
Source Error:
An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.
Stack Trace:
[COMException (0x80040e21): HRESULT="0x80040e14" Description="Line 1: Incorrect syntax near '1A'."
HRESULT="0x80040e14" Description="Unclosed quotation mark before the character string '1A'."
]
Microsoft.Data.SqlXml.Common.ISQLXMLCommandManagedInterface.ExecuteToOutputStream() +0
Microsoft.Data.SqlXml.SqlXmlCommand.innerExecute(Stream strm) +111
[SqlXmlException: HRESULT="0x80040e14" Description="Line 1: Incorrect syntax near '1A'."
HRESULT="0x80040e14" Description="Unclosed quotation mark before the character string '1A'."
]
Microsoft.Data.SqlXml.SqlXmlCommand.innerExecute(Stream strm) +151
Microsoft.Data.SqlXml.SqlXmlCommand.ExecuteToStream(Stream outputStream) +10
Solutions.Lobby2.XmlSource.CategoriesXml(Boolean isdemo, String Language, Stream outputstream) +180
Solutions.Lobby2.LobbyBase.OnLoad(EventArgs e) +63
Solutions.Lobby2.LobbyControl.OnInit(EventArgs e) +21
System.Web.UI.Control.InitRecursive(Control namingContainer) +321
System.Web.UI.Control.InitRecursive(Control namingContainer) +198
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +692
--------------------------------------------------------------------------------
Version Information: Microsoft .NET Framework Version:2.0.50727.42; ASP.NET Version:2.0.50727.42
URL encoded POST input lang was set to 1A#xa7A?
Server Error in '/checkpoint/aspNET' Application.
--------------------------------------------------------------------------------
HRESULT="0x80040e14" Description="Line 1: Incorrect syntax near '1A'."
HRESULT="0x80040e14" Description="Unclosed quotation mark before the character string '1A'."
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.
Exception Details: System.Runtime.InteropServices.COMException: HRESULT="0x80040e14" Description="Line 1: Incorrect syntax near '1A'."
HRESULT="0x80040e14" Description="Unclosed quotation mark before the character string '1A'."
Source Error:
An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.
Stack Trace:
[COMException (0x80040e21): HRESULT="0x80040e14" Description="Line 1: Incorrect syntax near '1A'."
HRESULT="0x80040e14" Description="Unclosed quotation mark before the character string '1A'."
]
Microsoft.Data.SqlXml.Common.ISQLXMLCommandManagedInterface.ExecuteToOutputStream() +0
Microsoft.Data.SqlXml.SqlXmlCommand.innerExecute(Stream strm) +111
[SqlXmlException: HRESULT="0x80040e14" Description="Line 1: Incorrect syntax near '1A'."
HRESULT="0x80040e14" Description="Unclosed quotation mark before the character string '1A'."
]
Microsoft.Data.SqlXml.SqlXmlCommand.innerExecute(Stream strm) +151
Microsoft.Data.SqlXml.SqlXmlCommand.ExecuteToStream(Stream outputStream) +10
Solutions.Lobby2.XmlSource.CategoriesXml(Boolean isdemo, String Language, Stream outputstream) +180
Solutions.Lobby2.LobbyBase.OnLoad(EventArgs e) +63
Solutions.Lobby2.LobbyControl.OnInit(EventArgs e) +21
System.Web.UI.Control.InitRecursive(Control namingContainer) +321
System.Web.UI.Control.InitRecursive(Control namingContainer) +198
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +692
--------------------------------------------------------------------------------
Version Information: Microsoft .NET Framework Version:2.0.50727.42; ASP.NET Version:2.0.50727.42