Home page logo
/

pen-test logo Penetration Testing mailing list archives

Re: Quite basic SQL injection question
From: danuxx () gmail com
Date: Tue, 19 Apr 2011 13:56:24 +0000

Did you try with # instead? Make sure to encode it: %23
Sent via BlackBerry from Danux Network

-----Original Message-----
From: Alexandre De Dommelin <adedommelin () tuxz net>
Sender: listbounce () securityfocus com
Date: Mon, 18 Apr 2011 09:51:46 
To: <pen-test () securityfocus com>
Subject: Quite basic SQL injection question

Hi all,

I'm evaluating PHP/Mysql code and I found a problem, in the following code :
<?php
$query="
SELECT *
FROM table1 m JOIN table2 t
$condition
ORDER BY m.field1, t.field2
";
$db->query($query);
?>

I'm able to inject everything I want into $condition, but I can't manage to
make the ORDER clause to be ignored (using -- /* ...), which leads to an sql
error.
I'm sure it's quite stupid but I have to admit that i'm stucked ...

Do you have an idea ?

Bests,

Alex



------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]