News for hackers. Stuff that matters.

A comment on Select Code_execution from * Using SQLite; (2019).

Re:Select Code_execution from * Using SQLite; (2019) by dilandau on Saturday June 13, 2020 @06:06PM (#23513210)
>have to install a pre-corrupted database.

So basically a nothingburger.

These guys seem like they're just trying to get attention and make a name. I'd say if someone has access to install a pre-corrupted file, code execution is already a given.

[ Parent | on HN ]
Re:Select Code_execution from * Using SQLite; (2019) by ratorx on Saturday June 13, 2020 @08:22PM (#23514033)
SQLite as an Application File Format (2014) https://news.ycombinator.com/item?id=23508923
[ Parent | on HN ]