KGIS - Knoxville Geographic Information System
This post will be coming tomorrow. I had a good one lined up and then I got distracted by a minor security flaw in the KGIS website. More details to come tomorrow.
Update: I contacted KGIS@KGIS.org and have not heard back from them. So I’ll assume that this isn’t a big deal and explain the security flaw I mentioned last night in passing. The exploit is a simple and very common SQL Injection technique. Since this blog is about Knoxville and not about SQL I’ll skim over most of the details save for a few.
Before I do that let me first make my original post. KGIS.org is the coolest county/city owned and maintained website in Knoxville for quite a few reasons. The first reason is because it is one of the most heavily skinned and customized DotNetNuke sites that I have seen on the net.
In addition, it has some really cool information available online that is easy to navigate. For instance, if you are looking to buy a house in Knoxville or you want to find out how much your neighbor or friend paid for their house, you can do that with the Owner Card application.
If you want to look at an interactive map of the new school zones, you can do that and view an assortment of other maps using KnoxNetWhere. Finally, you can use the Property Map and Details Report which will plot your property lines and give you all kinds of other interesting data about your land.
I’m going to let you explore the bunches of other maps and information they have at KGIS.org so I can get on with explaining the security exploit I mentioned last night.
**EDITED - KGIS informed me that they are patching the exploit and requested that I not publish the security flaw to which I kindly agreed **
I haven’t had time to determine how serious of a security flaw this particular exploit is causing. It appears that the variable is being passed into a stored procedure which will significantly decrease the vulnerability as it acts like a filter, but I would probably advise them to get it patched up none the less since it is a 15 minute or less fix.
Knoxville Real Estate is quickly becoming a hot commodity for many developers and home owners. Every year more people are moving to Knoxville Tennessee, some come for the great University of Tennessee, others are here for the nearby Oak Ridge National Laboratory and many of them are attracted by the beautiful Smokey Mountains.