semicolon injection for a password passed to create_engine() on pyodbc

also adodbapi, even though this dialect doesn't work

from urllib import quote
from sqlalchemy.engine import url

pw = "aaa;PORT=50001"
u = url.make_url('somedb://db2inst1:%s@192.168.99.100/test' % quote(pw))


from sqlalchemy.connectors import pyodbc
from sqlalchemy.dialects.mssql import adodbapi

d = pyodbc.PyODBCConnector()
print d.create_connect_args(u)


u = url.make_url('somedb://@192.168.99.100/test?user=db2inst1:&password=%s' % quote(pw))
d = adodbapi.MSDialect_adodbapi()
print d.create_connect_args(u)

produces:

[['Server=192.168.99.100;Database=test;UID=db2inst1;PWD=aaa;PORT=50001'], {}]
[['Provider=SQLOLEDB;Data Source=None;Initial Catalog=None;User Id=db2inst1:;Password=aaa;PORT=50001'], {}]

Comments (3)