Você pode gostar...
loira gostosa
search union all select null,null,null,null,null,null-- cgcl
search%\' order by 1#
search\' and sleep(5) and \'utnr\'=\'utnr
search and 3003=3003
search%\' and 9873=5965 and \'%\'=\'
search\' waitfor delay \'0:0:5\' and \'gyer\'=\'gyer
search) union all select null-- cjer