SQL Injection Attacks and Defense - 2009

Endnotes
Exploiting the Operating System • Chapter 6 315
1. Balaji Rathakrishnan et al. “Using CLR Integration in SQL Server 2005.” Microsoft
Corporation, http://msdn.microsoft.com/en-us/library/ms345136.aspx (accessed
February 12, 2009).
2. {}, and Hardbeat. “How we defaced www.apache.org.” http://www.dataloss.net/papers/
how.defaced.apache.org.txt (accessed February 12, 2009).
3. Foller, Antonin. “Custom xp_cmdshell, using shell object.” Motobit Software,
http://www.motobit.com/tips/detpg_cmdshell/ (accessed February 6, 2009).
4. Sarsfield, Brad, and Srik Raghavan. “Overview of Native XML Web Services for
Microsoft SQL Server 2005.” Microsoft Corporation, http://msdn.microsoft.com/
en-us/library/ms345123(SQL.90).aspx (accessed February 6, 2009).