March 31st, 2008 09:30 PM
You dont listen at all. No more help from me.
March 31st, 2008 10:07 PM
Heh...pot, kettle, black? See my earlier answer to your post
Originally Posted by oofki
For actual exploit examples that prove/show what is being done is correct (ie, # of cols and types are what is important, not what is being selected):
etc, etc, etc
Sorry shad0w7, not sure why it is failing, what you have should in most cases work...maybe there is another way to skin the cat (ie, not using union select).
There is only one constant, one universal, it is the only real truth: causality. Action. Reaction. Cause and effect...There is no escape from it, we are forever slaves to it. Our only hope, our only peace is to understand it, to understand the 'why'. 'Why' is what separates us from them, you from me. 'Why' is the only real social power, without it you are powerless.
(Merovingian - Matrix Reloaded)
April 1st, 2008 02:16 PM
April 1st, 2008 05:56 PM
Have you tried it without any text between the commands?
productdisplay.asp?idProduct=-1 UNION SELECT 1,2 FROM users--
I thought it was that way working with asp
Wise men talk because they have something to say;
fools, because they have to say something.
By earthrocker in forum Newbie Security Questions
Last Post: August 5th, 2006, 03:43 PM
By mikester2 in forum Other Tutorials Forum
Last Post: January 31st, 2005, 12:16 PM
By ch4r in forum Other Tutorials Forum
Last Post: January 18th, 2005, 07:20 AM
By CXGJarrod in forum Microsoft Security Discussions
Last Post: July 23rd, 2003, 10:00 PM
By s0nIc in forum AntiVirus Discussions
Last Post: January 27th, 2003, 11:23 AM