SQL general anti-injection system asp edition plugging one-sentence vulnerability Exploitation

A friend in the group called this evening to watch a website. There was an SQL injection-resistant file, but it was found that the wrong file sqlin. asp was recorded.

 

Now that the record is recorded, check its record file.

 

So I want to construct an asp statement and write it in one sentence. The previous several unencrypted statements fail, so I wrote an encrypted one.

When reading the entire batch, there is always a temporary encryption Password a (encrypted by ANSI-> Unicode)

Submit and 1 = adjust the number of rows within the specified region.

 

Http://www.bkjia.com/sqlin. asp kitchen knife connection, successful

 
 

From sentiment blog