SRA International interview question

You have gained access to a Web server with a SQL backend. What SQL command could be used to gain access to the SQL database's underlying Operating System?

Interview Answers

Anonymous

8 Feb 2013

EXEC xp_cmdshell 'dir *.exe';

1

Anonymous

24 Sept 2009

Unknown

1