Você pode gostar...
-
indo colmek
-
search) union all select null,null,null,null,null,null,null,null,null-- nlqm
-
search union all select null,null,null,null,null,null,null-- mjgi
-
search%\' and 5373=2870 and \'%\'=\'
-
search\' and 6171=2891 and \'mdtj\'=\'mdtj
-
search\' union all select null,null,null,null-- tlgh
-
search%\' union all select null,null,null,null,null#
-
search\' waitfor delay \'0:0:5\' and \'wbtk\'=\'wbtk