inj MSSSQL

Discussion in 'PHP' started by en4cer, 11 Oct 2006.

  1. en4cer

    en4cer Elder - Старейшина

    Joined:
    10 Feb 2006
    Messages:
    80
    Likes Received:
    5
    Reputations:
    0
    Значит так:
    film.php?id_kat=1000000000'
    Ответ:
    Warning: odbc_prepare(): SQL error: [Microsoft][Драйвер ODBC Microsoft Access] Строка содержит синтаксическую ошибку в выражении запроса 'zganr =1000000000\' ORDER BY New, id DESC'

    Можно чтонибуть придумать?
     
    #1 en4cer, 11 Oct 2006
    1 person likes this.
  2. guest3297

    guest3297 Banned

    Joined:
    27 Jun 2006
    Messages:
    1,246
    Likes Received:
    639
    Reputations:
    817
    Линк полный.
     
    #2 guest3297, 11 Oct 2006
  3. podkashey

    podkashey С крышкой по жизни!

    Joined:
    18 Jun 2005
    Messages:
    756
    Likes Received:
    351
    Reputations:
    353
    en4cer, поиск по форуму: mssql inj или поиск по information_schema.
     
    #3 podkashey, 11 Oct 2006
  4. en4cer

    en4cer Elder - Старейшина

    Joined:
    10 Feb 2006
    Messages:
    80
    Likes Received:
    5
    Reputations:
    0
    Нихрина шустрые -2 влепили =) Reason?! fck =)
     
    #4 en4cer, 11 Oct 2006
  5. max_pain89

    max_pain89 Eat `em UP!

    Joined:
    11 Dec 2004
    Messages:
    451
    Likes Received:
    140
    Reputations:
    146
    http://injection.rulezz.ru/
     
    #5 max_pain89, 11 Oct 2006
  6. ZaCo

    ZaCo Banned

    Joined:
    20 Jun 2005
    Messages:
    737
    Likes Received:
    336
    Reputations:
    215
    2max_pain89 тут без сплоета нулевой длинны ну никак, ты не то даешь.
    был сайт раньше http://0deXploitsForGoodOdepts.ord/ там были все одей сплоиты... щас накрыли видимо.
     
    #6 ZaCo, 11 Oct 2006
  7. en4cer

    en4cer Elder - Старейшина

    Joined:
    10 Feb 2006
    Messages:
    80
    Likes Received:
    5
    Reputations:
    0
    Шутники одни...
    Эт похоу оказалось не MSSQL а Microsoft JET Database
    пробывал с INFORMATION_SCHEMA result
    C:/interpub/INFORMATION_SCHEMA.dbu не найден =(
     
    #7 en4cer, 11 Oct 2006
    Last edited: 11 Oct 2006
(You must log in or sign up to post here.)