Syntax in JET not the same as in ODBC
When trying to Inject an SQL command on a site that runs ODBC (just checking vulnerability, not going to do any harm) this runs just fine:
UNION SELECT TOP 1 TABLE_NAME FROM INFORMATION_SCHEMA.TABLES--
But when I try to use it on a site that runs JET it returns me this error:
Microsoft JET Database Engine error '80004005'
Syntax error on the clause FROM.
/encuestas.asp, line 111
I translated the error as it was in spanish.
Should I change the syntax? What should I do?
|
