SQL injection

From Notes_Wiki
Revision as of 23:36, 23 November 2012 by Saurabh (talk | contribs) (Created page with "=SQL injection= For websites that use ASP and Oracle combination, "<tt>' or 1=1 --</tt>" (without double quotes) can be used as username or password for SQL injection.")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

SQL injection

For websites that use ASP and Oracle combination, "' or 1=1 --" (without double quotes) can be used as username or password for SQL injection.