explain this sql command to me?

[Original Poster]

hello I am no expert at MySQL, but I am good enough to be a mid level developer (in php). can someone please explain in as much detail as possible this command and what exactly it is doing. its mainly the bit in bold that i am most lost on

 

id=1 UNION ALL SELECT NULL,NULL,CONCAT(0x716d706571,0x4f585472666d69434c70,0x7163737971),NULL,NULL#

[adam7288]

post the whole query

[Original Poster]

post the whole query

that is as much of the query I have access to. it is an SQL injection

[notchinese]

Looks like a memory address.

[Original Poster]

Looks like a memory address.

that actually makes sense, sadly I do not know how to find out more abit annoying trying to google snippet

[Seahorsepip Veteran]

indeed looks like memory acces and stealing all your database info.

 

Edit: 0x4f585472666d69434c70 is a very big decimal number, maybe it's used to crash sql or something like that.

[Seahorsepip Veteran]

Seems like a buffer overflow attack according to below link.

http://stackoverflow.com/questions/4600954/site-has-been-hacked-via-sql-injection