Search SSWUG.ORG:

DATABASES

Abusing MySQL string arithmetic for tiny SQL injections This is an off-site link.  Please review our Terms of Service for additional information.


(Krzysztof Kotowicz) Today I've found a small nifty trick that may become helpful when exploiting SQL injection vulnerabilities for MySQL. Namely, you can abuse MySQL string typecasting.

Read this article..







comments powered by Disqus