This week two new papers on blind sql injection have been released. The first paper was released
by Webcohort goes into detail on
how to detect blind sql injection, and how to carry out an attack. The paper released by Spidynamic's
"SPI Labs" covers similar
information, but also contains example 'fixes' for ASP.NET, and JSP applications.
Blind SQL Injection: Are your web applications vulnerable?, September 2003 (PDF)
– spidynamics
Blindfolded SQL Injection, September 2003 (PDF)
– webcohort
