![]() ![]() Green: supported, dark gray: not supported, light gray: unknown Language / Database Stacked Query Support Table ![]() This is very useful in every injection point, especially in SQL Server back ended applications.Įnds a query and starts a new one. Will throw a division by 0 error if MySQL version is higher than 3.23.02Įxecuting more than one query in one transaction. You will get the same response if MySQL version is higher than 3.23.02 Will throw an divison by 0 error if MySQL version is higher than 3.23.02 Simply get rid of other stuff at the end the of query. SELECT /*! 32302 1/0, */ 1 FROM tablenameĬlassical Inline Comment SQL Injection Attack Samples Also you can use this to execute some code only if the server is higher than supplied version. If you put a code into this comments it’s going to execute in MySQL only. It’s perfect for detecting MySQL version. This is a special comment syntax for MySQL.
0 Comments
Leave a Reply. |