You dont listen at all. No more help from me.
Printable View
You dont listen at all. No more help from me.
Heh...pot, kettle, black? See my earlier answer to your post ;)Quote:
Originally Posted by oofki
For actual exploit examples that prove/show what is being done is correct (ie, # of cols and types are what is important, not what is being selected):
http://www.milw0rm.com/exploits/5329
http://www.milw0rm.com/exploits/5318
http://www.milw0rm.com/exploits/5310
etc, etc, etc
Sorry shad0w7, not sure why it is failing, what you have should in most cases work...maybe there is another way to skin the cat (ie, not using union select).
ok, thanks anyway guys
Have you tried it without any text between the commands?
productdisplay.asp?idProduct=-1 UNION SELECT 1,2 FROM users--
I thought it was that way working with asp