+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: SQL Syntax Error - error based inection possible? (/showthread.php?tid=6240552)
SQL Syntax Error - error based inection possible? - White Hat - May 1, 2023
Need someone who's experienced in SQL Injection to see if a site is vulnerable.
When you make a post on the site and delete the post right after I get a
"General Error [mysql] You have an error in your SQL Syntax; check manual that corresponds to your MySQL server version....."
Willing to compensate.
RE: SQL Syntax Error - error based inection possible? - pankb - May 1, 2023
yes it may be vulnerable to error based sqli
RE: SQL Syntax Error - error based inection possible? - source - May 1, 2023
what is the actual SQL query that is generating the error. If the query includes user input that has not been properly sanitized, it could be vulnerable to SQL injection
RE: SQL Syntax Error - error based inection possible? - Money- - May 2, 2023
PM me the site , I wana have a look and play around a little.
RE: SQL Syntax Error - error based inection possible? - Stunner - May 2, 2023
Pm me this i'm willing to take a look
RE: SQL Syntax Error - error based inection possible? - Error22 - May 17, 2023
drop url lets i check for you
RE: SQL Syntax Error - error based inection possible? - night4pe - Jun 30, 2023
(May 1, 2023 12:36 PM)White Hat Wrote: Need someone who's experienced in SQL Injection to see if a site is vulnerable.
When you make a post on the site and delete the post right after I get a
"General Error [mysql] You have an error in your SQL Syntax; check manual that corresponds to your MySQL server version....."
Willing to compensate.
it may be vulnerable in the sqli.
if so, you can use sqlmap with option --technique=E.
good bye.