0

I have question about 500 HTTP ERROR.
In my website for example:

Response HTTP 200

www.example.com/test.php?id=19

And when I add a semicolon (;) to the number I get an error:

Response HTTP 500

www.example.com/test.php?id=19;

Does that have any relation to an SQL injection?

4
  • It occasionally happens that web apps throw 500 when they encounter unexpected chars in the URL. You could check if www.example.com/test.php?id=19&abc=123; still yields the same error although the semicolon now belongs to an unrelated parameter.
    – Arminius
    Nov 14, 2016 at 16:26
  • yes still the same error Nov 14, 2016 at 17:13
  • If that occurs with arbitrary parameters then it's probably not an SQL injection point.
    – Arminius
    Nov 14, 2016 at 17:22
  • Now when I use id=-19 that's give me the same error Nov 14, 2016 at 20:31

1 Answer 1

2

It might - it is promising. A well designed app would either silently remove the ; or would return a proper "bad input" error message. That it blew up (500) is a good sign.

It doesn't necessarily mean that is vulnerable, however - they could be returning 500s in case of bad input, for instance. But it certainly suggests you may want to try some more. Try putting an '19 or sleep(2) = 1' (no quotes) - if it takes 2 seconds longer to respond, you are in like Flynn.

NOTE : this should be on either a site you have been asked to test, one you control or a demo site designed for cracking. Doing this on some else's site could result in charges.

3
  • Hi, thanks for ur response. The site what I have been asked it's website who give with bug bounty challenge Nov 14, 2016 at 15:59
  • When I tried to add ' that change it's on %27 Nov 14, 2016 at 16:04
  • It's ASCII code of ' that's normal.
    – Xavier59
    Nov 14, 2016 at 16:17

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .