[ajkaro]

Target:
Spoiler (Click to View)http://www.harsh-light.com/

Task:
display version and your name on screen

Proof:
[img]http://www.anonmgur.com/up/6104dffef89afc674b87caa2f3d34060.jpg[/img]

Rules:
use union select based SQli

Level:
very easy, for beginners

Solvers:
- haczord
- GangJokeR
- pankajborah
- kimsonha
- snyper_x3
- lino08
- UnChallengeD

[haczord]

done
[img]http://s17.postimage.org/khesvygi3/Capture.jpg[/img]
thanks for the challenge 🤝

[GangJokeR]

there is also XSS over that site...
http://www.harsh-light.com/quotationally.../script%3E

solved:
http://ufu.co.il/files/sns1jsri68l1j87ogwuw.jpg

[ajkaro]

lol i thought that if you get "The used SELECT statements have a different number of columns" you could only do double query so is there a way to use union based sqli even in those cases?
I managed to do it only with double query, sry...

Spoiler (Click to View)[img]http://desmond.imageshack.us/Himg99/scaled.php?server=99&filename=sol10.png&res=landing[/img]

I don't know what link did you use but regular union select works without problems. I didn't get any "The used SELECT statements have a different number of columns" error.

[MasterBlack]

Thank you good sir, was my fastest yet.

Spoiler (Click to View)
[img]http://anonmgur.com/up/065096841ae18a0ea59e012ad18f63cd.png[/img]


Anyway, off to complete some coursework, yeah 😭