  | 
        
  | 
   
 
    
        
      
          | 
  
  
  
    
    
        
	  | 
	Menu | 
	  | 
 
 
    
     
     
     
      
       
       
        
         
         
          
           
						 |  
						 Home |  
 |   |  
						 |  
						 Discussions |  
 |   |  
						 |  
						 Tools |  
 |   |  
						 |  
						 Affiliates |  
 |   |  
						 |  
						 Content |  
 |   |  
						 |  
						 Info |  
 |   |    | 
            
          
         | 
       
     
    | 
    
   
   | 
   
 
 | 
   
 
  
    
    
        
	  | 
	User Info | 
	  | 
 
 
    
     
     
     
      
       
       
        
         
         
          
             Membership: 
  Latest: MichaelSnaRe 
  New Today: 0 
  New Yesterday: 0 
  Overall: 9144 
 
  People Online:
 
  Visitors: 126 
  Members: 0 
  Total: 126 
 | 
            
          
         | 
       
     
    | 
    
   
   | 
   
 
 | 
   
 
  
    
    
        
	  | 
	Full disclosure | 
	  | 
 
 
    
 | 
   
 
 | 
  
    
        
	  | 
	 | 
	  | 
 
 
    
        
          
              
                
                    
                      
                          
                            
                            
	
	
		  | 
		 | 
	 
	
		  | 
		IT Security and Insecurity Portal | 
	 
	 
	 | 
 
 
 
	  | 
	Need Help | 
	  | 
 
 
	
	
		 Posted: Wed Jun 26, 2013 10:57 am | 
		      | 
	   | 
 
	
	
		
		
			
			
				
				| cr4ps |  
				| Advanced user |  
				 
   |  
				 |  
				| Joined: May 06, 2009 |  
				| Posts: 91 |  
				 |  
				  | 
			 
			 
 
  | 
			  | 
		 
		
			  | 
			  | 
		 
		 
 
  | 
		
		
			hello waraxe... Razz
 
hello all... Razz
 
 
what can i do with this Error  : 
 
 
 	  | Code: | 	 		  | Warning: mysql_result(): Unable to jump to row 0 on MySQL result index 8 in /site/www/XXXX/karaoke/carte.php on line 52 Warning: mysql_result(): Unable to jump to row 0 on MySQL result index 8 in /site/www/netgasy/karaoke/carte.php on line 53 Warning: mysql_result(): Unable to jump to row 0 on MySQL result index 8 in /site/www/netgasy/karaoke/carte.php on line 54  | 	 
  | 
		 
		  | 
	 
	
		 | 
	 
	  | 
 
	 | 
 
 
	
	
		 Posted: Tue Jul 09, 2013 3:52 am | 
		      | 
	   | 
 
	
	
		
		
			
			
				
				| OrionEinfold |  
				| Beginner |  
				 
   |  
				 |  
				| Joined: Jul 08, 2013 |  
				| Posts: 4 |  
				 |  
				  | 
			 
			 
 
  | 
			  | 
		 
		
			  | 
			  | 
		 
		 
 
  | 
		
		
			mysql_result() could be secured if GET parameter was casted to int, therefore will just use the numeric part and strip off anything else.. which is a bad news for you.
 
 
To make a test, Try this:
 
 
 
 
 
 
Are you able to see SQL error messages? If so, then try this:
 
 
 	  | Code: | 	 		  page.php?ID=0%
 
page.php?ID=%0
 
page.php?ID=%0%--+
 
page.php?ID=%0%/* | 	 
  | 
		 
		  | 
	 
	
		 | 
	 
	  | 
 
	 | 
 
 
	
	www.waraxe.us Forum Index -> Sql injection 
	
	
		
			You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum 
		 | 
		
			All times are GMT 
			Page 1 of 1
			 
			
		 | 
	 
	 
	 | 
 
	| 
	 | 
 
 
  
Powered by phpBB © 2001-2008 phpBB Group
 
  
 
 
 | 
                           
                         
                         | 
                     
                    | 
               
              | 
         
       
       | 
   
  | 
 
 
 |