About SQL INJECTION ERROR ???

alpha5
10 years ago | edited 10 years ago

0

Hello.
I have a local site; When I run localhost/index.php?id =1 and I added him a sign (‘) like localhost/index.php?id =1’ I get a message following error:

Warning: include() [function.include]: Failed opening ‘’ for inclusion (include_path=‘.:/usr/share/php:/usr/share/pear’) in /srv/web2disk/vhostingProdFiles/localhost/www/index.php on line 151

Do you think a site displaying the sentence above error is vulnerable to SQL injection?

Thank you to answer me please.

[IAmDevil]
10 years ago

0

Well, obviously it does reveal a lot of information i.e the path. That is the most basic and simplest method of checking if the vulnerability of a page to SQLI. Here, maybe this will help.

- @IAmDevil
Its good to be back! :D

dloser
10 years ago

0

That doesn’t look like it’s actually a local site. I sure hope you are not trying to trick us into helping you hack a site… again…

Mugi [Mugiwara27]
10 years ago

0

[quote=“dloser”]
again…
[/quote]
He always search website vulnerable to deface them and because he don’t know anything about vulnerabilities he’s asking us to do it

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘\’‘ at line 1

tl0tr
10 years ago

0

@alpha5 : Which operating system are you using?

Mr. Cyph3r [MrCyph3r]
10 years ago

1

@tl0tr, judging from his posts I think he doesn’t even know this simple thing…