kbt0000 |
Beginner |

 |
|
Joined: Sep 05, 2012 |
Posts: 1 |
|
|
|
 |
 |
 |
|
One of ways to add priviledges to user in mysql is to use grant command. For example in order to add all priviledges use this syntax:
grant all priviledges on datbase to user
But i do not know how to use this command in sql injection with concrete link. For example, i inject as follow:
http://site.com/shop.php?id=2&sid=3 grant all priviledges on hunterde_dev to hunterde_dev@localhost--
But i receive a syntax error. So does anyone know how to use this command in sql injection?Or anyone know how to add priviledges or escalate priviledges to the user whom we connect to the database on network with, please tell me. Thank in advance |
|