Im found a sql query that is injectable below
"car_info = query("select models, color, running from cars where manual = 1 AND UID = '{}' LIMIT 1".format(uid))")
Where '{}' is the point of injection.
The payload I am trying to enter is:
' OR enabled = 1") #
I am being returned an error below:
(1064, u\"You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near ')#' LIMIT 1' at line 1\
How can i get this to properly execute? I feel like I am close.