SQL injection attack, querying the database type and version on MySQL and Microsoft

https://portswigger.net/web-security/sql-injection/examining-the-database/lab-querying-database-version-mysql-microsoft

Level: Practitioner

  • To get the version of the MySQL database we just need to change a single space when we enumerate the columns with NULL spaces.

  • In one of the following NULL spaces replace it with @@version.

PreviousSQL injection attack, querying the database type and version on OracleNextSQL injection attack, listing the database contents on non-Oracle databases

Last updated