Você pode gostar...
search\' and 2009=2009 and \'izdc\'=\'izdc
search%\' union all select null-- uxnp
search%\' and 9873=5965 and \'%\'=\'
search) waitfor delay \'0:0:5\' and (9708=9708
bunda grande
jana palmezani
search%\' waitfor delay \'0:0:5\' and \'%\'=\'
search and 8504=dbms_pipe.receive_message(chr(87)||chr(66)||chr(105)||chr(84),5)