12 lines
379 B
Text
12 lines
379 B
Text
|
# https://github.com/client9/libinjection/issues/125 HT @d0znpp
|
|||
|
|
|
|||
|
|
"-sqlite_version() UNION SELECT password FROM users- --
|
|||
|
|
1337) INTO OUTFILE ‘xxx’--
|
|||
|
|
123);DROP TABLE users--
|
|||
|
|
) OR (SELECT password FROM users ...
|
|||
|
|
|
|||
|
|
# the following don't fit into the libinjection model and are
|
|||
|
|
# best handled in another layer, at least for now.
|
|||
|
|
#)-sleep(9999
|
|||
|
|
#*/UNION SELECT password FROM users--
|