ORACLE SQL Injection Cheat Sheet - Yorumlar

deniz

deniz — Per, 02 Ara 2010 17:44:21 +0200

can we use httpuritype in sql functions such as length without using select like

length(HTTPURITYPE('http://www.red-database-security.com').getXML())

as in MSSQL queris like len(db_name())

Yasin Özel

Yasin Özel — Cum, 23 Nis 2010 16:47:52 +0200

Birde;
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40 FROM all_tables
Yazdigimda ;
ifade kendisine karþýlýk gelen ifade ile ayný veri türünde olmalýdýr

hatasini veriyor. Neden kaynaklanir bu sorun

Yasin Özel

Yasin Özel — Cum, 23 Nis 2010 16:45:40 +0200

Ferruh abi aynen dedigin gibi yapiyorum ama sanirsam mantiksal operatörlere karsi filitrelenmis.. <> = < > >= <= gibi operatörlen engellenmis. TABLESPACE_NAME = CHR(USERS) yaparken = oldugu için sayfa hata sayfasina atiyor.. "TABLESPACE_NAME = CHR(USERS)" koymayincada

Microsoft OLE DB Provider for ODBC Drivers error '80004005'

[Oracle][ODBC][Ora]ORA-00936: eksik ifade

hatasini veriyor.. Sence ne yapabilirim ?

harsh

harsh — Çar, 10 Mar 2010 13:27:41 +0200

jhello...this is geat expierence /......

rem7ter

rem7ter — Cmt, 22 Kas 2008 08:43:02 +0200

thanks!but not sure that is useful

Deep Power

Deep Power — Per, 16 Eki 2008 16:51:49 +0200

Ferruh abi iyi güzel de ingilizce.Ingilizcem o kadar iyi degildir.En iyisi sen bunu tr ye çevir.Bir lise ogrencisi için zor : )
Selametle...

Ferruh Mavituna

Ferruh Mavituna — Sal, 02 Eki 2007 23:42:22 +0200

Alexandar,
Thanks for your comments. I'm quite new in ORACLE stuff. I updated current list according to your comments.

Alexander Kornbrust

Alexander Kornbrust — Sal, 02 Eki 2007 22:18:19 +0200

Nice list but some of the statements are too complicated:

e.g.
SELECT username, FROM all_users UNION SELECT name, password FROM sys.user$
better: SELECT name, password FROM sys.user$ where type#=1

or
use httpuritype instead of utl_http. utl_http is often removed from public. httpuritype works also and is not flagged by IDS:
SELECT HTTPURITYPE('http://www.red-database-security.com').getXML() FROM DUAL;