Please ask questions ONLY in this topic.

[Karate-Boy]

Yeah..It doesn't work Are you're sure this is the right injection??

KK

[Hunt21]

You're on the right track thinking unions but don't be so complex with your query. Think about what you are trying to accomplish, don't add extras.

[c24lightning]

Hi there,

I tried the following:

SELECT * FROM `email` ORDER BY `email`;
SELECT * FROM `products` WHERE `category`=`'1' AND `category`='2' UNION SELECT * FROM `email` ORDER BY 'email'

Am I on the right track.

J

You've got the idea... Keep trying.

[c24lightning]

Make sure you're sending it via the old message system, not the phpBB Message Center.

[c24lightning]

well, got 9 mail addresses but what to do with them?

Make sure you send the message via the old message center, not the phpBB Message Center. Also, make sure that you have the right username to send it to

[Karate-Boy]

It doesn't do anything with that injection...can anyone help me please????

[Karate-Boy]

Can somebody help me to receive the e-mails? I know it must be done with a SQL Injection, but nothing works

[Karate-Boy]

You must send the message in the HTS Message Center (left, under Skin Chooser).
I know that, but does anyone know how I get the e-mails, nothing works

[Damascus2k8]

You must send the message in the HTS Message Center (left, under Skin Chooser).
I know that, but does anyone know how I get the e-mails, nothing works

Read up on SQL Injection (google)

And i believe there is an article on this one somehere on HTS, if its still there.

[Damascus2k8]

Can somebody help me to receive the e-mails? I know it must be done with a SQL Injection, but nothing works

If you are doing it right, the page should come up with what looks like invalid/blank images, so just check the page source for your answers.