![Waraxe IT Security Portal](themes/Helius/images/logo.jpg) |
|
![](themes/Helius/images/7px.gif) |
![](themes/Helius/forums/images/top_left.gif) |
Menu |
![](themes/Helius/forums/images/top_right.gif) |
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
![](themes/Helius/forums/images/top_left.gif) |
User Info |
![](themes/Helius/forums/images/top_right.gif) |
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 77
Members: 0
Total: 77
|
|
|
|
|
![](themes/Helius/forums/images/top_left.gif) |
Full disclosure |
![](themes/Helius/forums/images/top_right.gif) |
|
|
![](themes/Helius/images/top_left.gif) |
|
![](themes/Helius/images/top_right.gif) |
![](themes/Helius/forums/images/logo1.gif) |
|
![](themes/Helius/forums/images/logo2.gif) |
IT Security and Insecurity Portal |
|
![](themes/Helius/forums/images/top_left.gif) |
Inject an ORDER BY |
![](themes/Helius/forums/images/top_right.gif) |
Posted: Mon Apr 19, 2010 11:52 am |
|
|
golumgolum |
Beginner |
![Beginner Beginner](modules/Forums/images/ranks/rang1.gif)
![](modules/Forums/images/avatars/gallery/blank.gif) |
|
Joined: Apr 19, 2010 |
Posts: 3 |
|
|
|
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/post_corner.gif) |
|
Hi everybody, I'm a newbie in SQL Injection, and I have a question for you.
My url : Code: | www.***.php?tri=REF |
When I trie to inject for exemple Code: | www.***.php?tri=10' |
We can see this result : Code: | SELECT * FROM marches WHERE ETAT_OFFRE=2 order by 10\' DESC limit 0,5) |
So my injection goes in the order by ...
And the UNION technic is impossible.
I saw some technics like : Code: | tri=1, (SELECT (CASE WHEN (1=1) THEN 1 ELSE SHOW END)) |
but I don't understand a lot.
so, If you have an idea to help, tell me. ![Very Happy](modules/Forums/images/smiles/icon_biggrin.gif) |
|
|
|
|
Posted: Mon Apr 19, 2010 4:45 pm |
|
|
vince213333 |
Advanced user |
![Advanced user Advanced user](modules/Forums/images/ranks/rang4.gif)
![](https://www.waraxe.us/images/blank.gif) |
|
Joined: Aug 03, 2009 |
Posts: 737 |
Location: Belgium |
|
|
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/post_corner.gif) |
|
have a look here:
Code: | http://www.bonsai-sec.com/blog/index.php/not-the-average-sql-injection/ |
The bottom part is what you're looking for ![Smile](modules/Forums/images/smiles/icon_smile.gif) |
|
|
|
|
Posted: Mon Apr 19, 2010 7:56 pm |
|
|
golumgolum |
Beginner |
![Beginner Beginner](modules/Forums/images/ranks/rang1.gif)
![](modules/Forums/images/avatars/gallery/blank.gif) |
|
Joined: Apr 19, 2010 |
Posts: 3 |
|
|
|
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/post_corner.gif) |
|
Thanks a lot
![Very Happy](modules/Forums/images/smiles/icon_biggrin.gif) |
|
|
|
|
www.waraxe.us Forum Index -> General discussion
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|