Welcome to HBH! If you have tried to register and didn't get a verification email, please using the following link to resend the verification email.

Noob sql injection question


ghost's Avatar
0 0

Ok so this is my first time performing an SQL injection, I found a site that is vulnerable. I did the ORDER BY command to find the number of colums on the page and that came out to be 4. Ok, so then I tried to use the UNION SELECT command to find the names of the tables and i keep receving this error:

Microsoft OLE DB Provider for ODBC Drivers error '80040e14'

[Microsoft][ODBC SQL Server Driver][SQL Server]All queries in an SQL statement containing a UNION operator must have an equal number of expressions in their target lists.

/industry/industry.asp, line 13

I was wondering if anyone would be able to give me a little help on this one. -Thanks


DeafCode's Avatar
root@Alpha.Oddities
0 0

im not really good at this but try

UNION SELECT NULL,NULL,NULL,NULL

again im not good at SQL so this could be wrong but there you go


ghost's Avatar
0 0

Thanks for the help man, it was my mistake i had the wrong number of tables.


DeafCode's Avatar
root@Alpha.Oddities
0 0

did it work??