|
|
|
|
Menu |
|
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
|
User Info |
|
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 48
Members: 0
Total: 48
|
|
|
|
|
|
Full disclosure |
|
|
|
|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
help - SELECT command denied to user |
|
Posted: Fri Jul 17, 2009 3:26 pm |
|
|
cklevo |
Beginner |
|
|
Joined: Jul 17, 2009 |
Posts: 3 |
|
|
|
|
|
|
|
Hi
What should I do to bypass SELECT command denied to user
I tried encoding select didn't work also used HEX and UNHEX also didn't work
Please help me |
|
|
|
|
Posted: Fri Jul 17, 2009 4:42 pm |
|
|
waraxe |
Site admin |
|
|
Joined: May 11, 2004 |
Posts: 2407 |
Location: Estonia, Tartu |
|
|
|
|
|
|
This error message states, that current mysql user does not have SELECT privileges against specific database, table or column. There is nothing you can do about it. You must find a way to impersonate other mysql user with needed privileges or try accessing mysql data files directly. |
|
|
|
|
Posted: Fri Jul 17, 2009 9:31 pm |
|
|
cklevo |
Beginner |
|
|
Joined: Jul 17, 2009 |
Posts: 3 |
|
|
|
|
|
|
|
Thanks Waraxe, I thought I can manupilate it or go around it |
|
|
|
|
Posted: Fri Jul 17, 2009 9:39 pm |
|
|
cklevo |
Beginner |
|
|
Joined: Jul 17, 2009 |
Posts: 3 |
|
|
|
|
|
|
|
by the waraxe I can get the DB name by using databse(), also the version which is 4.0.27 and the user name using user() does this indicate anything to you but when I use from mysql.user it gives the select access denied anyway if anything I can do please let me know |
|
|
|
|
www.waraxe.us Forum Index -> Sql injection
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|