Re: Simple to exploit SQL Injection ?

[Eoin Keary <eoinkeary () gmail com>]

seems like you are using the wrong number of quotes?
like you have an extra one hence the unclosed error
try using an uneven number of quotes like

qwerty' OR '1'='1

as' shutdown --

as' OR 1=1--





On 28/11/05, Jason binger <cisspstudy () yahoo com> wrote:
> I am reviewing a .Net web application. When entering
> xyz for a username and ' for a password into a form I
> receive the following stack trace (extract):
>
> System.Exception: Can't Load DataReader using SQL
> string: 'SELECT * FROM users WHERE username = 'xyz'
> AND password = '''' -- Unclosed quotation mark before
> the character string '''. Line 1: Incorrect syntax
> near '''.
>
> Now I would have thought this would be easy to
> exploit, but I can't bypass the logon page. xyz is a
> valid username. Any ideas?
>
> Cheers
>
>
>
>
> __________________________________
> Yahoo! Mail - PC Magazine Editors' Choice 2005
> http://mail.yahoo.com