I'm new to web penetration testing and when I tried to test a website, I found that when I entered
' in the text box, I would get the following error:
OraOLEDB error '80004005' ORA-01756: quoted string not properly terminated /student/wifi_grievance_submit.asp, line 54
This confirms that there is a SQL injection vulnerability, so I proceeded with the next steps; i.e. entering
' order by 100-- - to see the number of rows. But instead of getting the number of rows, I'm getting a different error.
OraOLEDB error '80040e14' ORA-00917: missing comma /student/wifi_grievance_submit.asp, line 54
Can anyone explain what this error means and how I can get the number of columns?