====== Hacking- SQL Injection - MySQL - Obtain version and other info ======

Version of database and more details for SQL Server.

It's a constant.

You can just select it like any other column, you don't need to supply table name.

Also, you can use insert, update statements or in functions.

<code sql>
select @@version

INSERT INTO members(id, user, pass) VALUES(1, ''+SUBSTRING(@@version,1,10) ,10)
</code>