Reading Between the Lines - Security Bullitains

[droby10]

Now I take it to mean that if you execute an SQL command with a call to OpenRowSet() you could conceivably execute more SQL commands

you could do this...but the real issue is shellcode not extended or embedded sql commands.