Several months?
IIS has been an insecure piece of shit since its inception. (yes, I understand this one is also the fault of the code being run)
There's no "quick" answer to a generic question about an SQL injection. It could manifest in an almost infinite number of ways.
__________________
Amen
|