Você pode gostar...
-
search) union all select null,null,null,null,null-- jsij
-
search\') union all select null,null,null,null,null,null-- dbht
-
search and 3022=3022
-
search and 4397=(select 4397 from pg_sleep(5))
-
cacetes dois
-
search union all select null,null,null,null,null,null,null,null-- ymco
-
search%\' and 3772=3772 and \'%\'=\'
-
search\') and sleep(5) and (\'mnqp\'=\'mnqp