Waraxe IT Security Portal
Login or Register
July 7, 2026
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 271
Members: 0
Total: 271
Full disclosure
Whistleblowersoftware.com : confidentiality and anonymity leakage to third parties
OpenBlow Multiple Deanonymization Vulnerabilities
Whistlelink: Site-access password exposed in web server access logs via GET query string
APPLE-SA-06-29-2026-3 Safari 26.5.2
APPLE-SA-06-29-2026-2 macOS Tahoe 26.5.2
APPLE-SA-06-29-2026-1 iOS 26.5.2 and iPadOS 26.5.2
pwnlift: symlink following and TOCTOU in privileged uploadhandler allow arbitrary file write as root
[KIS-2026-12] Control Web Panel <= 0.9.8.1224 (userRes) SQLInjection Vulnerability
[fulldis] CVE-2026-58451 - Horde Groupware IMP path traversalvuln
Samsung Galaxy Buds – Zero-Click HFP/A2DP Takeover via L2CAP Session Preemption (Vendor Response: Working as Intended)
Asterisk Security Release 23.4.1
Asterisk Security Release 22.10.1
Asterisk Security Release 21.12.3
Asterisk Security Release 20.20.1
Certified Asterisk Security Release certified-22.8-cert3
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> Sql injection -> Evading sql-injection filters
Post new topicReply to topic View previous topic :: View next topic
Evading sql-injection filters
PostPosted: Mon Mar 06, 2006 10:03 pm Reply with quote
Someone
Beginner
Beginner
Joined: Mar 06, 2006
Posts: 1




how to use this sql-injection: http://localhost/nuke78p/?kala=p0hh+UNION+ALL+SELECT+1,2,3,4,5+FROM+ppp/%2aad_click

any example ?
View user's profile Send private message
Re: Evading sql-injection filters
PostPosted: Wed Mar 08, 2006 2:36 am Reply with quote
waraxe
Site admin
Site admin
Joined: May 11, 2004
Posts: 2407
Location: Estonia, Tartu




Someone wrote:
how to use this sql-injection: http://localhost/nuke78p/?kala=p0hh+UNION+ALL+SELECT+1,2,3,4,5+FROM+ppp/%2aad_click

any example ?


Nop, this is not an actual exploit. This advisory is meant to be as helping source for other exploits creation. I mean, if someone for example finds an sql injection in some $hitty 3-rd party module, written by some dumba$$ wannabe-programmer (let's face the truth, there are very few sql injections left in actual nuke engine) and now we want to use it with GET request - b00m - and sql injection filter will slap you down. So there comes help from my advisory. You can modify exploit string a little bit and ... it will work Very Happy
View user's profile Send private message Send e-mail Visit poster's website
Evading sql-injection filters
www.waraxe.us Forum Index -> Sql injection
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT
Page 1 of 1

Post new topicReply to topic


Powered by phpBB © 2001-2008 phpBB Group



PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.035 Seconds