12Eki
Blind SQL injection in sort direction
I have an SQL injection in a query where I control the sort direction parameter i.e: SELECT * from x where y=y ORDER BY COLUMN_NAME [SORT_DIRECTION]
When I control the SORT_DIRECTION, which is normally ASC or DESC, how do I turn this into a blind SQL injection?
