Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Error inside Lab

Julian | Last updated: Jan 20, 2022 12:28PM UTC

Hello, Just now I'm with the lab "SQL injection attack, listing the database contents on non-Oracle databases" when execute the payload "'+UNION+SELECT+column_name+NULL+FROM+information_schema.columns+WHERE+table_name='users_xmlwjq'--" it gives me an 500 error I don't know what am I doing wrong. A greeting and thanks

Ben, PortSwigger Agent | Last updated: Jan 20, 2022 02:06PM UTC

Hi Julian, Looks like you are missing a comma after 'column_name' (so your payload would start '+UNION+SELECT+column_name,+NULL+FROM+information_schema.columns.... etc).

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.