Questions tagged [mariadb]
MariaDB is an SQL database server.
0
votes
1answer
121 views
Is it secure to store my mysql password in a const std::string?
I am implementing a C++ server with a mariadb backend. I have to access my database and I do so using the mariadbpp (its c++ connector). Though I can use mysql_config_editor and store the passwords in ...
1
vote
2answers
348 views
SQL Injection on MariaDB
I am trying to exploit (legally) a MariaDb database with an SQLi vulnerability.
I have identified the vulnerability here...
/?o=1&page=app
The o=* is vulnerable and produces the following error....
0
votes
0answers
103 views
Exploiting MairaDB Sql Injection with procedure analyse and extractvalue()
I am testing a sql injection to a website. And spending several hours i just become to get the version of the database.
test.com/abc.php?query=1&limit=3 procedure analyse(extractvalue(rand(),...
1
vote
2answers
296 views
SQL-injection, unable to get it to work!
I've recently found a SQL-injection vulnerability in one of our web applications. I've been able to exploit this SQLi, but only able to extract some very basic information. I'm not an expert pentester ...
0
votes
1answer
488 views
SQl Injection MariaDB
Im found a sql query that is injectable below
"car_info = query("select models, color, running from cars where manual = 1 AND UID = '{}' LIMIT 1".format(uid))")
Where '{}' is the point of injection.
...
0
votes
1answer
354 views
SQL inject MariaDB with SQLMAP
I'm fairly new to sqlmap but I have tried a lot of attacks and have been successful except for this one attack that I have tried. SQLMAP won't detect this nor try to inject an error like this.
So how ...
0
votes
1answer
31 views
Linking mail server with application database
I have a web application running on node.js, backed by a MongoDB database which stores user data etc... I'd like to offer my users an email account, so I've set up a mail server using Postfix, dovecot,...
3
votes
1answer
563 views
Are MariaDB's encryption and compression functions secure?
MariaDB [(none)]> SET @key_str = SHA2('Is it secure?',512);
Query OK, 0 rows affected (0.00 sec)
MariaDB [(none)]> SET @crypt_str = AES_ENCRYPT('cleartext',@key_str);
Query OK, 0 rows affected (...
2
votes
4answers
4k views
Simple SQL injection to bypass login in MariaDB
I'm trying out SQL Injection on my localhost. I have a simple HTML form, with a username, password and a submit button. So after clicking on the submit, user is redirected from login.html to a page ...
-1
votes
1answer
415 views
Is it true that blind SQL injection does not work on MariaDB?
I was told by someone on the network that MariaDB was not susceptible to blind SQL injection. I was not aware of this. Can anyone elaborate? I am using it on my server and was told not to switch to ...
