Questions about this topic? Sign up to ask in the talk tab.

SQL injection/Target Environments/Mapping/Legacy

From NetSec
Jump to: navigation, search
back to SQL injection


The information_schema database entered the open source community in MySQL version 5 and at the end of PostgreSQL Version 7.3; old and current versions of SQL engines contain their schema information in their administration databases. More information can be found on this by combining techniques listed here with the manuals and documentation.

Access/MSSQL

  • sysobjects table/database (Legacy Access/Jet Engine)
  • msysobjects table/database (Legacy SQL Server CE)
PROCEDURE ANALYSE might come in handy.

MySQL 4

  • MySQL.columns_priv
  • MySQL.tables_priv
  • MySQL.db
It is typical that legacy database versions require privileged access for flexible mapping.
Retrieved from "http://nets.ec/index.php?title=SQL_injection/Target_Environments/Mapping/Legacy&oldid=8111"