Hi,

ai have some target (guestbook) here at which i easily can inject SQL. The problem is that it is a UPDATE quere, not a SELECT query. So everything i tried just ends up i some "You have an error in Your SQL ..blablablabl....".

does any1 know some injection strings which work with an UPDATE Query ? I dont want som efinished string just some SQL Keywords a can uise in conjunction with UPDATE.

Thx
ray