Waraxe IT Security Portal
Login or Register
December 13, 2025
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 113
Members: 0
Total: 113
Full disclosure
Multiple Security Misconfigurations and Customer Enumeration Exposure in Convercent Whistleblowing Platform (EQS Group)
8 vulnerabilities in AudioCodes Fax/IVR Appliance
2 vulnerabilities in Egovframe
[REVIVE-SA-2025-005] Revive Adserver Vulnerability
Missing Critical Security Headers in Legality WHISTLEBLOWING
[REVIVE-SA-2025-004] Revive Adserver Vulnerabilities
[REVIVE-SA-2025-003] Revive Adserver Vulnerabilities
[SYSS-2025-059]: Dell computer UEFI boot protection bypass
Re: [FD]: "Glass Cage" – Zero-Click iMessage ? Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885)
APPLE-SA-11-13-2025-1 Compressor 4.11.1
Re: 83 vulnerabilities in Vasion Print / PrinterLogic
Re: [FD]: "Glass Cage" – Zero-Click iMessage ? Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885)
Re: : "Glass Cage" – Zero-Click iMessage ? Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885)
runc container breakouts via procfs writes: CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881
OXAS-ADV-2025-0002: OX App Suite Security Advisory
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index
Search found 5 matches
Need assistance exploiting 'INSERT INTO' post sql injection
PostForum:Sql injection Posted: Wed Jul 06, 2011 2:13 pm Subject: Need assistance exploiting 'INSERT INTO' post sql injection
BlueScreenOfDoom666
Replies: 9
Views: 17910





&nickname=anon&email=abcd@ef.gh&timezone=-12&birthdate=a', '127.0.0.1'); SELECT * from site_infotable --



Query failed:
errorno=1064
error=You have an error in your S ...
Need assistance exploiting 'INSERT INTO' post sql injection
PostForum:Sql injection Posted: Wed Jul 06, 2011 1:51 pm Subject: Need assistance exploiting 'INSERT INTO' post sql injection
BlueScreenOfDoom666
Replies: 9
Views: 17910




If you try:


birthdate=1234


do you get sql error message?

And if you try:


birthdate=abcd


do you see sql error message?


Nope, abcd works just fine. The requests goes through ...
Need assistance exploiting 'INSERT INTO' post sql injection
PostForum:Sql injection Posted: Wed Jul 06, 2011 1:44 pm Subject: Need assistance exploiting 'INSERT INTO' post sql injection
BlueScreenOfDoom666
Replies: 9
Views: 17910




I'm using my own C# application to send a POST request.

The post data I'm sending looks like this:

&nickname=anon&email=abcd@ef.gh&timezone=-12&birthdate=


"&birthdate=" ...
Need assistance exploiting 'INSERT INTO' post sql injection
PostForum:Sql injection Posted: Wed Jul 06, 2011 1:20 pm Subject: Need assistance exploiting 'INSERT INTO' post sql injection
BlueScreenOfDoom666
Replies: 9
Views: 17910




I'm using my own C# application to send a POST request.

The post data I'm sending looks like this:

&nickname=anon&email=abcd@ef.gh&timezone=-12&birthdate=


"&birthdate=" ...
Need assistance exploiting 'INSERT INTO' post sql injection
PostForum:Sql injection Posted: Tue Jul 05, 2011 12:07 am Subject: Need assistance exploiting 'INSERT INTO' post sql injection
BlueScreenOfDoom666
Replies: 9
Views: 17910




INSERT INTO tablename ( field1, field2, field3, exploitable_field, field5 ) VALUES( 'val1', 'val2', 'val3', '??????', 'val5' )


I've been trying to inject a query into "exploitable_field" and grab ...
Page 1 of 1
All times are GMT


Powered by phpBB © 2001-2008 phpBB Group



PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.046 Seconds