|
|
|
|
Menu |
|
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
|
User Info |
|
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 85
Members: 0
Total: 85
|
|
|
|
|
|
Full disclosure |
|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
[SQL Server]Incorrect syntax near the keyword 'union' |
|
Posted: Wed Feb 01, 2006 2:53 pm |
|
|
easy_management |
Regular user |
|
|
Joined: Nov 24, 2005 |
Posts: 12 |
|
|
|
|
|
|
|
url: http://target/sectionID=205/**/or/**/1=1--
always gives the following error:
([SQL Server]Incorrect syntax near the keyword 'or')
even for a non keywords...
It seems that the sql doesn't accept anything after the "where sectionID=205" what would be done before or after this request .
this error was seen in different vulnerable sites.. it means that is not a protection...
Has anybody have an answer to that ... |
|
|
|
|
www.waraxe.us Forum Index -> Sql injection
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|