Please enable JavaScript.

Coggle requires JavaScript to display documents.

SQL - Coggle Diagram

- - - - Having determined the number of columns returned by the query and establishing the data type accepted by each column, attackers can proceed with further injection attacks via text input fields
- - - - here request will be like SELECT * FROM products WHERE category = 'Gifts' AND realesed =1
      - try adding ' OR 1=1 --
        
        realesed will equal 0 and will be comented
        
        will retreive more additional data
        
        you can try '--
        
        it means all products will be displayed
      - The restriction released = 1 is being used to hide products that are not released. For unreleased products, presumably released = 0.
      - warning:Take care when injecting the condition OR 1=1 into a SQL query. Although this may be harmless in the initial context you're injecting into, it's common for applications to use data from a single request in multiple different queries. If your condition reaches an UPDATE or DELETE statement, for example, this can result in an accidental loss of data.
- - - - to know number of columns use order by yquery
        
        The first method involves injecting a series of ORDER BY clauses and incrementing the specified column index until an error occurs. For example, assuming the injection point is a quoted string within the WHERE clause of the original query, you would submit:
        
        ' ORDER BY 1--
        
        ' ORDER BY 2--
        
        ' ORDER BY 3--
        
        etc.
        
        ' UNION SELECT NULL--
        
        ' UNION SELECT NULL,NULL--
        
        ' UNION SELECT NULL,NULL,NULL--
    - - query
        
        ' UNION SELECT NULL FROM DUAL--