fix this error

<script>alert("TEST");</script> [zLKidda]
11 years ago | edited 11 years ago

0

hello
i have nearly been suspended from attending my collage, because of and the qr code, the only thing that saved me was sending the email to collage. please learn the lesson of dont hack your school/collage/work network even if you succeeded the consequences are bigger than that little buzz.

13replies
6voices
253views

0

i am curious of what this error means ?

Cyan Wind [freewind1012]
11 years ago | edited 11 years ago

0

I am not sure you can exploit SQLi in this case. It just a programming flaw because someone did not declare variable or that variable was out of scope.

daMage
11 years ago

0

The error in itself doesn’t say if there exists SQLi or no. The error is that in the code someone is trying to access a variable that hasn’t been set yet. This may occur for example in the case when you don’t get anything from the database and you don’t check if no rows are returned..

TL;DR the bug exists because of sloppy coding.

Additionally it’s bad practice to show detailed error messages to “public” and the admins should update the “customErrors” tag in their web.config


0

thanks :D but i can trigger this error on “php?=int” by adding a “ ‘ ”

SFisher
11 years ago

0

Man! Please! Censor your favourites and the URL!!! XD

*********** [ADIGA]
11 years ago

0

the thing about .net and iis errors is that they mostly show no relation to the error it self…
been working with windows servers for the past 2 years, and 99% of the errors are something you have to guess how to fix ….
like for example if you forgot to upload something to the bin directory you get some class is not defined in the .cs file …. but the cs file has it and the class exists … so guessing all the way.

daMage
11 years ago

0

@zLKidda It can be SQLi vuln, but not necessarily. You could try to confirm it with time-based injections or you could try to make the syntax correct while injecting it.

Just going to leave this here:
If you are going to exploit it (or even try to), you could end up suspended from the school or worse. You should report the bug and ask for (preferably a written) permission to determine how bad it is (read: exploit it to the max).

RedBull
11 years ago

-1

Errors is for viruses.


1

^ Stop talking non-sense, dude.


0

no need to censor the img nothing is valuable on it except the outlook (wow you have my email XD o nooooo) and the URL need credentials :D very few accounts are linked to email shown so its cool :F :p

SFisher
11 years ago

0

Well but that gives info on where you study -> where you live, and I’m sure someone (not me) could SE his way into deeper details… Just saying! :D
Also nice extensions + we use the same theme on Chrome. Yes I’m a wannabe.


0

all the same as being a friend on facebook, scary when you think about it. privacy is dead. and it’s a good theme

SFisher
11 years ago

0

XD
Yes.

You must be logged in to reply to this discussion. Login
1 of 14

This site only uses cookies that are essential for the functionality of this website. Cookies are not used for tracking or marketing purposes.

By using our site, you acknowledge that you have read and understand our Privacy Policy, and Terms of Service.

Dismiss