Time : 03:34:13
SQLSTATE[42000]: Syntax error or access violation: 1064 You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near ') AND 1=1 UNION ALL SELECT 1,NULL,'<script>alert("XSS")</script>',table_name FRO' at line 1
Raw SQL : SELECT COUNT(*) FROM 2015_post WHERE no > :no AND d_show = :show AND del = :del AND category LIKE :category AND type='A') AND 1=1 UNION ALL SELECT 1,NULL,'<script>alert("XSS")</script>',table_name FROM information_schema.tables WHERE 2>1--/**/; EXEC xp_cmdshell('cat ../../../etc/passwd')#'